debian-mirror-gitlab/spec/features/issues/issue_detail_spec.rb

65 lines
1.7 KiB
Ruby
Raw Normal View History

2019-10-12 21:52:04 +05:30
# frozen_string_literal: true
2019-12-04 20:38:33 +05:30
require 'spec_helper'
2017-09-10 17:25:29 +05:30
2020-06-23 00:09:42 +05:30
RSpec.describe 'Issue Detail', :js do
2018-03-17 18:26:18 +05:30
let(:user) { create(:user) }
let(:project) { create(:project, :public) }
let(:issue) { create(:issue, project: project, author: user) }
2017-09-10 17:25:29 +05:30
context 'when user displays the issue' do
before do
visit project_issue_path(project, issue)
wait_for_requests
end
it 'shows the issue' do
page.within('.issuable-details') do
expect(find('h2')).to have_content(issue.title)
end
end
end
2018-11-08 19:23:39 +05:30
context 'when issue description has xss snippet' do
before do
issue.update!(description: '![xss" onload=alert(1);//](a)')
2020-03-13 15:44:24 +05:30
2018-11-08 19:23:39 +05:30
sign_in(user)
visit project_issue_path(project, issue)
end
2020-04-08 14:13:33 +05:30
it 'encodes the description to prevent xss issues', quarantine: 'https://gitlab.com/gitlab-org/gitlab/issues/207951' do
2018-11-08 19:23:39 +05:30
page.within('.issuable-details .detail-page-description') do
2020-03-13 15:44:24 +05:30
image = find('img.js-lazy-loaded')
2018-11-08 19:23:39 +05:30
expect(page).to have_selector('img', count: 1)
2020-03-13 15:44:24 +05:30
expect(image['onerror']).to be_nil
expect(image['src']).to end_with('/a')
2018-11-08 19:23:39 +05:30
end
end
end
2017-09-10 17:25:29 +05:30
context 'when edited by a user who is later deleted' do
before do
sign_in(user)
visit project_issue_path(project, issue)
wait_for_requests
2018-03-17 18:26:18 +05:30
page.find('.js-issuable-edit').click
fill_in 'issuable-title', with: 'issue title'
2017-09-10 17:25:29 +05:30
click_button 'Save'
2018-03-17 18:26:18 +05:30
wait_for_requests
2017-09-10 17:25:29 +05:30
2018-03-17 18:26:18 +05:30
Users::DestroyService.new(user).execute(user)
2017-09-10 17:25:29 +05:30
visit project_issue_path(project, issue)
end
it 'shows the issue' do
page.within('.issuable-details') do
expect(find('h2')).to have_content(issue.reload.title)
end
end
end
end