842e6880b8
* Softrun rubocop * Hardrun rubocop (-A) * Change a rubocop rule * Add missing cops * Undo & redo rubocop -A
14 lines
525 B
Ruby
14 lines
525 B
Ruby
require "rails_helper"
|
|
|
|
RSpec.describe "Display articles search spec", js: true do
|
|
it "returns correct results for a search" do
|
|
query = "<marquee='alert(document.cookie)'>XSS"
|
|
create(:comment, body_markdown: query)
|
|
|
|
url_encoded_query = CGI.escape(query)
|
|
visit "/search?q=#{url_encoded_query}&filters=class_name:Comment"
|
|
|
|
expect(page.find(".crayons-story__snippet")["innerHTML"])
|
|
.to eq("…<mark>marquee</mark>='<mark>alert</mark>(<mark>document.cookie</mark>)'><mark>XSS</mark>…")
|
|
end
|
|
end
|