115 lines
3.8 KiB
PHP
115 lines
3.8 KiB
PHP
<?php
|
|
|
|
namespace Tests\Unit;
|
|
|
|
use App\Exceptions\InvalidTemplateVariableException;
|
|
use App\Models\Template;
|
|
use App\Services\Email\EmailTemplateRenderer;
|
|
use Tests\TestCase;
|
|
|
|
class EmailTemplateRendererTest extends TestCase
|
|
{
|
|
private function makeTemplate(string $subject, string $message, array $variables): Template
|
|
{
|
|
$template = new Template([
|
|
'scenario' => 'unit_test_scenario',
|
|
'subject' => $subject,
|
|
'message' => $message,
|
|
'metadata' => ['variables' => $variables],
|
|
]);
|
|
|
|
return $template;
|
|
}
|
|
|
|
public function test_it_replaces_known_placeholders_in_subject_and_html(): void
|
|
{
|
|
$template = $this->makeTemplate(
|
|
'Xin chào {{full_name}}',
|
|
'<p>Chào mừng {{full_name}} đến với {{app_name}}</p>',
|
|
[
|
|
['key' => 'full_name', 'label' => 'Họ tên', 'type' => 'string'],
|
|
['key' => 'app_name', 'label' => 'Tên app', 'type' => 'string'],
|
|
],
|
|
);
|
|
|
|
$result = (new EmailTemplateRenderer())->render($template, [
|
|
'full_name' => 'Nguyễn Văn A',
|
|
'app_name' => 'Thế Giới Số',
|
|
]);
|
|
|
|
$this->assertSame('Xin chào Nguyễn Văn A', $result['subject']);
|
|
$this->assertSame('<p>Chào mừng Nguyễn Văn A đến với Thế Giới Số</p>', $result['html']);
|
|
}
|
|
|
|
public function test_it_falls_back_to_example_value_when_data_missing(): void
|
|
{
|
|
$template = $this->makeTemplate(
|
|
'Mã: {{code}}',
|
|
'<p>{{code}}</p>',
|
|
[['key' => 'code', 'label' => 'Mã', 'type' => 'string', 'example' => '000000']],
|
|
);
|
|
|
|
$result = (new EmailTemplateRenderer())->render($template, []);
|
|
|
|
$this->assertSame('Mã: 000000', $result['subject']);
|
|
$this->assertSame('<p>000000</p>', $result['html']);
|
|
}
|
|
|
|
public function test_it_html_escapes_string_type_by_default(): void
|
|
{
|
|
$template = $this->makeTemplate(
|
|
'subj',
|
|
'<p>{{name}}</p>',
|
|
[['key' => 'name', 'label' => 'Tên', 'type' => 'string']],
|
|
);
|
|
|
|
$result = (new EmailTemplateRenderer())->render($template, ['name' => '<script>alert(1)</script>']);
|
|
|
|
$this->assertStringNotContainsString('<script>', $result['html']);
|
|
$this->assertStringContainsString('<script>', $result['html']);
|
|
}
|
|
|
|
public function test_it_rejects_invalid_url_type(): void
|
|
{
|
|
$template = $this->makeTemplate(
|
|
'subj',
|
|
'<a href="{{link}}">go</a>',
|
|
[['key' => 'link', 'label' => 'Link', 'type' => 'url']],
|
|
);
|
|
|
|
$result = (new EmailTemplateRenderer())->render($template, ['link' => 'javascript:alert(1)']);
|
|
|
|
$this->assertStringNotContainsString('javascript:', $result['html']);
|
|
}
|
|
|
|
public function test_it_throws_for_undeclared_variable(): void
|
|
{
|
|
$template = $this->makeTemplate(
|
|
'subj',
|
|
'<p>{{full_name}} {{secret_admin_flag}}</p>',
|
|
[['key' => 'full_name', 'label' => 'Họ tên', 'type' => 'string']],
|
|
);
|
|
|
|
$this->expectException(InvalidTemplateVariableException::class);
|
|
$this->expectExceptionMessage('secret_admin_flag');
|
|
|
|
(new EmailTemplateRenderer())->render($template, ['full_name' => 'A']);
|
|
}
|
|
|
|
public function test_it_never_executes_placeholder_content_as_code(): void
|
|
{
|
|
$template = $this->makeTemplate(
|
|
'subj',
|
|
'<p>{{note}}</p>',
|
|
[['key' => 'note', 'label' => 'Note', 'type' => 'string']],
|
|
);
|
|
|
|
$result = (new EmailTemplateRenderer())->render($template, [
|
|
'note' => '{{ 7*7 }} @php(system("id")) <?php echo 1; ?>',
|
|
]);
|
|
|
|
$this->assertStringNotContainsString('49', $result['html']);
|
|
$this->assertStringContainsString('<?php', $result['html']);
|
|
}
|
|
}
|