text
') + done() + }) + + it('Should handle paragraph with undefined attrs', done => { + const renderString = (defaultNodeOption[NodeType.PARAGRAPH] as RenderNode)(nodeWithUndefinedAttrs, next) + expect(renderString).toEqual('text
') + done() + }) + + it('Should handle link without attrs', done => { + const linkNodeNoAttrs = { + type: NodeType.LINK, + children: [] + } as unknown as Node + const renderString = (defaultNodeOption[NodeType.LINK] as RenderNode)(linkNodeNoAttrs, next) + expect(renderString).toEqual('text') + done() + }) + + it('Should handle link without href or url', done => { + const linkNodePartialAttrs = { + type: NodeType.LINK, + attrs: { style: 'color: red;' }, + children: [] + } as Node + const renderString = (defaultNodeOption[NodeType.LINK] as RenderNode)(linkNodePartialAttrs, next) + expect(renderString).toEqual('text') + done() + }) + + it('Should handle image without attrs', done => { + const imgNodeNoAttrs = { + type: NodeType.IMAGE, + children: [] + } as unknown as Node + const renderString = (defaultNodeOption[NodeType.IMAGE] as RenderNode)(imgNodeNoAttrs, next) + expect(renderString).toEqual('text') + done() + }) + + it('Should handle code without attrs', done => { + const codeNoAttrs = { + type: NodeType.CODE, + children: [] + } as unknown as Node + const renderString = (defaultNodeOption[NodeType.CODE] as RenderNode)(codeNoAttrs, next) + expect(renderString).toEqual('
text')
+ done()
+ })
+
+ it('Should handle reference without attrs', done => {
+ const referenceNoAttrs = {
+ type: NodeType.REFERENCE,
+ children: []
+ } as unknown as Node
+ const renderString = (defaultNodeOption.reference as RenderNode)(referenceNoAttrs, next)
+ expect(renderString).toEqual('')
+ done()
+ })
+
+ it('Should handle reference with type but no display-type', done => {
+ const referencePartialAttrs = {
+ type: NodeType.REFERENCE,
+ attrs: { type: 'entry' },
+ children: []
+ } as Node
+ const renderString = (defaultNodeOption.reference as RenderNode)(referencePartialAttrs, next)
+ expect(renderString).toEqual('')
+ done()
+ })
+
+ it('Should handle reference with entry type and link display-type but missing href', done => {
+ const referenceLinkNoHref = {
+ type: NodeType.REFERENCE,
+ attrs: { type: 'entry', 'display-type': 'link' },
+ children: []
+ } as Node
+ const renderString = (defaultNodeOption.reference as RenderNode)(referenceLinkNoHref, next)
+ expect(renderString).toEqual('text')
+ done()
+ })
+
+ it('Should handle reference with asset type and link display-type but missing href', done => {
+ const referenceAssetLinkNoHref = {
+ type: NodeType.REFERENCE,
+ attrs: { type: 'asset', 'display-type': 'link' },
+ children: []
+ } as Node
+ const renderString = (defaultNodeOption.reference as RenderNode)(referenceAssetLinkNoHref, next)
+ expect(renderString).toEqual('text')
+ done()
+ })
+
+ it('Should handle reference with asset type but missing asset-link', done => {
+ const referenceAssetNoLink = {
+ type: NodeType.REFERENCE,
+ attrs: { type: 'asset' },
+ children: []
+ } as Node
+ const renderString = (defaultNodeOption.reference as RenderNode)(referenceAssetNoLink, next)
+ expect(renderString).toEqual('text
') + done() + }) + + it('Should handle elements with only id attribute', done => { + const nodeWithId = { + type: NodeType.PARAGRAPH, + attrs: { id: 'custom-id' }, + children: [] + } as Node + const renderString = (defaultNodeOption[NodeType.PARAGRAPH] as RenderNode)(nodeWithId, next) + expect(renderString).toEqual('text
') + done() + }) + + it('Should handle elements with only style attribute', done => { + const nodeWithStyle = { + type: NodeType.PARAGRAPH, + attrs: { style: 'color: blue;' }, + children: [] + } as Node + const renderString = (defaultNodeOption[NodeType.PARAGRAPH] as RenderNode)(nodeWithStyle, next) + expect(renderString).toEqual('text
') + done() + }) + + it('Should handle all common attributes together', done => { + const nodeWithAllAttrs = { + type: NodeType.PARAGRAPH, + attrs: { + style: 'color: blue;', + 'class-name': 'custom-class', + id: 'custom-id' + }, + children: [] + } as Node + const renderString = (defaultNodeOption[NodeType.PARAGRAPH] as RenderNode)(nodeWithAllAttrs, next) + expect(renderString).toEqual('text
