# frozen_string_literal: true require 'rails_helper' require 'email' describe Email::Styles do def basic_fragment(html) styler = Email::Styles.new(html) styler.format_basic Nokogiri::HTML5.fragment(styler.to_html) end def html_fragment(html) styler = Email::Styles.new(html) styler.format_basic styler.format_html Nokogiri::HTML5.fragment(styler.to_html) end context "basic formatter" do it "works with an empty string" do style = Email::Styles.new("") style.format_basic expect(style.to_html).to be_blank end it "adds a max-width to large images" do frag = basic_fragment("") expect(frag.at("img")["style"]).to match("max-width") end it "adds a width and height to emojis" do frag = basic_fragment("") expect(frag.at("img")["width"]).to eq("20") expect(frag.at("img")["height"]).to eq("20") end it "adds a width and height to custom emojis" do frag = basic_fragment("") expect(frag.at("img")["width"]).to eq("20") expect(frag.at("img")["height"]).to eq("20") end it "converts relative paths to absolute paths" do frag = basic_fragment("") expect(frag.at("img")["src"]).to eq("#{Discourse.base_url}/some-image.png") end it "strips classes and ids" do frag = basic_fragment("
") expect(frag.to_html).to eq("
") end end context "html template formatter" do it "works with an empty string" do style = Email::Styles.new("") style.format_html expect(style.to_html).to be_blank end it "attaches a style to h3 tags" do frag = html_fragment("

hello

") expect(frag.at('h3')['style']).to be_present end it "attaches a style to hr tags" do frag = html_fragment("hello
") expect(frag.at('hr')['style']).to be_present end it "attaches a style to a tags" do frag = html_fragment("wat") expect(frag.at('a')['style']).to be_present end it "attaches a style to a tags" do frag = html_fragment("wat") expect(frag.at('a')['style']).to be_present end it "attaches a style to ul and li tags" do frag = html_fragment("") expect(frag.at('ul')['style']).to be_present expect(frag.at('li')['style']).to be_present end it "converts iframes to links" do iframe_url = "http://www.youtube.com/embed/7twifrxOTQY?feature=oembed&wmode=opaque" frag = html_fragment("") expect(frag.at('iframe')).to be_blank expect(frag.at('a')).to be_present expect(frag.at('a')['href']).to eq(iframe_url) end it "won't allow non URLs in iframe src, strips them with no link" do iframe_url = "alert('xss hole')" frag = html_fragment("") expect(frag.at('iframe')).to be_blank expect(frag.at('a')).to be_blank end it "won't allow empty iframe src, strips them with no link" do frag = html_fragment("") expect(frag.at('iframe')).to be_blank expect(frag.at('a')).to be_blank end it "prefers data-original-href attribute to get iframe link" do original_url = "https://vimeo.com/329875646/85f1546a42" iframe_url = "https://player.vimeo.com/video/329875646" frag = html_fragment("") expect(frag.at('iframe')).to be_blank expect(frag.at('a')).to be_present expect(frag.at('a')['href']).to eq(original_url) end end context "rewriting protocol relative URLs to the forum" do it "doesn't rewrite a url to another site" do frag = html_fragment('hello') expect(frag.at('a')['href']).to eq("//youtube.com/discourse") end context "without https" do before do SiteSetting.force_https = false end it "rewrites the href to have http" do frag = html_fragment('hello') expect(frag.at('a')['href']).to eq("http://test.localhost/discourse") end it "rewrites the href for attachment files to have http" do frag = html_fragment('attachment_file.txt') expect(frag.at('a')['href']).to eq("http://try-discourse.global.ssl.fastly.net/uploads/default/368/40b610b0aa90cfcf.txt") end it "rewrites the src to have http" do frag = html_fragment('') expect(frag.at('img')['src']).to eq("http://test.localhost/blah.jpg") end end context "with https" do before do SiteSetting.force_https = true end it "rewrites the forum URL to have https" do frag = html_fragment('hello') expect(frag.at('a')['href']).to eq("https://test.localhost/discourse") end it "rewrites the href for attachment files to have https" do frag = html_fragment('attachment_file.txt') expect(frag.at('a')['href']).to eq("https://try-discourse.global.ssl.fastly.net/uploads/default/368/40b610b0aa90cfcf.txt") end it "rewrites the src to have https" do frag = html_fragment('') expect(frag.at('img')['src']).to eq("https://test.localhost/blah.jpg") end end end context "strip_avatars_and_emojis" do it "works for lonesome emoji with no title" do emoji = "" style = Email::Styles.new(emoji) style.strip_avatars_and_emojis expect(style.to_html).to match_html(emoji) end it "works for lonesome emoji with title" do emoji = "" style = Email::Styles.new(emoji) style.strip_avatars_and_emojis expect(style.to_html).to match_html("cry_cry") end it "works if img tag has no attrs" do cooked = "Create a method for click on image and use ng-click in in your slide box...it is simple" style = Email::Styles.new(cooked) style.strip_avatars_and_emojis expect(style.to_html).to eq(cooked) end end context "onebox_styles" do it "renders quote as
" do fragment = html_fragment('') expect(fragment.to_s.squish).to match(/^$/) end end context "replace_relative_urls" do it "replaces secure media within a link with a placeholder" do frag = html_fragment("") expect(frag.at('p.secure-media-notice')).to be_present expect(frag.at('img')).not_to be_present expect(frag.at('a')).not_to be_present end it "replaces secure images with a placeholder" do frag = html_fragment("") expect(frag.at('p.secure-media-notice')).to be_present expect(frag.at('img')).not_to be_present end it "does not replace topic links with secure-media-uploads in the name" do frag = html_fragment("Visit Topic") expect(frag.at('p.secure-media-notice')).not_to be_present end end end