package render

import ( "strings" "testing" )

func TestMermaidBlockRendersAsDiagram(t *testing.T) { src := "# Title\n\nmermaid\ngraph TD\n A-->B\n\n\ngo\nfmt.Println(\"hi\")\n\n" out, err := New().ToHTML([]byte(src)) if err != nil { t.Fatal(err) } html := string(out)

// The mermaid block becomes a <pre class="mermaid"> carrying the source.
if !strings.Contains(html, `<pre class="mermaid">`) {
	t.Fatalf("no mermaid container in output:\n%s", html)
}
if !strings.Contains(html, "graph TD") || !strings.Contains(html, "A--&gt;B") {
	t.Fatalf("mermaid source missing/not escaped:\n%s", html)
}
// The mermaid source must NOT have been syntax-highlighted (no chroma spans
// wrapping it).
if strings.Contains(html, `class="mermaid"`) && strings.Contains(html, "graph TD</span>") {
	t.Fatalf("mermaid block was highlighted:\n%s", html)
}
// A normal code block is still highlighted (chroma emits classed markup).
if !strings.Contains(html, "chroma") {
	t.Errorf("expected the go code block to be highlighted:\n%s", html)
}

}

func TestMermaidEscapesHTML(t *testing.T) { // A diagram label containing markup must be escaped, never emitted raw. src := "mermaid\ngraph TD\n A[\"<img src=x onerror=alert(1)>\"]\n\n" out, err := New().ToHTML([]byte(src)) if err != nil { t.Fatal(err) } html := string(out) if strings.Contains(html, "<img src=x") { t.Fatalf("raw HTML leaked from mermaid source:\n%s", html) } if !strings.Contains(html, "<img") { t.Fatalf("expected escaped markup:\n%s", html) } }