factories.spec.ts 13 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382
  1. // Copyright (c) Jupyter Development Team.
  2. // Distributed under the terms of the Modified BSD License.
  3. import 'jest';
  4. const sampleData = require('../../../examples/filebrowser/sample.md');
  5. import { JSONObject, JSONValue } from '@lumino/coreutils';
  6. import { Widget } from '@lumino/widgets';
  7. import { defaultSanitizer } from '@jupyterlab/apputils';
  8. import {
  9. latexRendererFactory,
  10. svgRendererFactory,
  11. markdownRendererFactory,
  12. textRendererFactory,
  13. htmlRendererFactory,
  14. imageRendererFactory
  15. } from '../src';
  16. import { MimeModel, IRenderMime } from '../src';
  17. function createModel(
  18. mimeType: string,
  19. source: JSONValue,
  20. trusted = false
  21. ): IRenderMime.IMimeModel {
  22. const data: JSONObject = {};
  23. data[mimeType] = source;
  24. return new MimeModel({ data, trusted });
  25. }
  26. const sanitizer = defaultSanitizer;
  27. const defaultOptions: any = {
  28. sanitizer,
  29. linkHandler: null,
  30. resolver: null
  31. };
  32. describe('rendermime/factories', () => {
  33. describe('textRendererFactory', () => {
  34. describe('#mimeTypes', () => {
  35. it('should have text related mimeTypes', () => {
  36. const mimeTypes = [
  37. 'text/plain',
  38. 'application/vnd.jupyter.stdout',
  39. 'application/vnd.jupyter.stderr'
  40. ];
  41. expect(textRendererFactory.mimeTypes).toEqual(mimeTypes);
  42. });
  43. });
  44. describe('#safe', () => {
  45. it('should be safe', () => {
  46. expect(textRendererFactory.safe).toBe(true);
  47. });
  48. });
  49. describe('#createRenderer()', () => {
  50. it('should output the correct HTML', async () => {
  51. const f = textRendererFactory;
  52. const mimeType = 'text/plain';
  53. const model = createModel(mimeType, 'x = 2 ** a');
  54. const w = f.createRenderer({ mimeType, ...defaultOptions });
  55. await w.renderModel(model);
  56. expect(w.node.innerHTML).toBe('<pre>x = 2 ** a</pre>');
  57. });
  58. it('should be re-renderable', async () => {
  59. const f = textRendererFactory;
  60. const mimeType = 'text/plain';
  61. const model = createModel(mimeType, 'x = 2 ** a');
  62. const w = f.createRenderer({ mimeType, ...defaultOptions });
  63. await w.renderModel(model);
  64. await w.renderModel(model);
  65. expect(w.node.innerHTML).toBe('<pre>x = 2 ** a</pre>');
  66. });
  67. it('should output the correct HTML with ansi colors', async () => {
  68. const f = textRendererFactory;
  69. const source = 'There is no text but \x1b[01;41;32mtext\x1b[00m.\nWoo.';
  70. const mimeType = 'application/vnd.jupyter.console-text';
  71. const model = createModel(mimeType, source);
  72. const w = f.createRenderer({ mimeType, ...defaultOptions });
  73. await w.renderModel(model);
  74. expect(w.node.innerHTML).toBe(
  75. '<pre>There is no text but <span class="ansi-green-intense-fg ansi-red-bg ansi-bold">text</span>.\nWoo.</pre>'
  76. );
  77. });
  78. it('should escape inline html', async () => {
  79. const f = textRendererFactory;
  80. const source =
  81. 'There is no text <script>window.x=1</script> but \x1b[01;41;32mtext\x1b[00m.\nWoo.';
  82. const mimeType = 'application/vnd.jupyter.console-text';
  83. const model = createModel(mimeType, source);
  84. const w = f.createRenderer({ mimeType, ...defaultOptions });
  85. await w.renderModel(model);
  86. expect(w.node.innerHTML).toBe(
  87. '<pre>There is no text &lt;script&gt;window.x=1&lt;/script&gt; but <span class="ansi-green-intense-fg ansi-red-bg ansi-bold">text</span>.\nWoo.</pre>'
  88. );
  89. });
  90. it('should autolink URLs', async () => {
  91. const f = textRendererFactory;
  92. const urls = [
  93. 'https://example.com',
  94. 'https://example.com/',
  95. 'https://example.com#anchor',
  96. 'http://localhost:9090/app',
  97. 'http://localhost:9090/app/',
  98. 'http://127.0.0.1/test?query=string'
  99. ];
  100. await Promise.all(
  101. urls.map(async url => {
  102. const source = `Here is some text with an URL such as ${url} inside.`;
  103. const mimeType = 'text/plain';
  104. const model = createModel(mimeType, source);
  105. const w = f.createRenderer({ mimeType, ...defaultOptions });
  106. await w.renderModel(model);
  107. expect(w.node.innerHTML).toBe(
  108. `<pre>Here is some text with an URL such as <a href="${url}" rel="noopener" target="_blank">${url}</a> inside.</pre>`
  109. );
  110. })
  111. );
  112. });
  113. });
  114. });
  115. describe('latexRendererFactory', () => {