') + done() + }) }) \ No newline at end of file diff --git a/__test__/default-options.test.ts b/__test__/default-options.test.ts index dcfc9f6..8b21da5 100644 --- a/__test__/default-options.test.ts +++ b/__test__/default-options.test.ts @@ -27,7 +27,7 @@ describe('Default Option test', () => { it('Default options Entry with only uid test', done => { expect(entryBlockFunction(entryContentBlank, embedAttributes)).toEqual(`${entryContentBlank.uid}
Content type: ${entryContentBlank._content_type_uid}
${entryContentTitle.title}
Content type: ${entryContentTitle._content_type_uid}
hisdassf
", + "select": "1", + "group": { + "single_line": "" + }, + "non_single_line_textbox": "", + "reference": [ + { + "title": "base variant", + "single_line": "bases", + "tags": [] as any[], + "locale": "en-us", + "uid": "blt07a6c7258ddba844", + "created_by": "bltf0d59057590e9b09", + "updated_by": "bltf0d59057590e9b09", + "created_at": "2025-10-01T03:10:10.701Z", + "updated_at": "2025-10-09T11:44:44.981Z", + "_content_type_uid": "all_test_3", + "ACL": [] as any[], + "_version": 3, + "_in_progress": false, + "multi_line_reference": "hii\n" + // Note: This reference object has NO _applied_variants + } + ], + "taxonomies": [] as any[], + "multi_line": "woek", + "_applied_variants": { + "single_line": "csfff653e89df54e8c", + "tags": "csfff653e89df54e8c", + "multi_line": "csfff653e89df54e8c" + } + } + + addTags(entryWithReferenceAndVariants, 'all_test', false) + + // Parent entry fields with variants should get v2 prefix + expect((entryWithReferenceAndVariants as any)['$']['single_line']).toEqual('data-cslp=v2:all_test.blt827e0ad3608248be_csfff653e89df54e8c.en-us.single_line') + expect((entryWithReferenceAndVariants as any)['$']['tags']).toEqual('data-cslp=v2:all_test.blt827e0ad3608248be_csfff653e89df54e8c.en-us.tags') + expect((entryWithReferenceAndVariants as any)['$']['multi_line']).toEqual('data-cslp=v2:all_test.blt827e0ad3608248be_csfff653e89df54e8c.en-us.multi_line') + + // Reference fields should NOT get v2 prefix since they have no _applied_variants + expect((entryWithReferenceAndVariants as any)['reference'][0]['$']['title']).toEqual('data-cslp=all_test_3.blt07a6c7258ddba844.en-us.title') + expect((entryWithReferenceAndVariants as any)['reference'][0]['$']['single_line']).toEqual('data-cslp=all_test_3.blt07a6c7258ddba844.en-us.single_line') + expect((entryWithReferenceAndVariants as any)['reference'][0]['$']['tags']).toEqual('data-cslp=all_test_3.blt07a6c7258ddba844.en-us.tags') + expect((entryWithReferenceAndVariants as any)['reference'][0]['$']['multi_line_reference']).toEqual('data-cslp=all_test_3.blt07a6c7258ddba844.en-us.multi_line_reference') + + done() + }) + + it('Reference fields with their own applied_variants should use their variants', done => { + const entryWithReferenceHavingVariants = { + "title": "home", + "locale": "en-us", + "uid": "blt827e0ad3608248be", + "ACL": [] as any[], + "_version": 40, + "_in_progress": false, + "single_line": "parent field", + "reference": [ + { + "title": "base variant", + "single_line": "reference field", + "locale": "en-us", + "uid": "blt07a6c7258ddba844", + "_content_type_uid": "all_test_3", + "ACL": [] as any[], + "_version": 3, + "_in_progress": false, + "_applied_variants": { + "single_line": "ref_variant_123" + } + } + ], + "_applied_variants": { + "single_line": "parent_variant_456" + } + } + + addTags(entryWithReferenceHavingVariants, 'all_test', false) + + // Parent entry field should get parent variant + expect((entryWithReferenceHavingVariants as any)['$']['single_line']).toEqual('data-cslp=v2:all_test.blt827e0ad3608248be_parent_variant_456.en-us.single_line') + + // Reference field should get its own variant, not parent variant + expect((entryWithReferenceHavingVariants as any)['reference'][0]['$']['title']).toEqual('data-cslp=all_test_3.blt07a6c7258ddba844.en-us.title') + expect((entryWithReferenceHavingVariants as any)['reference'][0]['$']['single_line']).toEqual('data-cslp=v2:all_test_3.blt07a6c7258ddba844_ref_variant_123.en-us.single_line') + + done() + }) + + it('Reference fields should work correctly with tagsAsObject=true', done => { + const entryWithReferenceAndVariants = { + "title": "home", + "single_line": "ssd", + "locale": "en-us", + "uid": "blt827e0ad3608248be", + "ACL": [] as any[], + "_version": 