2 files changed, 112 insertions, 0 deletions
diff --git a/spec/frontend/locale/ensure_single_line_spec.js b/spec/frontend/locale/ensure_single_line_spec.js
new file mode 100644
index 00000000000..20b04cab9c8
--- /dev/null
+++ b/spec/frontend/locale/ensure_single_line_spec.js
@@ -0,0 +1,38 @@
+import ensureSingleLine from '~/locale/ensure_single_line';
+
+describe('locale', () => {
+  describe('ensureSingleLine', () => {
+    it('should remove newlines at the start of the string', () => {
+      const result = 'Test';
+
+      expect(ensureSingleLine(`\n${result}`)).toBe(result);
+      expect(ensureSingleLine(`\t\n\t${result}`)).toBe(result);
+      expect(ensureSingleLine(`\r\n${result}`)).toBe(result);
+      expect(ensureSingleLine(`\r\n ${result}`)).toBe(result);
+      expect(ensureSingleLine(`\r ${result}`)).toBe(result);
+      expect(ensureSingleLine(` \n ${result}`)).toBe(result);
+    });
+
+    it('should remove newlines at the end of the string', () => {
+      const result = 'Test';
+
+      expect(ensureSingleLine(`${result}\n`)).toBe(result);
+      expect(ensureSingleLine(`${result}\t\n\t`)).toBe(result);
+      expect(ensureSingleLine(`${result}\r\n`)).toBe(result);
+      expect(ensureSingleLine(`${result}\r`)).toBe(result);
+      expect(ensureSingleLine(`${result} \r`)).toBe(result);
+      expect(ensureSingleLine(`${result} \r\n `)).toBe(result);
+    });
+
+    it('should replace newlines in the middle of the string with a single space', () => {
+      const result = 'Test';
+
+      expect(ensureSingleLine(`${result}\n${result}`)).toBe(`${result} ${result}`);
+      expect(ensureSingleLine(`${result}\t\n\t${result}`)).toBe(`${result} ${result}`);
+      expect(ensureSingleLine(`${result}\r\n${result}`)).toBe(`${result} ${result}`);
+      expect(ensureSingleLine(`${result}\r${result}`)).toBe(`${result} ${result}`);
+      expect(ensureSingleLine(`${result} \r${result}`)).toBe(`${result} ${result}`);
+      expect(ensureSingleLine(`${result} \r\n ${result}`)).toBe(`${result} ${result}`);
+    });
+  });
+});
diff --git a/spec/frontend/locale/sprintf_spec.js b/spec/frontend/locale/sprintf_spec.js
new file mode 100644
index 00000000000..52e903b819f
--- /dev/null
+++ b/spec/frontend/locale/sprintf_spec.js
@@ -0,0 +1,74 @@
+import sprintf from '~/locale/sprintf';
+
+describe('locale', () => {
+  describe('sprintf', () => {
+    it('does not modify string without parameters', () => {
+      const input = 'No parameters';
+
+      const output = sprintf(input);
+
+      expect(output).toBe(input);
+    });
+
+    it('ignores extraneous parameters', () => {
+      const input = 'No parameters';
+
+      const output = sprintf(input, { ignore: 'this' });
+
+      expect(output).toBe(input);
+    });
+
+    it('ignores extraneous placeholders', () => {
+      const input = 'No %{parameters}';
+
+      const output = sprintf(input);
+
+      expect(output).toBe(input);
+    });
+
+    it('replaces parameters', () => {
+      const input = '%{name} has %{count} parameters';
+      const parameters = {
+        name: 'this',
+        count: 2,
+      };
+
+      const output = sprintf(input, parameters);
+
+      expect(output).toBe('this has 2 parameters');
+    });
+
+    it('replaces multiple occurrences', () => {
+      const input = 'to %{verb} or not to %{verb}';
+      const parameters = {
+        verb: 'be',
+      };
+
+      const output = sprintf(input, parameters);
+
+      expect(output).toBe('to be or not to be');
+    });
+
+    it('escapes parameters', () => {
+      const input = 'contains %{userContent}';
+      const parameters = {
+        userContent: '<script>alert("malicious!")</script>',
+      };
+
+      const output = sprintf(input, parameters);
+
+      expect(output).toBe('contains &lt;script&gt;alert(&quot;malicious!&quot;)&lt;/script&gt;');
+    });
+
+    it('does not escape parameters for escapeParameters = false', () => {
+      const input = 'contains %{safeContent}';
+      const parameters = {
+        safeContent: '<strong>bold attempt</strong>',
+      };
+
+      const output = sprintf(input, parameters, false);
+
+      expect(output).toBe('contains <strong>bold attempt</strong>');
+    });
+  });
+});