debian-mirror-gitlab/spec/features/issues/gfm_autocomplete_spec.rb

453 lines
13 KiB
Ruby
Raw Normal View History

2019-10-12 21:52:04 +05:30
# frozen_string_literal: true
2019-12-04 20:38:33 +05:30
require 'spec_helper'
2017-08-17 22:00:37 +05:30
2018-11-08 19:23:39 +05:30
describe 'GFM autocomplete', :js do
2018-11-20 20:47:30 +05:30
let(:issue_xss_title) { 'This will execute alert<img src=x onerror=alert(2)&lt;img src=x onerror=alert(1)&gt;' }
let(:user_xss_title) { 'eve <img src=x onerror=alert(2)&lt;img src=x onerror=alert(1)&gt;' }
2019-09-30 21:07:59 +05:30
let(:label_xss_title) { 'alert label &lt;img src=x onerror="alert(\'Hello xss\');" a' }
2019-01-03 12:48:30 +05:30
let(:milestone_xss_title) { 'alert milestone &lt;img src=x onerror="alert(\'Hello xss\');" a' }
2018-11-20 20:47:30 +05:30
let(:user_xss) { create(:user, name: user_xss_title, username: 'xss.user') }
2019-09-30 21:07:59 +05:30
let(:user) { create(:user, name: '💃speciąl someone💃', username: 'someone.special') }
2017-08-17 22:00:37 +05:30
let(:project) { create(:project) }
let(:label) { create(:label, project: project, title: 'special+') }
2019-09-30 21:07:59 +05:30
let(:issue) { create(:issue, project: project) }
2017-08-17 22:00:37 +05:30
before do
2018-11-18 11:00:15 +05:30
project.add_maintainer(user)
2018-11-20 20:47:30 +05:30
project.add_maintainer(user_xss)
2017-09-10 17:25:29 +05:30
sign_in(user)
visit project_issue_path(project, issue)
2017-08-17 22:00:37 +05:30
2017-09-10 17:25:29 +05:30
wait_for_requests
end
2018-12-05 23:21:45 +05:30
it 'updates issue description with GFM reference' do
2018-03-17 18:26:18 +05:30
find('.js-issuable-edit').click
2017-09-10 17:25:29 +05:30
2018-03-17 18:26:18 +05:30
simulate_input('#issue-description', "@#{user.name[0...3]}")
2017-09-10 17:25:29 +05:30
2019-01-03 12:48:30 +05:30
wait_for_requests
2018-03-17 18:26:18 +05:30
find('.atwho-view .cur').click
2017-09-10 17:25:29 +05:30
click_button 'Save changes'
2019-01-03 12:48:30 +05:30
wait_for_requests
2017-09-10 17:25:29 +05:30
expect(find('.description')).to have_content(user.to_reference)
2017-08-17 22:00:37 +05:30
end
it 'opens autocomplete menu when field starts with text' do
page.within '.timeline-content-form' do
2018-03-17 18:26:18 +05:30
find('#note-body').native.send_keys('@')
2017-08-17 22:00:37 +05:30
end
expect(page).to have_selector('.atwho-container')
end
2018-11-20 20:47:30 +05:30
it 'opens autocomplete menu for Issues when field starts with text with item escaping HTML characters' do
create(:issue, project: project, title: issue_xss_title)
2018-11-18 11:00:15 +05:30
page.within '.timeline-content-form' do
find('#note-body').native.send_keys('#')
end
2019-01-03 12:48:30 +05:30
wait_for_requests
2018-11-18 11:00:15 +05:30
expect(page).to have_selector('.atwho-container')
page.within '.atwho-container #at-view-issues' do
2018-11-20 20:47:30 +05:30
expect(page.all('li').first.text).to include(issue_xss_title)
end
end
it 'opens autocomplete menu for Username when field starts with text with item escaping HTML characters' do
page.within '.timeline-content-form' do
find('#note-body').native.send_keys('@ev')
end
2019-01-03 12:48:30 +05:30
wait_for_requests
2018-11-20 20:47:30 +05:30
expect(page).to have_selector('.atwho-container')
page.within '.atwho-container #at-view-users' do
expect(find('li').text).to have_content(user_xss.username)
