[ckeditor][markdown] introduce twig filter chill_markdown_to_html

2025-08-21 07:03:49 +00:00 · 2021-03-22 17:32:57 +01:00
parent f619171120
commit 527b658ca0
5 changed files with 164 additions and 11 deletions
--- a/src/Bundle/ChillMainBundle/Tests/Templating/ChillMarkdownRenderExtensionTest.php
+++ b/src/Bundle/ChillMainBundle/Tests/Templating/ChillMarkdownRenderExtensionTest.php
@@ -0,0 +1,76 @@
+<?php
+/*
+ * Chill is a software for social workers
+ *
+ * Copyright (C) 2014-2021, Champs Libres Cooperative SCRLFS, 
+ * <http://www.champs-libres.coop>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+namespace Chill\MainBundle\Tests\Templating;
+
+use PHPUnit\Framework\TestCase;
+use Chill\MainBundle\Templating\ChillMarkdownRenderExtension;
+
+/**
+ * Test the service ChillMarkdownRenderExtension
+ * 
+ * @internal we do not want to test the markdown transformation. We just want to
+ * test that the markdown is correctly transformed into html, and that the html 
+ * is safe.
+ */
+class ChillMarkdownRenderExtensionTest extends TestCase
+{
+    
+    private const SIMPLE_MARKDOWN = <<<MD
+# test
+
+Text.
+MD;
+    
+    private const SIMPLE_HTML = <<<HTML
+<h1>test</h1>
+<p>Text.</p>
+HTML;
+    
+    private const UNAUTHORIZED_MARKDOWN = <<<MD
+<script>alert("ok");</script>
+MD;
+    
+    private const UNAUTHORIZED_HTML = <<<HTML
+<p>&lt;script&gt;alert(&quot;ok&quot;);&lt;/script&gt;</p>
+HTML;
+    
+    /**
+     * Test that the markdown input is transformed into html
+     */
+    public function testRendering()
+    {
+        $extension = new ChillMarkdownRenderExtension();
+        
+        $this->assertEquals(self::SIMPLE_HTML, 
+            $extension->renderMarkdownToHtml(self::SIMPLE_MARKDOWN));
+    }
+    
+    /**
+     * Test that the output of the markdown content is sanitized
+     */
+    public function testSecurity()
+    {
+        $extension = new ChillMarkdownRenderExtension();
+        
+        $this->assertEquals(self::UNAUTHORIZED_HTML, 
+            $extension->renderMarkdownToHtml(self::UNAUTHORIZED_MARKDOWN));
+    }
+}