/** * @license Copyright (c) 2003-2019, CKSource - Frederico Knabben. All rights reserved. * For licensing, see LICENSE.md or https://ckeditor.com/legal/ckeditor-oss-license */ /* globals window */ import XmlDataProcessor from '../../src/dataprocessor/xmldataprocessor'; import xssTemplates from '../../tests/dataprocessor/_utils/xsstemplates'; import ViewDocumentFragment from '../../src/view/documentfragment'; import { stringify, parse } from '../../src/dev-utils/view'; describe( 'XmlDataProcessor', () => { let dataProcessor; beforeEach( () => { dataProcessor = new XmlDataProcessor(); } ); describe( 'toView', () => { it( 'should return empty DocumentFragment when empty string is passed', () => { const fragment = dataProcessor.toView( '' ); expect( fragment ).to.be.an.instanceOf( ViewDocumentFragment ); expect( fragment.childCount ).to.equal( 0 ); } ); it( 'should convert XML to DocumentFragment with single text node', () => { const fragment = dataProcessor.toView( 'foo bar' ); expect( stringify( fragment ) ).to.equal( 'foo bar' ); } ); it( 'should convert HTML to DocumentFragment with multiple child nodes', () => { const fragment = dataProcessor.toView( '

foo

bar

' ); expect( stringify( fragment ) ).to.equal( '

foo

bar

' ); } ); it( 'should not add any additional nodes', () => { const fragment = dataProcessor.toView( 'foo bar text' ); expect( stringify( fragment ) ).to.equal( 'foo bar text' ); } ); it( 'should allow to use registered namespaces', () => { dataProcessor = new XmlDataProcessor( { namespaces: [ 'foo', 'bar' ] } ); const fragment = dataProcessor.toView( '' ); expect( stringify( fragment ) ).to.equal( '' ); } ); it( 'should throw an error when use not registered namespaces', () => { expect( () => { dataProcessor.toView( '' ); } ).to.throw( Error, /Parse error/ ); } ); it( 'should thrown an error when markup is invalid', () => { expect( () => { dataProcessor.toView( 'missing closing tag' ); } ).to.throw( Error, /Parse error/ ); } ); // Test against XSS attacks. for ( const name in xssTemplates ) { const input = xssTemplates[ name ].replace( /%xss%/g, 'testXss()' ); it( 'should prevent XSS attacks: ' + name, done => { window.testXss = sinon.spy(); dataProcessor.toView( input ); window.setTimeout( () => { sinon.assert.notCalled( window.testXss ); done(); }, 10 ); } ); } } ); describe( 'toData', () => { it( 'should return empty string when empty DocumentFragment is passed', () => { const fragment = new ViewDocumentFragment(); expect( dataProcessor.toData( fragment ) ).to.equal( '' ); } ); it( 'should return text if document fragment with single text node is passed', () => { const fragment = new ViewDocumentFragment(); fragment._appendChild( parse( 'foo bar' ) ); expect( dataProcessor.toData( fragment ) ).to.equal( 'foo bar' ); } ); it( 'should convert HTML to DocumentFragment with multiple child nodes', () => { const fragment = parse( '

foo

bar

' ); expect( dataProcessor.toData( fragment ) ).to.equal( '

foo

bar

' ); } ); } ); } );