2018-11-18 11:00:15 +05:30
end
end
2019-01-03 12:48:30 +05:30
it 'opens autocomplete menu for Milestone when field starts with text with item escaping HTML characters' do
create(:milestone, project: project, title: milestone_xss_title)
page.within '.timeline-content-form' do
find('#note-body').native.send_keys('%')
end
wait_for_requests
expect(page).to have_selector('.atwho-container')
page.within '.atwho-container #at-view-milestones' do
expect(find('li').text).to have_content('alert milestone')
end
end
2017-08-17 22:00:37 +05:30
it 'doesnt open autocomplete menu character is prefixed with text' do
page.within '.timeline-content-form' do
2018-03-17 18:26:18 +05:30
find('#note-body').native.send_keys('testing')
find('#note-body').native.send_keys('@')
2017-08-17 22:00:37 +05:30
end
expect(page).not_to have_selector('.atwho-view')
end
it 'doesnt select the first item for non-assignee dropdowns' do
page.within '.timeline-content-form' do
2018-03-17 18:26:18 +05:30
find('#note-body').native.send_keys(':')
2017-08-17 22:00:37 +05:30
end
expect(page).to have_selector('.atwho-container')
2017-09-10 17:25:29 +05:30
wait_for_requests
2017-08-17 22:00:37 +05:30
expect(find('#at-view-58')).not_to have_selector('.cur:first-of-type')
end
it 'does not open autocomplete menu when ":" is prefixed by a number and letters' do
2018-03-17 18:26:18 +05:30
note = find('#note-body')
2017-08-17 22:00:37 +05:30
# Number.
page.within '.timeline-content-form' do
note.native.send_keys('7:')
end
expect(page).not_to have_selector('.atwho-view')
# ASCII letter.
page.within '.timeline-content-form' do
note.set('')
note.native.send_keys('w:')
end
expect(page).not_to have_selector('.atwho-view')
# Non-ASCII letter.
page.within '.timeline-content-form' do
note.set('')
note.native.send_keys('Ё:')
end
expect(page).not_to have_selector('.atwho-view')
end
it 'selects the first item for assignee dropdowns' do
page.within '.timeline-content-form' do
2018-03-17 18:26:18 +05:30
find('#note-body').native.send_keys('@')
2017-08-17 22:00:37 +05:30
end
expect(page).to have_selector('.atwho-container')
2017-09-10 17:25:29 +05:30
wait_for_requests
2017-08-17 22:00:37 +05:30
2018-11-20 20:47:30 +05:30
expect(find('#at-view-users')).to have_selector('.cur:first-of-type')
2017-08-17 22:00:37 +05:30
end
it 'includes items for assignee dropdowns with non-ASCII characters in name' do
page.within '.timeline-content-form' do
2018-03-17 18:26:18 +05:30
find('#note-body').native.send_keys('')
simulate_input('#note-body', "@#{user.name[0...8]}")
2017-08-17 22:00:37 +05:30
end
expect(page).to have_selector('.atwho-container')
2017-09-10 17:25:29 +05:30
wait_for_requests
2017-08-17 22:00:37 +05:30
2018-11-20 20:47:30 +05:30
expect(find('#at-view-users')).to have_content(user.name)
2017-08-17 22:00:37 +05:30
end
it 'selects the first item for non-assignee dropdowns if a query is entered' do
page.within '.timeline-content-form' do
2018-03-17 18:26:18 +05:30
find('#note-body').native.send_keys(':1')
2017-08-17 22:00:37 +05:30
end
expect(page).to have_selector('.atwho-container')
2017-09-10 17:25:29 +05:30
wait_for_requests
2017-08-17 22:00:37 +05:30
expect(find('#at-view-58')).to have_selector('.cur:first-of-type')
end
context 'if a selected value has special characters' do
it 'wraps the result in double quotes' do
2018-03-17 18:26:18 +05:30
note = find('#note-body')
