Leahnaya/sendou.ink
1
0
Fork 0
mirror of https://github.com/Sendouc/sendou.ink.git synced 2026-09-30 23:27:55 -05:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Stricter URL widget validation

Browse Source
This commit is contained in:
Kalle
2026-09-06 11:49:33 +03:00
parent 0461374771
commit 99f2de3bee
2 changed files with 43 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

29
app/form/fields.test.ts Normal file
View File

@@ -0,0 +1,29 @@
import * as v from "valibot";
import { describe, expect, test } from "vitest";
import { textField, textFieldOptional } from "./fields";
describe("textField", () => {
const schema = textField({ validate: "url", maxLength: 150 });
test.each([
["https://sendou.ink", true, "https URL"],
["http://sendou.ink", true, "http URL"],
["javascript:alert(1)", false, "javascript URL"],
["JavaScript:alert(1)", false, "javascript URL with mixed case protocol"],
["data:text/html,<script>alert(1)</script>", false, "data URL"],
["not a url", false, "not a URL at all"],
])("%s -> %s (%s)", (input, expected) => {
expect(v.safeParse(schema, input).success).toBe(expected);
});
});
describe("textFieldOptional", () => {
const schema = textFieldOptional({ validate: "url", maxLength: 150 });
test.each([
["https://sendou.ink", true, "https URL"],
["javascript:alert(1)", false, "javascript URL"],
])("%s -> %s (%s)", (input, expected) => {
expect(v.safeParse(schema, input).success).toBe(expected);
});
});