flashsharp/tests/Flashsharp.Tests/MarkdownRendererTests.cs

using Flashsharp.Ui;

namespace Flashsharp.Tests;

public sealed class MarkdownRendererTests
{
    [Fact]
    public void Keeps_non_latin_text()
    {
        var html = new MarkdownRenderer().ToHtml("سلام دنیا");

        Assert.Contains("سلام دنیا", html);
    }

    [Fact]
    public void Removes_javascript_links()
    {
        var html = new MarkdownRenderer().ToHtml("[click](javascript:alert(1))");

        Assert.DoesNotContain("javascript:", html, StringComparison.OrdinalIgnoreCase);
    }

    [Fact]
    public void Removes_raw_html()
    {
        var html = new MarkdownRenderer().ToHtml("<script>alert(1)</script>");

        Assert.DoesNotContain("<script", html, StringComparison.OrdinalIgnoreCase);
    }

    [Fact]
    public void Renders_markdown()
    {
        var html = new MarkdownRenderer().ToHtml("**bold**");

        Assert.Contains("<strong>bold</strong>", html);
    }
}