zammad/spec/models/concerns/has_image_sanitized_note_examples.rb

# Copyright (C) 2012-2024 Zammad Foundation, https://zammad-foundation.org/

RSpec.shared_examples 'HasImageSanitizedNote' do |model_factory:|
  describe 'Image prevention' do
    context 'with inline image' do
      subject { create(model_factory, note: 'test 123 <img src="asd.jpg"><img src="data:image/jpeg;base64,/9j/4AAQ..."><b>some text</b>') }

      before do
        # XSS processing may run into a timeout on slow CI systems, so turn the timeout off for the test.
        stub_const("#{HtmlSanitizer}::PROCESSING_TIMEOUT", nil)
      end

      it 'strips out <img> tags' do
        expect(subject.note).to eq('test 123 <b>some text</b>')
      end
    end
  end
end