spec/javascripts/diffs/components/no_changes_spec.js


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40

import { createLocalVue, shallowMount } from '@vue/test-utils';
import Vuex from 'vuex';
import { createStore } from '~/mr_notes/stores';
import NoChanges from '~/diffs/components/no_changes.vue';

describe('Diff no changes empty state', () => {
  let vm;

  function createComponent(extendStore = () => {}) {
    const localVue = createLocalVue();
    localVue.use(Vuex);

    const store = createStore();
    extendStore(store);

    vm = shallowMount(localVue.extend(NoChanges), {
      localVue,
      store,
      propsData: {
        changesEmptyStateIllustration: '',
      },
    });
  }

  afterEach(() => {
    vm.destroy();
  });

  it('prevents XSS', () => {
    createComponent(store => {
      // eslint-disable-next-line no-param-reassign
      store.state.notes.noteableData = {
        source_branch: '<script>alert("test");</script>',
        target_branch: '<script>alert("test");</script>',
      };
    });

    expect(vm.contains('script')).toBe(false);
  });
});