88 lines
3.2 KiB
Go
88 lines
3.2 KiB
Go
// Copyright 2026 Alibaba Group
|
||
// Licensed under the Apache License, Version 2.0 (the "License");
|
||
// you may not use this file except in compliance with the License.
|
||
// You may obtain a copy of the License at
|
||
//
|
||
// http://www.apache.org/licenses/LICENSE-2.0
|
||
//
|
||
// Unless required by applicable law or agreed to in writing, software
|
||
// distributed under the License is distributed on an "AS IS" BASIS,
|
||
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||
// See the License for the specific language governing permissions and
|
||
// limitations under the License.
|
||
|
||
package helpers
|
||
|
||
import (
|
||
"encoding/json"
|
||
"strings"
|
||
"testing"
|
||
|
||
"github.com/DingTalk-Real-AI/dingtalk-workspace-cli/internal/jsonutil"
|
||
)
|
||
|
||
// TestDevAppEnvelopeJSONMatchesJSONUtilEscaping 是队列 B121 的信封 JSON 与
|
||
// jsonutil 转义一致性断言：信封 JSON 经 jsonutil.MarshalIndent（HTML 转义
|
||
// 关闭）序列化，& < > 与 URL 查询分隔符原样保留，不出现 \u003c/\u0026 等
|
||
// HTML 转义序列。业务载荷含 URL 时不应被转义破坏。
|
||
func TestDevAppEnvelopeJSONMatchesJSONUtilEscaping(t *testing.T) {
|
||
content := map[string]any{
|
||
"unifiedAppId": "u-1",
|
||
"homepageUrl": "https://example.com/redirect?dest=a&from=b&raw=<payload>",
|
||
"name": "Demo<App>&Co",
|
||
}
|
||
out, errBuf, err := runDevAppFamily(t, devAppFamilyContentRunner(content),
|
||
"dev", "app", "get", "--unified-app-id", "u-1")
|
||
if err != nil {
|
||
t.Fatalf("Execute() error = %v\nstdout:\n%s\nstderr:\n%s", err, out.String(), errBuf.String())
|
||
}
|
||
s := out.String()
|
||
|
||
// ① 载荷 URL/特殊字符原样保留（HTML 转义关闭）。
|
||
for _, want := range []string{"https://example.com/redirect?dest=a&from=b&raw=<payload>", "Demo<App>&Co"} {
|
||
if !strings.Contains(s, want) {
|
||
t.Fatalf("envelope JSON must preserve raw %q (HTML escaping disabled):\n%s", want, s)
|
||
}
|
||
}
|
||
// ② 不得出现 HTML 转义序列。
|
||
for _, banned := range []string{"\\u003c", "\\u003e", "\\u0026", "\\u003d", "\\u002f"} {
|
||
if strings.Contains(s, banned) {
|
||
t.Fatalf("envelope JSON must not HTML-escape to %q:\n%s", banned, s)
|
||
}
|
||
}
|
||
|
||
// ③ 与 jsonutil.MarshalIndent 对同一数据载荷的序列化逐字一致（转义规则同源）。
|
||
env := map[string]any{
|
||
"ok": true,
|
||
"outcome": "success",
|
||
"data": content,
|
||
}
|
||
wantJSON, err := jsonutil.MarshalIndent(env, "", " ")
|
||
if err != nil {
|
||
t.Fatalf("jsonutil.MarshalIndent: %v", err)
|
||
}
|
||
// 信封 Data 是 content 的强类型 map，序列化键序稳定：比对 data 片段即可。
|
||
var gotData struct {
|
||
Data map[string]any `json:"data"`
|
||
}
|
||
if err := json.Unmarshal(out.Bytes(), &gotData); err != nil {
|
||
t.Fatalf("stdout not a JSON envelope: %v\n%s", err, out.String())
|
||
}
|
||
wantDataStruct := struct {
|
||
Data map[string]any `json:"data"`
|
||
}{Data: content}
|
||
wantDataJSON, err := jsonutil.MarshalIndent(wantDataStruct, "", " ")
|
||
if err != nil {
|
||
t.Fatalf("jsonutil.MarshalIndent(data): %v", err)
|
||
}
|
||
gotDataJSON, err := jsonutil.MarshalIndent(gotData, "", " ")
|
||
if err != nil {
|
||
t.Fatalf("jsonutil.MarshalIndent(got): %v", err)
|
||
}
|
||
if string(gotDataJSON) != string(wantDataJSON) {
|
||
t.Fatalf("envelope data serialization diverges from jsonutil:\nGOT:\n%s\nWANT:\n%s",
|
||
gotDataJSON, wantDataJSON)
|
||
}
|
||
_ = wantJSON
|
||
}
|