2017-08-17 22:00:37 +05:30
page.within '.timeline-content-form' do
2018-03-17 18:26:18 +05:30
find('#note-body').native.send_keys('')
simulate_input('#note-body', "~#{label.title[0]}")
2017-08-17 22:00:37 +05:30
end
label_item = find('.atwho-view li', text: label.title)
expect_to_wrap(true, label_item, note, label.title)
end
it "shows dropdown after a new line" do
2018-03-17 18:26:18 +05:30
note = find('#note-body')
2017-08-17 22:00:37 +05:30
page.within '.timeline-content-form' do
note.native.send_keys('test')
note.native.send_keys(:enter)
note.native.send_keys(:enter)
note.native.send_keys('@')
end
expect(page).to have_selector('.atwho-container')
end
it "does not show dropdown when preceded with a special character" do
2018-03-17 18:26:18 +05:30
note = find('#note-body')
2017-08-17 22:00:37 +05:30
page.within '.timeline-content-form' do
note.native.send_keys("@")
end
expect(page).to have_selector('.atwho-container')
page.within '.timeline-content-form' do
note.native.send_keys("@")
end
expect(page).to have_selector('.atwho-container', visible: false)
end
it "does not throw an error if no labels exist" do
2018-03-17 18:26:18 +05:30
note = find('#note-body')
2017-08-17 22:00:37 +05:30
page.within '.timeline-content-form' do
note.native.send_keys('~')
end
expect(page).to have_selector('.atwho-container', visible: false)
end
it 'doesn\'t wrap for assignee values' do
2018-03-17 18:26:18 +05:30
note = find('#note-body')
2017-08-17 22:00:37 +05:30
page.within '.timeline-content-form' do
note.native.send_keys("@#{user.username[0]}")
end
user_item = find('.atwho-view li', text: user.username)
expect_to_wrap(false, user_item, note, user.username)
end
it 'doesn\'t wrap for emoji values' do
2018-03-17 18:26:18 +05:30
note = find('#note-body')
2017-08-17 22:00:37 +05:30
page.within '.timeline-content-form' do
2018-03-17 18:26:18 +05:30
note.native.send_keys(":cartwheel_")
2017-08-17 22:00:37 +05:30
end
emoji_item = find('.atwho-view li', text: 'cartwheel_tone1')
expect_to_wrap(false, emoji_item, note, 'cartwheel_tone1')
end
it 'doesn\'t open autocomplete after non-word character' do
page.within '.timeline-content-form' do
2018-03-17 18:26:18 +05:30
find('#note-body').native.send_keys("@#{user.username[0..2]}!")
2017-08-17 22:00:37 +05:30
end
expect(page).not_to have_selector('.atwho-view')
end
it 'doesn\'t open autocomplete if there is no space before' do
page.within '.timeline-content-form' do
2018-03-17 18:26:18 +05:30
find('#note-body').native.send_keys("hello:#{user.username[0..2]}")
2017-08-17 22:00:37 +05:30
end
expect(page).not_to have_selector('.atwho-view')
end
2017-09-10 17:25:29 +05:30
it 'triggers autocomplete after selecting a quick action' do
2018-03-17 18:26:18 +05:30
note = find('#note-body')
2017-08-17 22:00:37 +05:30
page.within '.timeline-content-form' do
note.native.send_keys('/as')
end
2018-03-17 18:26:18 +05:30
find('.atwho-view li', text: '/assign')
note.native.send_keys(:tab)
2017-08-17 22:00:37 +05:30
user_item = find('.atwho-view li', text: user.username)
expect(user_item).to have_content(user.username)
end
2018-03-17 18:26:18 +05:30
end
2019-07-07 11:18:12 +05:30
context 'labels' do
2019-01-03 12:48:30 +05:30
it 'opens autocomplete menu for Labels when field starts with text with item escaping HTML characters' do
create(:label, project: project, title: label_xss_title)
note = find('#note-body')
