kate522
44e165d34e
Unify comment image upload settings, REST permissions, preview, progress, and response handling while removing obsolete compatibility paths.
81 lines
3.7 KiB
JavaScript
81 lines
3.7 KiB
JavaScript
'use strict';
|
|
|
|
const assert = require('node:assert/strict');
|
|
const fs = require('node:fs');
|
|
const path = require('node:path');
|
|
const test = require('node:test');
|
|
|
|
const root = path.resolve(__dirname, '..', '..');
|
|
const read = (file) => fs.readFileSync(path.join(root, file), 'utf8');
|
|
|
|
const formParts = read('inc/helpers/comments/form-parts.php');
|
|
const tools = read('assets/js/comment-tools.js');
|
|
const controller = read('src/Admin/UserController.php');
|
|
const display = read('src/Settings/PostDisplay.php');
|
|
const phpSchema = read('src/Admin/Schema/SchemaPostList.php');
|
|
const adminSchema = read('assets/admin/src/schema/sections/post-list/comment.js');
|
|
const runtime = read('src/Core/ScriptsPart1c.php');
|
|
const commentsCss = read('assets/css/build/comments.css');
|
|
const runtimeBundle = read('assets/js/runtime/main.min.js');
|
|
|
|
test('comment image settings use one two-switch contract', () => {
|
|
for (const source of [phpSchema, adminSchema]) {
|
|
assert.match(source, /comment_img/);
|
|
assert.match(source, /comment_upload_img/);
|
|
}
|
|
assert.match(display, /!empty\(\$settings\['comment_upload_img'\]\)/);
|
|
assert.match(display, /is_user_logged_in\(\)/);
|
|
assert.match(display, /aksrt_user_can\('upload_comment_image'/);
|
|
assert.doesNotMatch(runtime, /commentUploadEnabled/);
|
|
assert.doesNotMatch(runtime, /'comment_upload_img'\s*=>/);
|
|
});
|
|
|
|
test('comment image form matches the single-file reference interaction', () => {
|
|
assert.match(formParts, /comment-image-tabs/);
|
|
assert.match(formParts, /input-image-upload-tab/);
|
|
assert.match(formParts, /input-image-address-tab/);
|
|
assert.match(formParts, /class="form-upload comment-image-upload"/);
|
|
assert.match(formParts, /class="preview text-center mb6"/);
|
|
assert.match(formParts, /class="hide comment-image-file"/);
|
|
assert.match(formParts, /accept="image\/gif,image\/jpeg,image\/jpg,image\/png"/);
|
|
assert.match(formParts, /name="image"/);
|
|
assert.match(formParts, /data-comment-upload-submit/);
|
|
assert.equal((formParts.match(/name="image"/g) || []).length, 1);
|
|
});
|
|
|
|
test('comment uploader validates, previews, tracks progress, and inserts only a valid URL', () => {
|
|
assert.match(tools, /FileReader/);
|
|
assert.match(tools, /commentUploadMaxSize/);
|
|
assert.match(tools, /validateImage/);
|
|
assert.match(tools, /XMLHttpRequest/);
|
|
assert.match(tools, /xhr\.upload\.onprogress/);
|
|
assert.match(tools, /formData\.append\('image'/);
|
|
assert.match(tools, /response\.success === true/);
|
|
assert.match(tools, /response\.data\.url/);
|
|
assert.match(tools, /'\[img=' \+ url \+ '\]\\n'/);
|
|
assert.doesNotMatch(tools, /formData\.append\(['"]file['"]/);
|
|
assert.doesNotMatch(tools, /source_url/);
|
|
assert.doesNotMatch(tools, /attachment_id/);
|
|
assert.doesNotMatch(tools, /input-image-upload(?!-tab)/);
|
|
});
|
|
|
|
test('comment upload REST endpoint has explicit nonce, switch, capability, and image-only guards', () => {
|
|
assert.match(controller, /check_comment_image_upload_permission/);
|
|
assert.match(controller, /wp_verify_nonce\(\$nonce, 'wp_rest'\)/);
|
|
assert.match(controller, /\$settings\['comment_img'\]/);
|
|
assert.match(controller, /\$settings\['comment_upload_img'\]/);
|
|
assert.match(controller, /aksrt_user_can\('upload_comment_image'/);
|
|
assert.match(controller, /empty\(\$_FILES\['image'\]\)/);
|
|
assert.match(controller, /\$file_key = 'image'/);
|
|
assert.match(controller, /wp_delete_attachment\(\(int\) \$attachment_id, true\)/);
|
|
assert.match(controller, /'url' => \$url/);
|
|
assert.doesNotMatch(controller, /\$_FILES\['file'\]/);
|
|
assert.doesNotMatch(controller, /'attachment_id'\s*=>/);
|
|
});
|
|
|
|
test('built comment assets carry the upload contract and no removed submit handler', () => {
|
|
assert.match(commentsCss, /comment-image-upload/);
|
|
assert.match(commentsCss, /progress-bar/);
|
|
assert.doesNotMatch(runtimeBundle, /handleResponse/);
|
|
});
|