FIX: correctly display escaped thread titles (#24159)

Prior to this fix, titles with a quote `'` for example, would be rendered as: `&#x27`
This commit is contained in:
Joffrey JAFFEUX
2023-10-30 21:06:31 +01:00
committed by GitHub
parent 56e233464f
commit 4859340b2d
8 changed files with 52 additions and 16 deletions

View File

@ -0,0 +1,24 @@
import { render } from "@ember/test-helpers";
import hbs from "htmlbars-inline-precompile";
import { module, test } from "qunit";
import { setupRenderingTest } from "discourse/tests/helpers/component-test";
import { query } from "discourse/tests/helpers/qunit-helpers";
import fabricators from "discourse/plugins/chat/discourse/lib/fabricators";
module("Discourse Chat | Component | chat-thread-list-item", function (hooks) {
setupRenderingTest(hooks);
test("it safely renders title", async function (assert) {
const title = "<style>body { background: red;}</style>";
this.thread = fabricators.thread({ title });
await render(hbs`
<Chat::ThreadList::Item @thread={{this.thread}} />
`);
assert.equal(
query(".chat-thread-list-item__title").innerHTML.trim(),
"&lt;style&gt;body { background: red;}&lt;/style&gt;"
);
});
});