import { describe, it, expect } from "bun:test";
import { gcTick } from "./gc";
import { escapeHTML } from "bun";
describe("escapeHTML", () => {
// The matrix of cases we need to test for:
// 1. Works with short strings
// 2. Works with long strings
// 3. Works with latin1 strings
// 4. Works with utf16 strings
// 5. Works when the text to escape is somewhere in the middle
// 6. Works when the text to escape is in the beginning
// 7. Works when the text to escape is in the end
// 8. Returns the same string when there's no need to escape
it("works", () => {
expect(escapeHTML("absolutely nothing to do here")).toBe(
"absolutely nothing to do here"
);
expect(escapeHTML("")).toBe(
"<script>alert(1)</script>"
);
expect(escapeHTML("<")).toBe("<");
expect(escapeHTML(">")).toBe(">");
expect(escapeHTML("&")).toBe("&");
expect(escapeHTML("'")).toBe("'");
expect(escapeHTML('"')).toBe(""");
expect(escapeHTML("\n")).toBe("\n");
expect(escapeHTML("\r")).toBe("\r");
expect(escapeHTML("\t")).toBe("\t");
expect(escapeHTML("\f")).toBe("\f");
expect(escapeHTML("\v")).toBe("\v");
expect(escapeHTML("\b")).toBe("\b");
expect(escapeHTML("\u00A0")).toBe("\u00A0");
expect(escapeHTML("" + "lalala")).toBe(
"lalala<script>alert(1)</script>lalala"
);
expect(escapeHTML("" + "lalala")).toBe(
"<script>alert(1)</script>lalala"
);
expect(escapeHTML("lalala" + "")).toBe(
"lalala" + "<script>alert(1)</script>"
);
expect(escapeHTML("What does π mean?")).toBe("What does π mean?");
const output = escapeHTML("What does π mean in text?")).toBe(
"<div>What does π mean in text?"
);
expect(
escapeHTML(
("lalala" + "" + "lalala").repeat(900)
)
).toBe("lalala<script>alert(1)</script>lalala".repeat(900));
expect(
escapeHTML(("" + "lalala").repeat(900))
).toBe("<script>alert(1)</script>lalala".repeat(900));
expect(
escapeHTML(("lalala" + "").repeat(900))
).toBe(("lalala" + "<script>alert(1)</script>").repeat(900));
// the positions of the unicode codepoint are important
// our simd code for U16 is at 8 bytes, so we need to especially check the boundaries
expect(
escapeHTML("πlalala" + "" + "lalala")
).toBe("πlalala<script>alert(1)</script>lalala");
expect(escapeHTML("" + "lalala")).toBe(
"<script>πalert(1)</script>lalala"
);
expect(escapeHTML("" + "lalala")).toBe(
"<script>alert(1)π</script>lalala"
);
expect(escapeHTML("" + "πlalala")).toBe(
"<script>alert(1)</script>πlalala"
);
expect(escapeHTML("" + "lalπala")).toBe(
"<script>alert(1)</script>lalπala"
);
expect(
escapeHTML("" + "lalπala".repeat(10))
).toBe("<script>alert(1)</script>" + "lalπala".repeat(10));
for (let i = 1; i < 10; i++)
expect(escapeHTML("" + "laπ".repeat(i))).toBe(
"<script>alert(1)</script>" + "laπ".repeat(i)
);
expect(escapeHTML("laπ" + "")).toBe(
"laπ" + "<script>alert(1)</script>"
);
expect(
escapeHTML(("lalala" + "π").repeat(1))
).toBe(("lalala" + "<script>alert(1)</script>π").repeat(1));
expect(escapeHTML("π".repeat(100))).toBe("π".repeat(100));
expect(escapeHTML("π<".repeat(100))).toBe("π<".repeat(100));
expect(escapeHTML("<π>".repeat(100))).toBe("<π>".repeat(100));
expect(escapeHTML("π")).toBe("π");
expect(escapeHTML("ππ")).toBe("ππ");
expect(escapeHTML("πlo")).toBe("πlo");
expect(escapeHTML("loπ")).toBe("loπ");
expect(escapeHTML(" ".repeat(32) + "π")).toBe(" ".repeat(32) + "π");
expect(escapeHTML(" ".repeat(32) + "ππ")).toBe(" ".repeat(32) + "ππ");
expect(escapeHTML(" ".repeat(32) + "πlo")).toBe(" ".repeat(32) + "πlo");
expect(escapeHTML(" ".repeat(32) + "loπ")).toBe(" ".repeat(32) + "loπ");
});
});
ption value='feat/npm'>feat/npm
Unnamed repository; edit this file 'description' to name the repository.
Jarred Sumner
Jarred Sumner