  116. describe('#mimeTypes', () => {
  117. it('should have the text/latex mimeType', () => {
  118. expect(latexRendererFactory.mimeTypes).toEqual(['text/latex']);
  119. });
  120. });
  121. describe('#safe', () => {
  122. it('should be safe', () => {
  123. expect(latexRendererFactory.safe).toBe(true);
  124. });
  125. });
  126. describe('#createRenderer()', () => {
  127. it('should set the textContent of the widget', async () => {
  128. const source = 'sumlimits_{i=0}^{infty} \frac{1}{n^2}';
  129. const f = latexRendererFactory;
  130. const mimeType = 'text/latex';
  131. const model = createModel(mimeType, source);
  132. const w = f.createRenderer({ mimeType, ...defaultOptions });
  133. await w.renderModel(model);
  134. expect(w.node.textContent).toBe(source);
  135. });
  136. it('should be re-renderable', async () => {
  137. const source = 'sumlimits_{i=0}^{infty} \frac{1}{n^2}';
  138. const f = latexRendererFactory;
  139. const mimeType = 'text/latex';
  140. const model = createModel(mimeType, source);
  141. const w = f.createRenderer({ mimeType, ...defaultOptions });
  142. await w.renderModel(model);
  143. await w.renderModel(model);
  144. expect(w.node.textContent).toBe(source);
  145. });
  146. });
  147. });
  148. describe('svgRendererFactory', () => {
  149. describe('#mimeTypes', () => {
  150. it('should have the image/svg+xml mimeType', () => {
  151. expect(svgRendererFactory.mimeTypes).toEqual(['image/svg+xml']);
  152. });
  153. });
  154. describe('#safe', () => {
  155. it('should not be safe', () => {
  156. expect(svgRendererFactory.safe).toBe(false);
  157. });
  158. });
  159. describe('#createRenderer()', () => {
  160. it('should create an img element with the uri encoded svg inline', async () => {
  161. const source = '<svg></svg>';
  162. const displaySource = '<svg xmlns="http://www.w3.org/2000/svg"></svg>';
  163. const f = svgRendererFactory;
  164. const mimeType = 'image/svg+xml';
  165. const model = createModel(mimeType, source, true);
  166. const w = f.createRenderer({ mimeType, ...defaultOptions });
  167. await w.renderModel(model);
  168. const imgEl = w.node.getElementsByTagName('img')[0];
  169. expect(imgEl).toBeTruthy();
  170. expect(imgEl.src).toContain(encodeURIComponent(displaySource));
  171. });
  172. });
  173. });
  174. describe('markdownRendererFactory', () => {
  175. describe('#mimeTypes', () => {
  176. it('should have the text/markdown mimeType', function() {
  177. expect(markdownRendererFactory.mimeTypes).toEqual(['text/markdown']);
  178. });
  179. });
  180. describe('#safe', () => {
  181. it('should be safe', () => {
  182. expect(markdownRendererFactory.safe).toBe(true);
  183. });
  184. });
  185. describe('#createRenderer()', () => {
  186. it('should set the inner html', async () => {
  187. const f = markdownRendererFactory;
  188. const source = '<p>hello</p>';
  189. const mimeType = 'text/markdown';
  190. const model = createModel(mimeType, source);
  191. const w = f.createRenderer({ mimeType, ...defaultOptions });
  192. await w.renderModel(model);
  193. expect(w.node.innerHTML).toBe(source);
  194. });
  195. it('it should be re-renderable', async () => {
  196. const f = markdownRendererFactory;
  197. const source = '<p>hello</p>';
  198. const mimeType = 'text/markdown';
  199. const model = createModel(mimeType, source);
  200. const w = f.createRenderer({ mimeType, ...defaultOptions });
  201. await w.renderModel(model);
  202. await w.renderModel(model);
  203. expect(w.node.innerHTML).toBe(source);
  204. });
  205. it('should add header anchors', async () => {
  206. const f = markdownRendererFactory;
  207. const mimeType = 'text/markdown';
  208. const model = createModel(mimeType, sampleData);
  209. const w = f.createRenderer({ mimeType, ...defaultOptions });
  210. await w.renderModel(model);
  211. Widget.attach(w, document.body);
  212. const node = document.getElementById('Title-third-level')!;
  213. expect(node.localName).toBe('h3');
  214. const anchor = node.firstChild!.nextSibling as HTMLAnchorElement;
  215. expect(anchor.href).toContain('#Title-third-level');
  216. expect(anchor.target).toBe('_self');
  217. expect(anchor.className).toContain('jp-InternalAnchorLink');
  218. expect(anchor.textContent).toBe('¶');
  219. Widget.detach(w);
  220. });
  221. it('should sanitize the html', async () => {
  222. const f = markdownRendererFactory;
  223. const source = '<p>hello</p><script>alert("foo")</script>';
  224. const mimeType = 'text/markdown';