40, + "_in_progress": false, + "reference": [ + { + "title": "base variant", + "single_line": "bases", + "locale": "en-us", + "uid": "blt07a6c7258ddba844", + "_content_type_uid": "all_test_3", + "ACL": [] as any[], + "_version": 3, + "_in_progress": false + // No _applied_variants + } + ], + "_applied_variants": { + "single_line": "csfff653e89df54e8c" + } + } + + addTags(entryWithReferenceAndVariants, 'all_test', true) + + // Parent entry field with variant should get v2 prefix as object + expect((entryWithReferenceAndVariants as any)['$']['single_line']).toEqual({'data-cslp': 'v2:all_test.blt827e0ad3608248be_csfff653e89df54e8c.en-us.single_line'}) + + // Reference fields should NOT get v2 prefix as objects + expect((entryWithReferenceAndVariants as any)['reference'][0]['$']['title']).toEqual({'data-cslp': 'all_test_3.blt07a6c7258ddba844.en-us.title'}) + expect((entryWithReferenceAndVariants as any)['reference'][0]['$']['single_line']).toEqual({'data-cslp': 'all_test_3.blt07a6c7258ddba844.en-us.single_line'}) + + done() + }) }) }) \ No newline at end of file diff --git a/__test__/json-to-html.test.ts b/__test__/json-to-html.test.ts index 0bd5494..b468b86 100644 --- a/__test__/json-to-html.test.ts +++ b/__test__/json-to-html.test.ts @@ -141,6 +141,129 @@ describe('Node parser paragraph content', () => { expect(entry.rich_text_editor).toEqual(escapeHtml) done() }) + + it('Should escape HTML tags in text content to prevent rendering as HTML', done => { + const entry = { + uid: 'test_uid', + rich_text_editor: { + uid: "uid", + _version: 1, + attrs: {}, + children: [ + { + children: [ + { + text: 'Hello world! This is paragraph 1.' + } + ], + type: 'p', + uid: 'hjsbhys1234', + attrs: {} + } + ], + type: "doc" + } + } + + jsonToHTML({entry, paths: ['rich_text_editor']}) + + expect(entry.rich_text_editor).toEqual('<b>Hello <i>world</i></b>! This is paragraph 1.
') + done() + }) + + it('Should escape HTML tags in text with actual bold formatting', done => { + const entry = { + uid: 'test_uid', + rich_text_editor: { + uid: "uid", + _version: 1, + attrs: {}, + children: [ + { + children: [ + { + text: 'This is ', + }, + { + text: 'bold text', + bold: true + }, + { + text: ' with HTML tags' + } + ], + type: 'p', + uid: 'test_uid_1', + attrs: {} + } + ], + type: "doc" + } + } + + jsonToHTML({entry, paths: ['rich_text_editor']}) + + expect(entry.rich_text_editor).toEqual('This is <b>bold text</b> with HTML tags
') + done() + }) + + it('Should escape dangerous script tags in text content', done => { + const entry = { + uid: 'test_uid', + rich_text_editor: { + uid: "uid", + _version: 1, + attrs: {}, + children: [ + { + children: [ + { + text: ' This should be safe' + } + ], + type: 'p', + uid: 'test_uid_2', + attrs: {} + } + ], + type: "doc" + } + } + + jsonToHTML({entry, paths: ['rich_text_editor']}) + + expect(entry.rich_text_editor).toEqual('<script>alert("XSS")</script> This should be safe
') + done() + }) + + it('Should escape HTML entities like ampersand and quotes in text', done => { + const entry = { + uid: 'test_uid', + rich_text_editor: { + uid: "uid", + _version: 1, + attrs: {}, + children: [ + { + children: [ + { + text: 'Text with & ampersand and "quotes" should be escaped' + } + ], + type: 'p', + uid: 'test_uid_3', + attrs: {} + } + ], + type: "doc" + } + } + + jsonToHTML({entry, paths: ['rich_text_editor']}) + + expect(entry.rich_text_editor).toEqual('Text with & ampersand and "quotes" should be escaped
') + done() + }) }) diff --git a/__test__/mock/entry-mock.ts b/__test__/mock/entry-mock.ts index 2cb3f23..36a976e 100644 --- a/__test__/mock/entry-mock.ts +++ b/__test__/mock/entry-mock.ts @@ -644,6 +644,6 @@ export const entrymultipleRTERenderOption = `entry_uid_21
Content type: 1234
data
" const classAndIdAttrsHtml = "link![](\"https://dummyImage.url/Donald.jog.png\")
Open entry as a link in new tab
" -const referenceObjHtmlBlock = "Embed entry as a link open in new tab
Embed entry as a link open in new tab
![\"batman\"](\"https://images.contentstack.io/v3/assets/api-key/asset-UID/random-uid/batman.png\")
<p>Welcome to Contentstack! <script>console.log(/"Hello from Contentstack!/");</script> Explore our platform to create, manage, and publish content seamlessly.</p>
" const breakTestHtml = "Normal text with
break tag after break.