mirror of
https://github.com/sissbruecker/linkding
synced 2024-11-22 19:33:05 +00:00
ffaaf0521d
* return updated HTML from bookmark actions * open details through URL * fix details update * improve modal behavior * use a frame * make behaviors properly destroy themselves * remove page and details params from tag urls * use separate behavior for details and tags * remove separate details view * make it work with other views * add asset actions * remove asset refresh for now * remove details partial * fix tests * remove old partials * update tests * cache and reuse tags * extract search autocomplete behavior * remove details param from pagination * fix tests * only return details modal when navigating in frame * fix link target * remove unused behaviors * use auto submit behavior for user select * fix import
595 lines
21 KiB
Python
595 lines
21 KiB
Python
import urllib.parse
|
|
from typing import List
|
|
|
|
from django.contrib.auth.models import User
|
|
from django.test import TestCase
|
|
from django.urls import reverse
|
|
|
|
from bookmarks.models import Bookmark, BookmarkSearch, Tag, UserProfile
|
|
from bookmarks.tests.helpers import (
|
|
BookmarkFactoryMixin,
|
|
BookmarkListTestMixin,
|
|
TagCloudTestMixin,
|
|
)
|
|
|
|
|
|
class BookmarkSharedViewTestCase(
|
|
TestCase, BookmarkFactoryMixin, BookmarkListTestMixin, TagCloudTestMixin
|
|
):
|
|
def authenticate(self) -> None:
|
|
user = self.get_or_create_test_user()
|
|
self.client.force_login(user)
|
|
|
|
def assertBookmarkCount(
|
|
self, html: str, bookmark: Bookmark, count: int, link_target: str = "_blank"
|
|
):
|
|
self.assertInHTML(
|
|
f'<a href="{bookmark.url}" target="{link_target}" rel="noopener">{bookmark.resolved_title}</a>',
|
|
html,
|
|
count=count,
|
|
)
|
|
|
|
def assertVisibleUserOptions(self, response, users: List[User]):
|
|
html = response.content.decode()
|
|
|
|
user_options = ['<option value="" selected="">Everyone</option>']
|
|
for user in users:
|
|
user_options.append(
|
|
f'<option value="{user.username}">{user.username}</option>'
|
|
)
|
|
user_select_html = f"""
|
|
<select name="user" class="form-select" id="id_user" ld-auto-submit>
|
|
{''.join(user_options)}
|
|
</select>
|
|
"""
|
|
|
|
self.assertInHTML(user_select_html, html)
|
|
|
|
def assertEditLink(self, response, url):
|
|
html = response.content.decode()
|
|
self.assertInHTML(
|
|
f"""
|
|
<a href="{url}">Edit</a>
|
|
""",
|
|
html,
|
|
)
|
|
|
|
def test_should_list_shared_bookmarks_from_all_users_that_have_sharing_enabled(
|
|
self,
|
|
):
|
|
self.authenticate()
|
|
user1 = self.setup_user(enable_sharing=True)
|
|
user2 = self.setup_user(enable_sharing=True)
|
|
user3 = self.setup_user(enable_sharing=True)
|
|
user4 = self.setup_user(enable_sharing=False)
|
|
|
|
visible_bookmarks = [
|
|
self.setup_bookmark(shared=True, user=user1),
|
|
self.setup_bookmark(shared=True, user=user2),
|
|
self.setup_bookmark(shared=True, user=user3),
|
|
]
|
|
invisible_bookmarks = [
|
|
self.setup_bookmark(shared=False, user=user1),
|
|
self.setup_bookmark(shared=False, user=user2),
|
|
self.setup_bookmark(shared=False, user=user3),
|
|
self.setup_bookmark(shared=True, user=user4),
|
|
]
|
|
|
|
response = self.client.get(reverse("bookmarks:shared"))
|
|
|
|
self.assertVisibleBookmarks(response, visible_bookmarks)
|
|
self.assertInvisibleBookmarks(response, invisible_bookmarks)
|
|
|
|
