814c234443
* Sanitize sql LIKE terms on search endpoints * Add search term sanitization in additional places
61 строка
1.5 KiB
Go
61 строка
1.5 KiB
Go
package sqlstore
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
func TestMapStringsToQueryParams(t *testing.T) {
|
|
t.Run("one item", func(t *testing.T) {
|
|
input := []string{"apple"}
|
|
|
|
keys, params := MapStringsToQueryParams(input, "Fruit")
|
|
|
|
if len(params) != 1 || params["Fruit0"] != "apple" {
|
|
t.Fatal("returned incorrect params", params)
|
|
} else if keys != "(:Fruit0)" {
|
|
t.Fatal("returned incorrect query", keys)
|
|
}
|
|
})
|
|
|
|
t.Run("multiple items", func(t *testing.T) {
|
|
input := []string{"carrot", "tomato", "potato"}
|
|
|
|
keys, params := MapStringsToQueryParams(input, "Vegetable")
|
|
|
|
if len(params) != 3 || params["Vegetable0"] != "carrot" ||
|
|
params["Vegetable1"] != "tomato" || params["Vegetable2"] != "potato" {
|
|
t.Fatal("returned incorrect params", params)
|
|
} else if keys != "(:Vegetable0,:Vegetable1,:Vegetable2)" {
|
|
t.Fatal("returned incorrect query", keys)
|
|
}
|
|
})
|
|
}
|
|
|
|
func TestSanitizeSearchTerm(t *testing.T) {
|
|
term := "test"
|
|
result := sanitizeSearchTerm(term, "\\")
|
|
require.Equal(t, result, term)
|
|
|
|
term = "%%%"
|
|
expected := "\\%\\%\\%"
|
|
result = sanitizeSearchTerm(term, "\\")
|
|
require.Equal(t, result, expected)
|
|
|
|
term = "%\\%\\%"
|
|
expected = "\\%\\%\\%"
|
|
result = sanitizeSearchTerm(term, "\\")
|
|
require.Equal(t, result, expected)
|
|
|
|
term = "%_test_%"
|
|
expected = "\\%\\_test\\_\\%"
|
|
result = sanitizeSearchTerm(term, "\\")
|
|
require.Equal(t, result, expected)
|
|
|
|
term = "**test_%"
|
|
expected = "test*_*%"
|
|
result = sanitizeSearchTerm(term, "*")
|
|
require.Equal(t, result, expected)
|
|
}
|