d6cd8b78f1
* feat: decouple package deps and introduce yarn workspaces * update root directory * fix * fix scripts * fix lint * update path in scripts * remove yarn.lock files from packages * ignore workspace * dummy * dummy * remove comment check * revert workflow changes * ignore ws when installing gh actions * remove log * update path * fix * fix typo
31 lines
1.2 KiB
TypeScript
31 lines
1.2 KiB
TypeScript
import { normalizeLink } from "./url";
|
|
|
|
describe("normalizeLink", () => {
|
|
// NOTE not an extensive XSS test suite, just to check if we're not
|
|
// regressing in sanitization
|
|
it("should sanitize links", () => {
|
|
expect(
|
|
// eslint-disable-next-line no-script-url
|
|
normalizeLink(`javascript://%0aalert(document.domain)`).startsWith(
|
|
// eslint-disable-next-line no-script-url
|
|
`javascript:`,
|
|
),
|
|
).toBe(false);
|
|
expect(normalizeLink("ola")).toBe("ola");
|
|
expect(normalizeLink(" ola")).toBe("ola");
|
|
|
|
expect(normalizeLink("https://www.excalidraw.com")).toBe(
|
|
"https://www.excalidraw.com",
|
|
);
|
|
expect(normalizeLink("www.excalidraw.com")).toBe("www.excalidraw.com");
|
|
expect(normalizeLink("/ola")).toBe("/ola");
|
|
expect(normalizeLink("http://test")).toBe("http://test");
|
|
expect(normalizeLink("ftp://test")).toBe("ftp://test");
|
|
expect(normalizeLink("file://")).toBe("file://");
|
|
expect(normalizeLink("file://")).toBe("file://");
|
|
expect(normalizeLink("[test](https://test)")).toBe("[test](https://test)");
|
|
expect(normalizeLink("[[test]]")).toBe("[[test]]");
|
|
expect(normalizeLink("<test>")).toBe("<test>");
|
|
});
|
|
});
|