477bacb3ae
The XSS here is only possible if CSP is disabled. Low impact since CSP is enabled by default in SiteSettings.
88 lines
2.1 KiB
JavaScript
88 lines
2.1 KiB
JavaScript
import { acceptance } from "helpers/qunit-helpers";
|
|
acceptance("Admin - Watched Words", { loggedIn: true });
|
|
|
|
QUnit.test("list words in groups", async assert => {
|
|
await visit("/admin/logs/watched_words/action/block");
|
|
|
|
assert.ok(exists(".watched-words-list"));
|
|
assert.ok(
|
|
!exists(".watched-words-list .watched-word"),
|
|
"Don't show bad words by default."
|
|
);
|
|
|
|
await fillIn(".admin-controls .controls input[type=text]", "li");
|
|
|
|
assert.equal(
|
|
find(".watched-words-list .watched-word").length,
|
|
1,
|
|
"When filtering, show words even if checkbox is unchecked."
|
|
);
|
|
|
|
await fillIn(".admin-controls .controls input[type=text]", "");
|
|
|
|
assert.ok(
|
|
!exists(".watched-words-list .watched-word"),
|
|
"Clearing the filter hides words again."
|
|
);
|
|
|
|
await click(".show-words-checkbox");
|
|
|
|
assert.ok(
|
|
exists(".watched-words-list .watched-word"),
|
|
"Always show the words when checkbox is checked."
|
|
);
|
|
|
|
assert.equal(
|
|
$(find(".watched-words-list .watched-word")[2]).text(),
|
|
' <img src="x">',
|
|
"it should escape watched words"
|
|
);
|
|
|
|
await click(".nav-stacked .censor a");
|
|
|
|
assert.ok(exists(".watched-words-list"));
|
|
assert.ok(!exists(".watched-words-list .watched-word"), "Empty word list.");
|
|
});
|
|
|
|
QUnit.test("add words", async assert => {
|
|
await visit("/admin/logs/watched_words/action/block");
|
|
|
|
click(".show-words-checkbox");
|
|
fillIn(".watched-word-form input", "poutine");
|
|
|
|
await click(".watched-word-form button");
|
|
|
|
let found = [];
|
|
$.each(find(".watched-words-list .watched-word"), (index, elem) => {
|
|
if (
|
|
$(elem)
|
|
.text()
|
|
.trim() === "poutine"
|
|
) {
|
|
found.push(true);
|
|
}
|
|
});
|
|
assert.equal(found.length, 1);
|
|
});
|
|
|
|
QUnit.test("remove words", async assert => {
|
|
await visit("/admin/logs/watched_words/action/block");
|
|
await click(".show-words-checkbox");
|
|
|
|
let word = null;
|
|
|
|
$.each(find(".watched-words-list .watched-word"), (index, elem) => {
|
|
if (
|
|
$(elem)
|
|
.text()
|
|
.trim() === "anise"
|
|
) {
|
|
word = elem;
|
|
}
|
|
});
|
|
|
|
await click("#" + $(word).attr("id"));
|
|
|
|
assert.equal(find(".watched-words-list .watched-word").length, 1);
|
|
});
|