  225. const model = createModel(mimeType, source);
  226. const w = f.createRenderer({ mimeType, ...defaultOptions });
  227. await w.renderModel(model);
  228. expect(w.node.innerHTML).toEqual(
  229. expect.not.arrayContaining(['script'])
  230. );
  231. });
  232. });
  233. });
  234. describe('htmlRendererFactory', () => {
  235. describe('#mimeTypes', () => {
  236. it('should have the text/html mimeType', () => {
  237. expect(htmlRendererFactory.mimeTypes).toEqual(['text/html']);
  238. });
  239. });
  240. describe('#safe', () => {
  241. it('should be safe', () => {
  242. expect(htmlRendererFactory.safe).toBe(true);
  243. });
  244. });
  245. describe('#createRenderer()', () => {
  246. it('should set the inner HTML', async () => {
  247. const f = htmlRendererFactory;
  248. const source = '<h1>This is great</h1>';
  249. const mimeType = 'text/html';
  250. const model = createModel(mimeType, source);
  251. const w = f.createRenderer({ mimeType, ...defaultOptions });
  252. await w.renderModel(model);
  253. expect(w.node.innerHTML).toBe('<h1>This is great</h1>');
  254. });
  255. it('should be re-renderable', async () => {
  256. const f = htmlRendererFactory;
  257. const source = '<h1>This is great</h1>';
  258. const mimeType = 'text/html';
  259. const model = createModel(mimeType, source);
  260. const w = f.createRenderer({ mimeType, ...defaultOptions });
  261. await w.renderModel(model);
  262. await w.renderModel(model);
  263. expect(w.node.innerHTML).toBe('<h1>This is great</h1>');
  264. });
  265. // TODO we are disabling script execution for now.
  266. it.skip('should execute a script tag when attached', () => {
  267. const source = '<script>window.y=3;</script>';
  268. const f = htmlRendererFactory;
  269. const mimeType = 'text/html';
  270. const model = createModel(mimeType, source, true);
  271. const w = f.createRenderer({ mimeType, ...defaultOptions });
  272. return w.renderModel(model).then(() => {
  273. expect((window as any).y).toBeUndefined();
  274. Widget.attach(w, document.body);
  275. expect((window as any).y).toBe(3);
  276. w.dispose();
  277. });
  278. });
  279. it('should sanitize when untrusted', async () => {
  280. const source = '<pre><script>window.y=3;</script></pre>';
  281. const f = htmlRendererFactory;
  282. const mimeType = 'text/html';
  283. const model = createModel(mimeType, source);
  284. const w = f.createRenderer({ mimeType, ...defaultOptions });
  285. await w.renderModel(model);
  286. expect(w.node.innerHTML).toBe('<pre></pre>');
  287. });
  288. });
  289. it('should sanitize html', async () => {
  290. const model = createModel(
  291. 'text/html',
  292. '<h1>foo <script>window.x=1></scrip></h1>'
  293. );
  294. const f = htmlRendererFactory;
  295. const mimeType = 'text/html';
  296. const w = f.createRenderer({ mimeType, ...defaultOptions });
  297. await w.renderModel(model);
  298. expect(w.node.innerHTML).toBe('<h1>foo </h1>');
  299. });
  300. });
  301. describe('imageRendererFactory', () => {
  302. describe('#mimeTypes', () => {
  303. it('should support multiple mimeTypes', () => {
  304. expect(imageRendererFactory.mimeTypes).toEqual([
  305. 'image/bmp',
  306. 'image/png',
  307. 'image/jpeg',
  308. 'image/gif'
  309. ]);
  310. });
  311. });
  312. describe('#safe', () => {
  313. it('should be safe', () => {
  314. expect(imageRendererFactory.safe).toBe(true);
  315. });
  316. });
  317. describe('#createRenderer()', () => {
  318. it('should create an <img> with the right mimeType', async () => {
  319. let source = 'R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7';
  320. const f = imageRendererFactory;
  321. let mimeType = 'image/png';
  322. let model = createModel(mimeType, source);
  323. let w = f.createRenderer({ mimeType, ...defaultOptions });
  324. await w.renderModel(model);
  325. let el = w.node.firstChild as HTMLImageElement;
  326. expect(el.src).toBe('data:image/png;base64,' + source);
  327. expect(el.localName).toBe('img');
  328. expect(el.innerHTML).toBe('');
  329. source = 'R0lGODlhAQABAIAAAP///wAAACwAAAAAAQABAAACAkQBADs=';
  330. mimeType = 'image/gif';
  331. model = createModel(mimeType, source);
  332. w = f.createRenderer({ mimeType, ...defaultOptions });
  333. await w.renderModel(model);
  334. el = w.node.firstChild as HTMLImageElement;
  335. expect(el.src).toBe('data:image/gif;base64,' + source);
  336. expect(el.localName).toBe('img');
  337. expect(el.innerHTML).toBe('');
  338. });
  339. });
  340. });
  341. });