def test_should_list_shared_bookmarks_from_selected_user(self):
|
|
self.authenticate()
|
|
user1 = self.setup_user(enable_sharing=True)
|
|
user2 = self.setup_user(enable_sharing=True)
|
|
user3 = self.setup_user(enable_sharing=True)
|
|
|
|
visible_bookmarks = [
|
|
self.setup_bookmark(shared=True, user=user1),
|
|
]
|
|
invisible_bookmarks = [
|
|
self.setup_bookmark(shared=True, user=user2),
|
|
self.setup_bookmark(shared=True, user=user3),
|
|
]
|
|
|
|
url = reverse("bookmarks:shared") + "?user=" + user1.username
|
|
response = self.client.get(url)
|
|
|
|
self.assertVisibleBookmarks(response, visible_bookmarks)
|
|
self.assertInvisibleBookmarks(response, invisible_bookmarks)
|
|
|
|
def test_should_list_bookmarks_matching_query(self):
|
|
self.authenticate()
|
|
user = self.setup_user(enable_sharing=True)
|
|
|
|
visible_bookmarks = self.setup_numbered_bookmarks(
|
|
3, shared=True, user=user, prefix="foo"
|
|
)
|
|
invisible_bookmarks = self.setup_numbered_bookmarks(3, shared=True, user=user)
|
|
|
|
response = self.client.get(reverse("bookmarks:shared") + "?q=foo")
|
|
|
|
self.assertVisibleBookmarks(response, visible_bookmarks)
|
|
self.assertInvisibleBookmarks(response, invisible_bookmarks)
|
|
|
|
def test_should_list_only_publicly_shared_bookmarks_without_login(self):
|
|
user1 = self.setup_user(enable_sharing=True, enable_public_sharing=True)
|
|
user2 = self.setup_user(enable_sharing=True)
|
|
|
|
visible_bookmarks = self.setup_numbered_bookmarks(
|
|
3, shared=True, user=user1, prefix="user1"
|
|
)
|
|
invisible_bookmarks = self.setup_numbered_bookmarks(
|
|
3, shared=True, user=user2, prefix="user2"
|
|
)
|
|
|
|
response = self.client.get(reverse("bookmarks:shared"))
|
|
|
|
self.assertVisibleBookmarks(response, visible_bookmarks)
|
|
self.assertInvisibleBookmarks(response, invisible_bookmarks)
|
|
|
|
def test_should_list_tags_for_shared_bookmarks_from_all_users_that_have_sharing_enabled(
|
|
self,
|
|
):
|
|
self.authenticate()
|
|
user1 = self.setup_user(enable_sharing=True)
|
|
user2 = self.setup_user(enable_sharing=True)
|
|
user3 = self.setup_user(enable_sharing=True)
|
|
user4 = self.setup_user(enable_sharing=False)
|
|
visible_tags = [
|
|
self.setup_tag(user=user1),
|
|
self.setup_tag(user=user2),
|
|
self.setup_tag(user=user3),
|
|
]
|
|
invisible_tags = [
|
|
self.setup_tag(user=user1),
|
|
self.setup_tag(user=user2),
|
|
self.setup_tag(user=user3),
|
|
self.setup_tag(user=user4),
|
|
]
|
|
|
|
self.setup_bookmark(shared=True, user=user1, tags=[visible_tags[0]])
|
|
self.setup_bookmark(shared=True, user=user2, tags=[visible_tags[1]])
|
|
self.setup_bookmark(shared=True, user=user3, tags=[visible_tags[2]])
|
|
|
|
self.setup_bookmark(shared=False, user=user1, tags=[invisible_tags[0]])
|
|
self.setup_bookmark(shared=False, user=user2, tags=[invisible_tags[1]])
|
|
self.setup_bookmark(shared=False, user=user3, tags=[invisible_tags[2]])
|
|
self.setup_bookmark(shared=True, user=user4, tags=[invisible_tags[3]])
|
|
|
|
response = self.client.get(reverse("bookmarks:shared"))
|
|
|
|
self.assertVisibleTags(response, visible_tags)
|
|
self.assertInvisibleTags(response, invisible_tags)
|
|
|
|
def test_should_list_tags_for_shared_bookmarks_from_selected_user(self):
|
|
self.authenticate()
|
|
user1 = self.setup_user(enable_sharing=True)
|
|
user2 = self.setup_user(enable_sharing=True)
|
|
user3 = self.setup_user(enable_sharing=True)
