diff options
author | Bartłomiej Maryńczak <marynczak.bartlomiej@gmail.com> | 2024-12-06 21:43:41 +0100 |
---|---|---|
committer | GitHub <noreply@github.com> | 2024-12-06 12:43:41 -0800 |
commit | 517ecb85f58ed6ac8b4d5443931612e75e7c7dc2 (patch) | |
tree | c98da87e669d073773762574d504ffb621fe20fa /test/functional/lua/json_spec.lua | |
parent | fac96b72a59e15d483e03bdc43b9ba08ce6c828e (diff) | |
download | rneovim-517ecb85f58ed6ac8b4d5443931612e75e7c7dc2.tar.gz rneovim-517ecb85f58ed6ac8b4d5443931612e75e7c7dc2.tar.bz2 rneovim-517ecb85f58ed6ac8b4d5443931612e75e7c7dc2.zip |
feat(stdlib): vim.json.encode(...,{escape_slash:boolean}) #30561
Problem:
vim.json.encode escapes every slash in string values (for example in
file paths), and is not optional. Use-case is for preventing HTML
injections (eg. injecting `</script>` closing tag); in the context of
Nvim this is rarely useful.
Solution:
- Add a `escape_slash` flag to `vim.json.encode`.
- Defaults to `false`. (This is a "breaking" change, but more like
a bug fix.)
Diffstat (limited to 'test/functional/lua/json_spec.lua')
-rw-r--r-- | test/functional/lua/json_spec.lua | 39 |
1 files changed, 39 insertions, 0 deletions
diff --git a/test/functional/lua/json_spec.lua b/test/functional/lua/json_spec.lua index a6e814d739..8df42fcaa1 100644 --- a/test/functional/lua/json_spec.lua +++ b/test/functional/lua/json_spec.lua @@ -152,6 +152,45 @@ describe('vim.json.encode()', function() clear() end) + it('dumps strings with & without escaped slash', function() + -- With slash + eq('"Test\\/"', exec_lua([[return vim.json.encode('Test/', { escape_slash = true })]])) + eq( + 'Test/', + exec_lua([[return vim.json.decode(vim.json.encode('Test/', { escape_slash = true }))]]) + ) + + -- Without slash + eq('"Test/"', exec_lua([[return vim.json.encode('Test/')]])) + eq('"Test/"', exec_lua([[return vim.json.encode('Test/', {})]])) + eq('"Test/"', exec_lua([[return vim.json.encode('Test/', { _invalid = true })]])) + eq('"Test/"', exec_lua([[return vim.json.encode('Test/', { escape_slash = false })]])) + eq( + '"Test/"', + exec_lua([[return vim.json.encode('Test/', { _invalid = true, escape_slash = false })]]) + ) + eq( + 'Test/', + exec_lua([[return vim.json.decode(vim.json.encode('Test/', { escape_slash = false }))]]) + ) + + -- Checks for for global side-effects + eq( + '"Test/"', + exec_lua([[ + vim.json.encode('Test/', { escape_slash = true }) + return vim.json.encode('Test/') + ]]) + ) + eq( + '"Test\\/"', + exec_lua([[ + vim.json.encode('Test/', { escape_slash = false }) + return vim.json.encode('Test/', { escape_slash = true }) + ]]) + ) + end) + it('dumps strings', function() eq('"Test"', exec_lua([[return vim.json.encode('Test')]])) eq('""', exec_lua([[return vim.json.encode('')]])) |