breadcrumb-the-shire/modules/security/tests/Module/Security/Service/SecurityMarkdownGatewayTest.php

<?php

namespace MintyPHP\Tests\Module\Security\Service;

use MintyPHP\Module\Security\Service\SecurityMarkdownGateway;
use PHPUnit\Framework\TestCase;

class SecurityMarkdownGatewayTest extends TestCase
{
    public function testRendersBasicMarkdownToHtml(): void
    {
        $html = (new SecurityMarkdownGateway())->toHtml("**bold** text\n\n- one\n- two");

        $this->assertStringContainsString('<strong>bold</strong>', $html);
        $this->assertStringContainsString('<li>one</li>', $html);
        $this->assertStringContainsString('<li>two</li>', $html);
    }

    public function testEscapesRawHtmlSoItCannotInjectMarkup(): void
    {
        $html = (new SecurityMarkdownGateway())->toHtml('<script>alert(1)</script>');

        $this->assertStringNotContainsString('<script>', $html);
        $this->assertStringContainsString('&lt;script&gt;', $html);
    }

    public function testEmptyOrWhitespaceInputReturnsEmptyString(): void
    {
        $gateway = new SecurityMarkdownGateway();

        $this->assertSame('', $gateway->toHtml(''));
        $this->assertSame('', $gateway->toHtml("   \n  "));
    }
}