|
|
visible_tags = [
|
|
self.setup_tag(user=user1),
|
|
]
|
|
invisible_tags = [
|
|
self.setup_tag(user=user2),
|
|
self.setup_tag(user=user3),
|
|
]
|
|
|
|
self.setup_bookmark(shared=True, user=user1, tags=[visible_tags[0]])
|
|
self.setup_bookmark(shared=True, user=user2, tags=[invisible_tags[0]])
|
|
self.setup_bookmark(shared=True, user=user3, tags=[invisible_tags[1]])
|
|
|
|
url = reverse("bookmarks:shared") + "?user=" + user1.username
|
|
response = self.client.get(url)
|
|
|
|
self.assertVisibleTags(response, visible_tags)
|
|
self.assertInvisibleTags(response, invisible_tags)
|
|
|
|
def test_should_list_tags_for_bookmarks_matching_query(self):
|
|
self.authenticate()
|
|
user1 = self.setup_user(enable_sharing=True)
|
|
user2 = self.setup_user(enable_sharing=True)
|
|
user3 = self.setup_user(enable_sharing=True)
|
|
visible_tags = [
|
|
self.setup_tag(user=user1),
|
|
self.setup_tag(user=user2),
|
|
self.setup_tag(user=user3),
|
|
]
|
|
invisible_tags = [
|
|
self.setup_tag(user=user1),
|
|
self.setup_tag(user=user2),
|
|
self.setup_tag(user=user3),
|
|
]
|
|
|
|
self.setup_bookmark(
|
|
shared=True, user=user1, title="searchvalue", tags=[visible_tags[0]]
|
|
)
|
|
self.setup_bookmark(
|
|
shared=True, user=user2, title="searchvalue", tags=[visible_tags[1]]
|
|
)
|
|
self.setup_bookmark(
|
|
shared=True, user=user3, title="searchvalue", tags=[visible_tags[2]]
|
|
)
|
|
|
|
self.setup_bookmark(shared=True, user=user1, tags=[invisible_tags[0]])
|
|
self.setup_bookmark(shared=True, user=user2, tags=[invisible_tags[1]])
|
|
self.setup_bookmark(shared=True, user=user3, tags=[invisible_tags[2]])
|
|
|
|
response = self.client.get(reverse("bookmarks:shared") + "?q=searchvalue")
|
|
|
|
self.assertVisibleTags(response, visible_tags)
|
|
self.assertInvisibleTags(response, invisible_tags)
|
|
|
|
def test_should_list_only_tags_for_publicly_shared_bookmarks_without_login(self):
|
|
user1 = self.setup_user(enable_sharing=True, enable_public_sharing=True)
|
|
user2 = self.setup_user(enable_sharing=True)
|
|
|
|
visible_tags = [
|
|
self.setup_tag(user=user1),
|
|
self.setup_tag(user=user1),
|
|
]
|
|
invisible_tags = [
|
|
self.setup_tag(user=user2),
|
|
self.setup_tag(user=user2),
|
|
]
|
|
|
|
self.setup_bookmark(shared=True, user=user1, tags=[visible_tags[0]])
|
|
self.setup_bookmark(shared=True, user=user1, tags=[visible_tags[1]])
|
|
|
|
self.setup_bookmark(shared=True, user=user2, tags=[invisible_tags[0]])
|
|
self.setup_bookmark(shared=True, user=user2, tags=[invisible_tags[1]])
|
|
|
|
response = self.client.get(reverse("bookmarks:shared"))
|
|
|
|
self.assertVisibleTags(response, visible_tags)
|
|
self.assertInvisibleTags(response, invisible_tags)
|
|
|
|
def test_should_list_users_with_shared_bookmarks_if_sharing_is_enabled(self):
|
|
self.authenticate()
|
|
expected_visible_users = [
|
|
self.setup_user(name="user_a", enable_sharing=True),
|
|
self.setup_user(name="user_b", enable_sharing=True),
|
|
]
|
|
self.setup_bookmark(shared=True, user=expected_visible_users[0])
|
|
self.setup_bookmark(shared=True, user=expected_visible_users[1])
|
|
|
|
self.setup_bookmark(shared=False, user=self.setup_user(enable_sharing=True))
|
|
self.setup_bookmark(shared=True, user=self.setup_user(enable_sharing=False))
|
|
|
|
response = self.client.get(reverse("bookmarks:shared"))
|
|
self.assertVisibleUserOptions(response, expected_visible_users)
