ad8b09700b
Release v0.19.0. See the `## [0.19.0] — 2026-09-29` section of [CHANGELOG.md](https://github.com/ralksta/immich-folio/blob/dev/CHANGELOG.md) for the full list. Highlights: client proofing links (#683), custom content pages (#738), asset picker search (#740), concurrent-edit detection (#742), env-locked settings (#739), an accessibility baseline (#741), three security fixes with advisories (#737, #755, #759), and a pre-release quality pass (#780–#797). --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: ralksta <ralksta@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Claude Opus 5 <noreply@anthropic.com> Co-authored-by: Ralf <rohlenbo79@gmail.com> Co-authored-by: Paul Thies <110185070+ImScheinox@users.noreply.github.com> Co-authored-by: lancetm714 <108419425+lancetm714@users.noreply.github.com> Co-authored-by: Lance Martin <lancetaylor95@gmail.com>
25 lines
1.1 KiB
TypeScript
25 lines
1.1 KiB
TypeScript
import { readFileSync } from 'fs';
|
|
import path from 'path';
|
|
import { describe, expect, it } from 'vitest';
|
|
|
|
// `?page=<slug>` in /admin/pages selects a page, and the page panel turns the
|
|
// slug into its "open live page" link. A slug such as `/evil.example` would
|
|
// make that link `//evil.example`, which leaves the site. Both ends guard it.
|
|
const read = (file: string) => readFileSync(path.join(process.cwd(), file), 'utf8');
|
|
|
|
describe('page link from ?page=', () => {
|
|
it('only selects a page for a valid slug', () => {
|
|
const src = read('app/admin/components/PageBuilder.tsx');
|
|
const fn = src.slice(src.indexOf('function openPageFromLink'));
|
|
const body = fn.slice(0, fn.indexOf('\n }\n'));
|
|
expect(body).toMatch(/if \(!isValidSlug\(slug\)\) return;/);
|
|
expect(body.indexOf('isValidSlug(slug)')).toBeLessThan(body.indexOf('setSelectedPage(slug)'));
|
|
});
|
|
|
|
it('encodes the slug in the live-page link', () => {
|
|
const src = read('app/admin/components/page-builder/PagePanel.tsx');
|
|
expect(src).toContain('href={`/${encodeURIComponent(slug)}`}');
|
|
expect(src).not.toContain('href={`/${slug}`}');
|
|
});
|
|
});
|