41 lines
1.1 KiB
Go
41 lines
1.1 KiB
Go
package handler
|
|
|
|
import (
|
|
"strings"
|
|
"testing"
|
|
"unicode/utf8"
|
|
)
|
|
|
|
func TestSanitizePageURL(t *testing.T) {
|
|
got := sanitizePageURL("https://shop.example.com/p/1?token=secret&ok=1#/cart")
|
|
if got == "" || strings.Contains(got, "token=") {
|
|
t.Fatalf("sanitize failed: %q", got)
|
|
}
|
|
if !strings.Contains(got, "ok=1") {
|
|
t.Fatalf("should keep ok param: %q", got)
|
|
}
|
|
// SPA hash 路由必须保留，否则换页轨迹会被去重丢掉
|
|
if !strings.Contains(got, "#/cart") {
|
|
t.Fatalf("should keep hash fragment for SPA: %q", got)
|
|
}
|
|
home := sanitizePageURL("http://localhost:5173/demo-shop/index.html#/")
|
|
cart := sanitizePageURL("http://localhost:5173/demo-shop/index.html#/cart")
|
|
if home == "" || cart == "" || home == cart {
|
|
t.Fatalf("hash pages must differ: home=%q cart=%q", home, cart)
|
|
}
|
|
if sanitizePageURL("javascript:alert(1)") != "" {
|
|
t.Fatal("reject javascript")
|
|
}
|
|
if sanitizePageURL("") != "" {
|
|
t.Fatal("empty")
|
|
}
|
|
}
|
|
|
|
func TestSanitizePageTitle(t *testing.T) {
|
|
long := strings.Repeat("测", 300)
|
|
got := sanitizePageTitle(long)
|
|
if utf8.RuneCountInString(got) != maxPageTitleLen {
|
|
t.Fatalf("title len %d", utf8.RuneCountInString(got))
|
|
}
|
|
}
|