|
|
|
|
def test_should_list_only_users_with_publicly_shared_bookmarks_without_login(self):
|
|
# users with public sharing enabled
|
|
expected_visible_users = [
|
|
self.setup_user(
|
|
name="user_a", enable_sharing=True, enable_public_sharing=True
|
|
),
|
|
self.setup_user(
|
|
name="user_b", enable_sharing=True, enable_public_sharing=True
|
|
),
|
|
]
|
|
self.setup_bookmark(shared=True, user=expected_visible_users[0])
|
|
self.setup_bookmark(shared=True, user=expected_visible_users[1])
|
|
|
|
# users with public sharing disabled
|
|
self.setup_bookmark(shared=True, user=self.setup_user(enable_sharing=True))
|
|
self.setup_bookmark(shared=True, user=self.setup_user(enable_sharing=True))
|
|
|
|
response = self.client.get(reverse("bookmarks:shared"))
|
|
self.assertVisibleUserOptions(response, expected_visible_users)
|
|
|
|
def test_should_list_bookmarks_and_tags_for_search_preferences(self):
|
|
self.authenticate()
|
|
other_user = self.setup_user(enable_sharing=True)
|
|
|
|
user_profile = self.get_or_create_test_user().profile
|
|
user_profile.search_preferences = {
|
|
"unread": BookmarkSearch.FILTER_UNREAD_YES,
|
|
}
|
|
user_profile.save()
|
|
|
|
unread_bookmarks = self.setup_numbered_bookmarks(
|
|
3,
|
|
shared=True,
|
|
unread=True,
|
|
with_tags=True,
|
|
prefix="unread",
|
|
tag_prefix="unread",
|
|
user=other_user,
|
|
)
|
|
read_bookmarks = self.setup_numbered_bookmarks(
|
|
3,
|
|
shared=True,
|
|
unread=False,
|
|
with_tags=True,
|
|
prefix="read",
|
|
tag_prefix="read",
|
|
user=other_user,
|
|
)
|
|
|
|
unread_tags = self.get_tags_from_bookmarks(unread_bookmarks)
|
|
read_tags = self.get_tags_from_bookmarks(read_bookmarks)
|
|
|
|
response = self.client.get(reverse("bookmarks:shared"))
|
|
self.assertVisibleBookmarks(response, unread_bookmarks)
|
|
self.assertInvisibleBookmarks(response, read_bookmarks)
|
|
self.assertVisibleTags(response, unread_tags)
|
|
self.assertInvisibleTags(response, read_tags)
|
|
|
|
def test_should_open_bookmarks_in_new_page_by_default(self):
|
|
self.authenticate()
|
|
user = self.get_or_create_test_user()
|
|
user.profile.enable_sharing = True
|
|
user.profile.save()
|
|
visible_bookmarks = [
|
|
self.setup_bookmark(shared=True),
|
|
self.setup_bookmark(shared=True),
|
|
self.setup_bookmark(shared=True),
|
|
]
|
|
|
|
response = self.client.get(reverse("bookmarks:shared"))
|
|
|
|
self.assertVisibleBookmarks(response, visible_bookmarks, "_blank")
|
|
|
|
def test_should_open_bookmarks_in_same_page_if_specified_in_user_profile(self):
|
|
self.authenticate()
|
|
user = self.get_or_create_test_user()
|
|
user.profile.enable_sharing = True
|
|
user.profile.bookmark_link_target = UserProfile.BOOKMARK_LINK_TARGET_SELF
|
|
user.profile.save()
|
|
|
|
visible_bookmarks = [
|
|
self.setup_bookmark(shared=True),
|
|
self.setup_bookmark(shared=True),
|
|
self.setup_bookmark(shared=True),
|
|
]
|
|
|
|
response = self.client.get(reverse("bookmarks:shared"))
|
|
|
|
self.assertVisibleBookmarks(response, visible_bookmarks, "_self")
|
|
|
|
def test_edit_link_return_url_respects_search_options(self):
|
|
self.authenticate()
|
|
user = self.get_or_create_test_user()
|
|
user.profile.enable_sharing = True
|
|
user.profile.save()
|
|
|
|
bookmark = self.setup_bookmark(title="foo", shared=True, user=user)
|
|
edit_url = reverse("bookmarks:edit", args=[bookmark.id])
|
|
base_url = reverse("bookmarks:shared")