# It should show all the labels on "~".
type(note, '~')
wait_for_requests
page.within '.atwho-container #at-view-labels' do
expect(find('.atwho-view-ul').text).to have_content('alert label')
end
end
2019-09-30 21:07:59 +05:30
it 'allows colons when autocompleting scoped labels' do
create(:label, project: project, title: 'scoped:label')
note = find('#note-body')
type(note, '~scoped:')
wait_for_requests
page.within '.atwho-container #at-view-labels' do
expect(find('.atwho-view-ul').text).to have_content('scoped:label')
end
end
it 'allows colons when autocompleting scoped labels with double colons' do
create(:label, project: project, title: 'scoped::label')
note = find('#note-body')
type(note, '~scoped::')
wait_for_requests
page.within '.atwho-container #at-view-labels' do
expect(find('.atwho-view-ul').text).to have_content('scoped::label')
end
end
it 'allows spaces when autocompleting multi-word labels' do
create(:label, project: project, title: 'Accepting merge requests')
note = find('#note-body')
type(note, '~Accepting merge')
wait_for_requests
page.within '.atwho-container #at-view-labels' do
expect(find('.atwho-view-ul').text).to have_content('Accepting merge requests')
end
end
it 'only autocompletes the latest label' do
create(:label, project: project, title: 'Accepting merge requests')
create(:label, project: project, title: 'Accepting job applicants')
note = find('#note-body')
type(note, '~Accepting merge requests foo bar ~Accepting job')
wait_for_requests
page.within '.atwho-container #at-view-labels' do
expect(find('.atwho-view-ul').text).to have_content('Accepting job applicants')
end
end
it 'does not autocomplete labels if no tilde is typed' do
create(:label, project: project, title: 'Accepting merge requests')
note = find('#note-body')
type(note, 'Accepting merge')
wait_for_requests
expect(page).not_to have_css('.atwho-container #at-view-labels')
end
2017-08-17 22:00:37 +05:30
end
2018-03-17 18:26:18 +05:30
2019-02-15 15:39:39 +05:30
shared_examples 'autocomplete suggestions' do
it 'suggests objects correctly' do
page.within '.timeline-content-form' do
find('#note-body').native.send_keys(object.class.reference_prefix)
end
page.within '.atwho-container' do
expect(page).to have_content(object.title)
2018-12-23 12:14:25 +05:30
2019-02-15 15:39:39 +05:30
find('ul li').click
end
expect(find('.new-note #note-body').value).to include(expected_body)
2019-01-03 12:48:30 +05:30
end
2018-12-23 12:14:25 +05:30
end
2019-02-15 15:39:39 +05:30
context 'issues' do
let(:object) { issue }
let(:expected_body) { object.to_reference }
it_behaves_like 'autocomplete suggestions'
end
context 'merge requests' do
let(:object) { create(:merge_request, source_project: project) }
let(:expected_body) { object.to_reference }
it_behaves_like 'autocomplete suggestions'
end
context 'project snippets' do
let!(:object) { create(:project_snippet, project: project, title: 'code snippet') }
let(:expected_body) { object.to_reference }
it_behaves_like 'autocomplete suggestions'
end
context 'label' do
let!(:object) { label }
let(:expected_body) { object.title }
it_behaves_like 'autocomplete suggestions'
end
context 'milestone' do
let!(:object) { create(:milestone, project: project) }
let(:expected_body) { object.to_reference }
it_behaves_like 'autocomplete suggestions'
end
2018-03-17 18:26:18 +05:30
private
def expect_to_wrap(should_wrap, item, note, value)
expect(item).to have_content(value)
expect(item).not_to have_content("\"#{value}\"")
item.click
if should_wrap
expect(note.value).to include("\"#{value}\"")
else
expect(note.value).not_to include("\"#{value}\"")
end
end
def expect_labels(shown: nil, not_shown: nil)
page.within('.atwho-container') do
if shown
expect(page).to have_selector('.atwho-view li', count: shown.size)
shown.each { |label| expect(page).to have_content(label.title) }
end
if not_shown
expect(page).not_to have_selector('.atwho-view li') unless shown
not_shown.each { |label| expect(page).not_to have_content(label.title) }
end
end
end
# `note` is a textarea where the given text should be typed.
# We don't want to find it each time this function gets called.
def type(note, text)
page.within('.timeline-content-form') do
note.set('')
note.native.send_keys(text)
end
end
2017-08-17 22:00:37 +05:30
end