React = require "react" ReactTestUtils = require('react-addons-test-utils') EventedIFrame = require '../../src/components/evented-iframe' describe 'EventedIFrame', -> describe 'link clicking behavior', -> beforeEach -> @frame = ReactTestUtils.renderIntoDocument( ) @setAttributeSpy = jasmine.createSpy('setAttribute') @preventDefaultSpy = jasmine.createSpy('preventDefault') @openLinkSpy = jasmine.createSpy("openLink") @oldOpenLink = NylasEnv.windowEventHandler.openLink NylasEnv.windowEventHandler.openLink = @openLinkSpy @fakeEvent = (href) => stopPropagation: -> preventDefault: @preventDefaultSpy target: getAttribute: (attr) -> return href setAttribute: @setAttributeSpy afterEach -> NylasEnv.windowEventHandler.openLink = @oldOpenLink it 'works for acceptable link types', -> hrefs = [ "http://nylas.com" "https://www.nylas.com" "mailto:evan@nylas.com" "tel:8585311718" "custom:www.nylas.com" ] for href, i in hrefs @frame._onIFrameClick(@fakeEvent(href)) expect(@setAttributeSpy).not.toHaveBeenCalled() expect(@openLinkSpy).toHaveBeenCalled() target = @openLinkSpy.calls[i].args[0].target targetHref = @openLinkSpy.calls[i].args[0].href expect(target).not.toBeDefined() expect(targetHref).toBe href it 'corrects relative uris', -> hrefs = [ "nylas.com" "www.nylas.com" ] for href, i in hrefs @frame._onIFrameClick(@fakeEvent(href)) expect(@setAttributeSpy).toHaveBeenCalled() modifiedHref = @setAttributeSpy.calls[i].args[1] expect(modifiedHref).toBe "http://#{href}" it 'corrects protocol-relative uris', -> hrefs = [ "//nylas.com" "//www.nylas.com" ] for href, i in hrefs @frame._onIFrameClick(@fakeEvent(href)) expect(@setAttributeSpy).toHaveBeenCalled() modifiedHref = @setAttributeSpy.calls[i].args[1] expect(modifiedHref).toBe "https:#{href}" it 'disallows malicious uris', -> hrefs = [ "file://usr/bin/bad" ] for href in hrefs @frame._onIFrameClick(@fakeEvent(href)) expect(@preventDefaultSpy).toHaveBeenCalled() expect(@openLinkSpy).not.toHaveBeenCalled()