|
|
|
|
# without query params
|
|
return_url = urllib.parse.quote(base_url)
|
|
url = f"{edit_url}?return_url={return_url}"
|
|
|
|
response = self.client.get(base_url)
|
|
self.assertEditLink(response, url)
|
|
|
|
# with query
|
|
url_params = "?q=foo"
|
|
return_url = urllib.parse.quote(base_url + url_params)
|
|
url = f"{edit_url}?return_url={return_url}"
|
|
|
|
response = self.client.get(base_url + url_params)
|
|
self.assertEditLink(response, url)
|
|
|
|
# with query and user
|
|
url_params = f"?q=foo&user={user.username}"
|
|
return_url = urllib.parse.quote(base_url + url_params)
|
|
url = f"{edit_url}?return_url={return_url}"
|
|
|
|
response = self.client.get(base_url + url_params)
|
|
self.assertEditLink(response, url)
|
|
|
|
# with query and sort and page
|
|
url_params = "?q=foo&sort=title_asc&page=2"
|
|
return_url = urllib.parse.quote(base_url + url_params)
|
|
url = f"{edit_url}?return_url={return_url}"
|
|
|
|
response = self.client.get(base_url + url_params)
|
|
self.assertEditLink(response, url)
|
|
|
|
def test_apply_search_preferences(self):
|
|
# no params
|
|
response = self.client.post(reverse("bookmarks:shared"))
|
|
self.assertEqual(response.status_code, 302)
|
|
self.assertEqual(response.url, reverse("bookmarks:shared"))
|
|
|
|
# some params
|
|
response = self.client.post(
|
|
reverse("bookmarks:shared"),
|
|
{
|
|
"q": "foo",
|
|
"sort": BookmarkSearch.SORT_TITLE_ASC,
|
|
},
|
|
)
|
|
self.assertEqual(response.status_code, 302)
|
|
self.assertEqual(
|
|
response.url, reverse("bookmarks:shared") + "?q=foo&sort=title_asc"
|
|
)
|
|
|
|
# params with default value are removed
|
|
response = self.client.post(
|
|
reverse("bookmarks:shared"),
|
|
{
|
|
"q": "foo",
|
|
"user": "",
|
|
"sort": BookmarkSearch.SORT_ADDED_DESC,
|
|
"shared": BookmarkSearch.FILTER_SHARED_OFF,
|
|
"unread": BookmarkSearch.FILTER_UNREAD_YES,
|
|
},
|
|
)
|
|
self.assertEqual(response.status_code, 302)
|
|
self.assertEqual(
|
|
response.url, reverse("bookmarks:shared") + "?q=foo&unread=yes"
|
|
)
|
|
|
|
# page is removed
|
|
response = self.client.post(
|
|
reverse("bookmarks:shared"),
|
|
{
|
|
"q": "foo",
|
|
"page": "2",
|
|
"sort": BookmarkSearch.SORT_TITLE_ASC,
|
|
},
|
|
)
|
|
self.assertEqual(response.status_code, 302)
|
|
self.assertEqual(
|
|
response.url, reverse("bookmarks:shared") + "?q=foo&sort=title_asc"
|
|
)
|
|
|
|
def test_save_search_preferences(self):
|
|
self.authenticate()
|
|
user_profile = self.user.profile
|
|
|
|
# no params
|
|
self.client.post(
|
|
reverse("bookmarks:shared"),
|
|
{
|
|
"save": "",
|
|
},
|
|
)
|
|
user_profile.refresh_from_db()
|
|
self.assertEqual(
|
|
user_profile.search_preferences,
|
|
{
|
|
"sort": BookmarkSearch.SORT_ADDED_DESC,
|
|
"shared": BookmarkSearch.FILTER_SHARED_OFF,
|
|
"unread": BookmarkSearch.FILTER_UNREAD_OFF,
|
|
},
|
|
)
|
|
|
|
# with param
|
|
self.client.post(
|
|
reverse("bookmarks:shared"),
|
|
{
|
|
"save": "",
|
|
"sort": BookmarkSearch.SORT_TITLE_ASC,
|
|
},
|
|
)
|
|
user_profile.refresh_from_db()
|
|
self.assertEqual(
|
|
user_profile.search_preferences,
|
|
{
|
|
"sort": BookmarkSearch.SORT_TITLE_ASC,
|
|
"shared": BookmarkSearch.FILTER_SHARED_OFF,
|
|
"unread": BookmarkSearch.FILTER_UNREAD_OFF,
|
|
},
|
|
)
|
|
|
|
# add a param
|
|
self.client.post(
|
|
reverse("bookmarks:shared"),
|
|
{
|
|
"save": "",
|
|
"sort": BookmarkSearch.SORT_TITLE_ASC,
|
