SafeHtml_ReplaceTest.java

// Copyright (C) 2009 The Android Open Source Project
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

package com.google.gwtexpui.safehtml.client;

import org.junit.Test;

import java.util.Arrays;
import java.util.Collections;
import java.util.List;

import static org.junit.Assert.assertEquals;
import static org.junit.Assert.assertNotSame;
import static org.junit.Assert.assertSame;

public class SafeHtml_ReplaceTest {
  @Test
  public void testReplaceEmpty() {
    SafeHtml o = html("A\nissue42\nB");
    assertSame(o, o.replaceAll(null));
    assertSame(o, o.replaceAll(Collections.<FindReplace> emptyList()));
  }

  @Test
  public void testReplaceOneLink() {
    SafeHtml o = html("A\nissue 42\nB");
    SafeHtml n = o.replaceAll(repls(
        new RawFindReplace("(issue\\s(\\d+))", "<a href=\"?$2\">$1</a>")));
    assertNotSame(o, n);
    assertEquals("A\n<a href=\"?42\">issue 42</a>\nB", n.asString());
  }

  @Test
  public void testReplaceNoLeadingOrTrailingText() {
    SafeHtml o = html("issue 42");
    SafeHtml n = o.replaceAll(repls(
        new RawFindReplace("(issue\\s(\\d+))", "<a href=\"?$2\">$1</a>")));
    assertNotSame(o, n);
    assertEquals("<a href=\"?42\">issue 42</a>", n.asString());
  }

  @Test
  public void testReplaceTwoLinks() {
    SafeHtml o = html("A\nissue 42\nissue 9918\nB");
    SafeHtml n = o.replaceAll(repls(
        new RawFindReplace("(issue\\s(\\d+))", "<a href=\"?$2\">$1</a>")));
    assertNotSame(o, n);
    assertEquals("A\n"
        + "<a href=\"?42\">issue 42</a>\n"
        + "<a href=\"?9918\">issue 9918</a>\n"
        + "B"
    , n.asString());
  }

  @Test
  public void testReplaceInOrder() {
    SafeHtml o = html("A\nissue 42\nReally GWTEXPUI-9918 is better\nB");
    SafeHtml n = o.replaceAll(repls(
        new RawFindReplace("(GWTEXPUI-(\\d+))",
            "<a href=\"gwtexpui-bug?$2\">$1</a>"),
        new RawFindReplace("(issue\\s+(\\d+))",
            "<a href=\"generic-bug?$2\">$1</a>")));
    assertNotSame(o, n);
    assertEquals("A\n"
        + "<a href=\"generic-bug?42\">issue 42</a>\n"
        + "Really <a href=\"gwtexpui-bug?9918\">GWTEXPUI-9918</a> is better\n"
        + "B"
    , n.asString());
  }

  @Test
  public void testReplaceOverlappingAfterFirstChar() {
    SafeHtml o = html("abcd");
    RawFindReplace ab = new RawFindReplace("ab", "AB");
    RawFindReplace bc = new RawFindReplace("bc", "23");
    RawFindReplace cd = new RawFindReplace("cd", "YZ");

    assertEquals("ABcd", o.replaceAll(repls(ab, bc)).asString());
    assertEquals("ABcd", o.replaceAll(repls(bc, ab)).asString());
    assertEquals("ABYZ", o.replaceAll(repls(ab, bc, cd)).asString());
  }

  @Test
  public void testReplaceOverlappingAtFirstCharLongestMatch() {
    SafeHtml o = html("abcd");
    RawFindReplace ab = new RawFindReplace("ab", "AB");
    RawFindReplace abc = new RawFindReplace("[^d][^d][^d]", "234");

    assertEquals("ABcd", o.replaceAll(repls(ab, abc)).asString());
    assertEquals("234d", o.replaceAll(repls(abc, ab)).asString());
  }

  @Test
  public void testReplaceOverlappingAtFirstCharFirstMatch() {
    SafeHtml o = html("abcd");
    RawFindReplace ab1 = new RawFindReplace("ab", "AB");
    RawFindReplace ab2 = new RawFindReplace("[^cd][^cd]", "12");

    assertEquals("ABcd", o.replaceAll(repls(ab1, ab2)).asString());
    assertEquals("12cd", o.replaceAll(repls(ab2, ab1)).asString());
  }

  @Test
  public void testFailedSanitization() {
    SafeHtml o = html("abcd");
    LinkFindReplace evil = new LinkFindReplace("(b)", "javascript:alert('$1')");
    LinkFindReplace ok = new LinkFindReplace("(b)", "/$1");
    assertEquals("abcd", o.replaceAll(repls(evil)).asString());
    String linked = "a<a href=\"/b\">b</a>cd";
    assertEquals(linked, o.replaceAll(repls(ok)).asString());
    assertEquals(linked, o.replaceAll(repls(evil, ok)).asString());
  }

  private static SafeHtml html(String text) {
    return new SafeHtmlBuilder().append(text).toSafeHtml();
  }

  private static List<FindReplace> repls(FindReplace... repls) {
    return Arrays.asList(repls);
  }
}