diff options
Diffstat (limited to 'test/web/controller')
-rw-r--r-- | test/web/controller/frontend/static_controller_test.exs | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/test/web/controller/frontend/static_controller_test.exs b/test/web/controller/frontend/static_controller_test.exs index cc328ca64..ac447341b 100644 --- a/test/web/controller/frontend/static_controller_test.exs +++ b/test/web/controller/frontend/static_controller_test.exs @@ -94,6 +94,20 @@ defmodule Pleroma.Web.Frontend.StaticControllerTest do assert html =~ "testing a thing!" end + test "redirects to json if requested", %{conn: conn, user: user} do + {:ok, activity} = CommonAPI.post(user, %{status: "testing a thing!"}) + + conn = + conn + |> put_req_header( + "accept", + "Accept: application/activity+json, application/ld+json; profile=\"https://www.w3.org/ns/activitystreams\", text/html" + ) + |> get("/notice/#{activity.id}") + + assert redirected_to(conn, 302) =~ activity.data["object"] + end + test "filters HTML tags", %{conn: conn} do user = insert(:user) {:ok, activity} = CommonAPI.post(user, %{status: "<script>alert('xss')</script>"}) |