|
"unread": BookmarkSearch.FILTER_UNREAD_YES,
|
|
},
|
|
)
|
|
user_profile.refresh_from_db()
|
|
self.assertEqual(
|
|
user_profile.search_preferences,
|
|
{
|
|
"sort": BookmarkSearch.SORT_TITLE_ASC,
|
|
"shared": BookmarkSearch.FILTER_SHARED_OFF,
|
|
"unread": BookmarkSearch.FILTER_UNREAD_YES,
|
|
},
|
|
)
|
|
|
|
# remove a param
|
|
self.client.post(
|
|
reverse("bookmarks:shared"),
|
|
{
|
|
"save": "",
|
|
"unread": BookmarkSearch.FILTER_UNREAD_YES,
|
|
},
|
|
)
|
|
user_profile.refresh_from_db()
|
|
self.assertEqual(
|
|
user_profile.search_preferences,
|
|
{
|
|
"sort": BookmarkSearch.SORT_ADDED_DESC,
|
|
"shared": BookmarkSearch.FILTER_SHARED_OFF,
|
|
"unread": BookmarkSearch.FILTER_UNREAD_YES,
|
|
},
|
|
)
|
|
|
|
# ignores non-preferences
|
|
self.client.post(
|
|
reverse("bookmarks:shared"),
|
|
{
|
|
"save": "",
|
|
"q": "foo",
|
|
"user": "john",
|
|
"page": "3",
|
|
"sort": BookmarkSearch.SORT_TITLE_ASC,
|
|
},
|
|
)
|
|
user_profile.refresh_from_db()
|
|
self.assertEqual(
|
|
user_profile.search_preferences,
|
|
{
|
|
"sort": BookmarkSearch.SORT_TITLE_ASC,
|
|
"shared": BookmarkSearch.FILTER_SHARED_OFF,
|
|
"unread": BookmarkSearch.FILTER_UNREAD_OFF,
|
|
},
|
|
)
|
|
|
|
def test_url_encode_bookmark_actions_url(self):
|
|
url = reverse("bookmarks:shared") + "?q=%23foo"
|
|
response = self.client.get(url)
|
|
html = response.content.decode()
|
|
soup = self.make_soup(html)
|
|
actions_form = soup.select("form.bookmark-actions")[0]
|
|
|
|
self.assertEqual(
|
|
actions_form.attrs["action"],
|
|
"/bookmarks/shared/action?q=%23foo",
|
|
)
|
|
|
|
def test_encode_search_params(self):
|
|
self.authenticate()
|
|
user = self.get_or_create_test_user()
|
|
user.profile.enable_sharing = True
|
|
user.profile.save()
|
|
bookmark = self.setup_bookmark(description="alert('xss')", shared=True)
|
|
|
|
url = reverse("bookmarks:shared") + "?q=alert(%27xss%27)"
|
|
response = self.client.get(url)
|
|
self.assertNotContains(response, "alert('xss')")
|
|
self.assertContains(response, bookmark.url)
|
|
|
|
url = reverse("bookmarks:shared") + "?sort=alert(%27xss%27)"
|
|
response = self.client.get(url)
|
|
self.assertNotContains(response, "alert('xss')")
|
|
|
|
url = reverse("bookmarks:shared") + "?unread=alert(%27xss%27)"
|
|
response = self.client.get(url)
|
|
self.assertNotContains(response, "alert('xss')")
|
|
|
|
url = reverse("bookmarks:shared") + "?shared=alert(%27xss%27)"
|
|
response = self.client.get(url)
|
|
self.assertNotContains(response, "alert('xss')")
|
|
|
|
url = reverse("bookmarks:shared") + "?user=alert(%27xss%27)"
|
|
response = self.client.get(url)
|
|
self.assertNotContains(response, "alert('xss')")
|
|
|
|
url = reverse("bookmarks:shared") + "?page=alert(%27xss%27)"
|
|
response = self.client.get(url)
|
|
self.assertNotContains(response, "alert('xss')")
|
|
|
|
def test_turbo_frame_details_modal_renders_details_modal_update(self):
|
|
bookmark = self.setup_bookmark()
|
|
url = reverse("bookmarks:shared") + f"?bookmark_id={bookmark.id}"
|
|
response = self.client.get(url, headers={"Turbo-Frame": "details-modal"})
|
|
|
|
self.assertEqual(200, response.status_code)
|
|
|
|
soup = self.make_soup(response.content.decode())
|
|
self.assertIsNotNone(soup.select_one("turbo-frame#details-modal"))
|
|
self.assertIsNone(soup.select_one("#bookmark-list-container"))
|
|
self.assertIsNone(soup.select_one("#tag-cloud-container"))
|