SafeHtml_ReplaceTest.java

// Copyright (C) 2009 The Android Open Source Project
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

package com.google.gwtexpui.safehtml.client;

import static com.google.common.truth.Truth.assertThat;

import java.util.Arrays;
import java.util.Collections;
import java.util.List;
import org.junit.Test;

public class SafeHtml_ReplaceTest {
  @Test
  public void replaceEmpty() {
    SafeHtml o = html("A\nissue42\nB");
    assertThat(o.replaceAll(null)).isSameAs(o);
    assertThat(o.replaceAll(Collections.<FindReplace>emptyList())).isSameAs(o);
  }

  @Test
  public void replaceOneLink() {
    SafeHtml o = html("A\nissue 42\nB");
    SafeHtml n =
        o.replaceAll(repls(new RawFindReplace("(issue\\s(\\d+))", "<a href=\"?$2\">$1</a>")));
    assertThat(o).isNotSameAs(n);
    assertThat(n.asString()).isEqualTo("A\n<a href=\"?42\">issue 42</a>\nB");
  }

  @Test
  public void replaceNoLeadingOrTrailingText() {
    SafeHtml o = html("issue 42");
    SafeHtml n =
        o.replaceAll(repls(new RawFindReplace("(issue\\s(\\d+))", "<a href=\"?$2\">$1</a>")));
    assertThat(o).isNotSameAs(n);
    assertThat(n.asString()).isEqualTo("<a href=\"?42\">issue 42</a>");
  }

  @Test
  public void replaceTwoLinks() {
    SafeHtml o = html("A\nissue 42\nissue 9918\nB");
    SafeHtml n =
        o.replaceAll(repls(new RawFindReplace("(issue\\s(\\d+))", "<a href=\"?$2\">$1</a>")));
    assertThat(o).isNotSameAs(n);
    assertThat(n.asString())
        .isEqualTo("A\n<a href=\"?42\">issue 42</a>\n<a href=\"?9918\">issue 9918</a>\nB");
  }

  @Test
  public void replaceInOrder() {
    SafeHtml o = html("A\nissue 42\nReally GWTEXPUI-9918 is better\nB");
    SafeHtml n =
        o.replaceAll(
            repls(
                new RawFindReplace("(GWTEXPUI-(\\d+))", "<a href=\"gwtexpui-bug?$2\">$1</a>"),
                new RawFindReplace("(issue\\s+(\\d+))", "<a href=\"generic-bug?$2\">$1</a>")));
    assertThat(o).isNotSameAs(n);
    assertThat(n.asString())
        .isEqualTo(
            "A\n"
                + "<a href=\"generic-bug?42\">issue 42</a>\n"
                + "Really <a href=\"gwtexpui-bug?9918\">GWTEXPUI-9918</a> is better\n"
                + "B");
  }

  @Test
  public void replaceOverlappingAfterFirstChar() {
    SafeHtml o = html("abcd");
    RawFindReplace ab = new RawFindReplace("ab", "AB");
    RawFindReplace bc = new RawFindReplace("bc", "23");
    RawFindReplace cd = new RawFindReplace("cd", "YZ");

    assertThat(o.replaceAll(repls(ab, bc)).asString()).isEqualTo("ABcd");
    assertThat(o.replaceAll(repls(bc, ab)).asString()).isEqualTo("ABcd");
    assertThat(o.replaceAll(repls(ab, bc, cd)).asString()).isEqualTo("ABYZ");
  }

  @Test
  public void replaceOverlappingAtFirstCharLongestMatch() {
    SafeHtml o = html("abcd");
    RawFindReplace ab = new RawFindReplace("ab", "AB");
    RawFindReplace abc = new RawFindReplace("[^d][^d][^d]", "234");

    assertThat(o.replaceAll(repls(ab, abc)).asString()).isEqualTo("ABcd");
    assertThat(o.replaceAll(repls(abc, ab)).asString()).isEqualTo("234d");
  }

  @Test
  public void replaceOverlappingAtFirstCharFirstMatch() {
    SafeHtml o = html("abcd");
    RawFindReplace ab1 = new RawFindReplace("ab", "AB");
    RawFindReplace ab2 = new RawFindReplace("[^cd][^cd]", "12");

    assertThat(o.replaceAll(repls(ab1, ab2)).asString()).isEqualTo("ABcd");
    assertThat(o.replaceAll(repls(ab2, ab1)).asString()).isEqualTo("12cd");
  }

  @Test
  public void failedSanitization() {
    SafeHtml o = html("abcd");
    LinkFindReplace evil = new LinkFindReplace("(b)", "javascript:alert('$1')");
    LinkFindReplace ok = new LinkFindReplace("(b)", "/$1");
    assertThat(o.replaceAll(repls(evil)).asString()).isEqualTo("abcd");
    String linked = "a<a href=\"/b\">b</a>cd";
    assertThat(o.replaceAll(repls(ok)).asString()).isEqualTo(linked);
    assertThat(o.replaceAll(repls(evil, ok)).asString()).isEqualTo(linked);
  }

  private static SafeHtml html(String text) {
    return new SafeHtmlBuilder().append(text).toSafeHtml();
  }

  private static List<FindReplace> repls(FindReplace... repls) {
    return Arrays.asList(repls);
  }
}