[catagits/Catalyst-Action-REST.git] / t / yaml-html.t

use strict;
use warnings;
use Test::More;
use Test::Requires qw(YAML::Syck);
use YAML::Syck;
use FindBin;

use lib ( "$FindBin::Bin/lib", "$FindBin::Bin/../lib" );
use Test::Rest;

BEGIN {
    use_ok 'Catalyst::Test', 'Test::Serialize';
}

my $has_serializer = eval "require YAML::Syck";
SKIP: {
    skip "YAML::Syck not available", 3, unless $has_serializer;

    my $t = Test::Rest->new( 'content_type' => 'text/html' );

    my $monkey_template =
"<html><title>Test::Serialize</title><body><pre>--- \nmonkey: likes chicken!\n</pre></body></html>";
    my $mres = request( $t->get( url => '/monkey_get' ) );
    ok( $mres->is_success, 'GET the monkey succeeded' );
    is( $mres->content, $monkey_template, "GET returned the right data" );

    my $post_data = { 'sushi' => 'is good for monkey', };
    my $mres_post =
      request( $t->post( url => '/monkey_put', data => Dump($post_data) ) );
    ok( $mres_post->is_error, "POST to the monkey failed; no deserializer." );

    # xss test - RT 63537
    my $xss_template =
"<html><title>Test::Serialize</title><body><pre>--- \nmonkey: likes chicken &gt; sushi!\n</pre></body></html>";
    my $xres = request( $t->get( url => '/xss_get' ) );
    ok( $xres->is_success, 'GET the xss succeeded' );
    is( $xres->content, $xss_template, "GET returned the right data" );


}
1;

done_testing;
Commit	Line	Data
e601adda	1	use strict;
e601adda	2	use warnings;
10018fb4	3	use Test::More;
801ec379	4	use Test::Requires qw(YAML::Syck);
e601adda	5	use YAML::Syck;
e601adda	6	use FindBin;
e601adda	7
	8	use lib ( "$FindBin::Bin/lib", "$FindBin::Bin/../lib" );
	9	use Test::Rest;
	10
	11	BEGIN {
	12	use_ok 'Catalyst::Test', 'Test::Serialize';
	13	}
	14
	15	my $has_serializer = eval "require YAML::Syck";
	16	SKIP: {
	17	skip "YAML::Syck not available", 3, unless $has_serializer;
	18
	19	my $t = Test::Rest->new( 'content_type' => 'text/html' );
	20
	21	my $monkey_template =
	22	"<html><title>Test::Serialize</title><body><pre>--- \nmonkey: likes chicken!\n</pre></body></html>";
	23	my $mres = request( $t->get( url => '/monkey_get' ) );
	24	ok( $mres->is_success, 'GET the monkey succeeded' );
	25	is( $mres->content, $monkey_template, "GET returned the right data" );
	26
	27	my $post_data = { 'sushi' => 'is good for monkey', };
	28	my $mres_post =
	29	request( $t->post( url => '/monkey_put', data => Dump($post_data) ) );
	30	ok( $mres_post->is_error, "POST to the monkey failed; no deserializer." );
	31
8aa1a2ee	32	# xss test - RT 63537
	33	my $xss_template =
	34	"<html><title>Test::Serialize</title><body><pre>--- \nmonkey: likes chicken > sushi!\n</pre></body></html>";
	35	my $xres = request( $t->get( url => '/xss_get' ) );
	36	ok( $xres->is_success, 'GET the xss succeeded' );
	37	is( $xres->content, $xss_template, "GET returned the right data" );
	38
	39
e601adda	40	}
e601adda	41	1;
10018fb4	42
10018fb4	43	done_testing;