215 lines
8.6 KiB
JavaScript
215 lines
8.6 KiB
JavaScript
const assert = require('node:assert/strict');
|
|
const fs = require('node:fs');
|
|
const path = require('node:path');
|
|
const test = require('node:test');
|
|
|
|
const MemoPages = require('../public/js/memo-pages.js');
|
|
|
|
test('备忘录页只从 URL 读取安全的真实家谱和备忘录编号', () => {
|
|
assert.equal(
|
|
MemoPages.getCurrentGenealogyId('?genealogyId=2060000000000000001&memoId=2060000000000000002'),
|
|
'2060000000000000001'
|
|
);
|
|
assert.equal(
|
|
MemoPages.getCurrentMemoId('?genealogyId=2060000000000000001&memoId=2060000000000000002'),
|
|
'2060000000000000002'
|
|
);
|
|
assert.equal(MemoPages.getCurrentGenealogyId(''), '');
|
|
assert.equal(MemoPages.getCurrentMemoId('?memoId=unsafe'), '');
|
|
});
|
|
|
|
test('备忘录写入只构造 YAML MemoBody 并转换后端时间格式', () => {
|
|
assert.deepEqual(MemoPages.buildMemoBody({
|
|
memoTitle: ' 祭祖提醒 ',
|
|
memoContent: ' 准备供品 ',
|
|
remindTime: '2026-07-24T09:30',
|
|
completed: '1',
|
|
mediaOssIds: '2060000000000000003,2060000000000000004',
|
|
sortOrder: '3',
|
|
status: '0',
|
|
memoId: 'should-not-send',
|
|
appUserId: 'should-not-send'
|
|
}), {
|
|
memoTitle: '祭祖提醒',
|
|
memoContent: '准备供品',
|
|
remindTime: '2026-07-24 09:30:00',
|
|
completed: '1',
|
|
mediaOssIds: '2060000000000000003,2060000000000000004',
|
|
sortOrder: 3,
|
|
status: '0'
|
|
});
|
|
});
|
|
|
|
test('备忘录校验标题、时间、完成状态、附件、排序和可重读状态', () => {
|
|
assert.equal(MemoPages.validateMemoBody({ memoTitle: '' }), '请填写备忘录标题');
|
|
assert.equal(
|
|
MemoPages.validateMemoBody({ memoTitle: '提醒', remindTime: '2026-07-24T09:30:00+08:00' }),
|
|
'提醒时间格式无效'
|
|
);
|
|
assert.equal(
|
|
MemoPages.validateMemoBody({ memoTitle: '提醒', remindTime: '2026-02-30 09:30:00' }),
|
|
'提醒时间格式无效'
|
|
);
|
|
assert.equal(
|
|
MemoPages.validateMemoBody({ memoTitle: '提醒', completed: '2' }),
|
|
'完成状态只能是未完成或已完成'
|
|
);
|
|
assert.equal(
|
|
MemoPages.validateMemoBody({ memoTitle: '提醒', mediaOssIds: '101, 102' }),
|
|
'附件上传结果无效'
|
|
);
|
|
assert.equal(
|
|
MemoPages.validateMemoBody(MemoPages.buildMemoBody({ memoTitle: '提醒', sortOrder: '1.5' })),
|
|
'排序值必须是安全整数'
|
|
);
|
|
assert.equal(
|
|
MemoPages.validateMemoBody({ memoTitle: '提醒', status: '1' }),
|
|
'当前 PC 无法重新读取停用备忘录，暂不开放停用'
|
|
);
|
|
assert.equal(MemoPages.validateMemoBody({ memoTitle: '提醒', completed: '0', status: '0' }), '');
|
|
assert.equal(MemoPages.validateMemoBody({ memoTitle: '提醒', completed: '1', status: '0' }), '');
|
|
});
|
|
|
|
test('备忘录响应使用 PC MemoVo 并拒绝不安全的数字长整型', () => {
|
|
assert.deepEqual(MemoPages.normalizeMemo({
|
|
memoId: '2060000000000000001',
|
|
genealogyId: '2060000000000000002',
|
|
genealogyNo: 'G20260729001',
|
|
genealogyName: '叶氏家谱',
|
|
surname: '叶',
|
|
appUserId: '2060000000000000003',
|
|
appUserNickName: '叶子',
|
|
appUserPhone: '19100000000',
|
|
memoTitle: '祭祖提醒',
|
|
memoContent: '准备供品',
|
|
remindTime: '2026-07-24 09:30:00',
|
|
completed: '1',
|
|
mediaOssIds: '2060000000000000004',
|
|
sortOrder: 1,
|
|
status: '0',
|
|
remark: '年度事项'
|
|
}), {
|
|
memoId: '2060000000000000001',
|
|
genealogyId: '2060000000000000002',
|
|
genealogyNo: 'G20260729001',
|
|
genealogyName: '叶氏家谱',
|
|
surname: '叶',
|
|
appUserId: '2060000000000000003',
|
|
appUserNickName: '叶子',
|
|
appUserPhone: '19100000000',
|
|
memoTitle: '祭祖提醒',
|
|
memoContent: '准备供品',
|
|
remindTime: '2026-07-24 09:30:00',
|
|
completed: '1',
|
|
mediaOssIds: '2060000000000000004',
|
|
sortOrder: 1,
|
|
status: '0',
|
|
remark: '年度事项'
|
|
});
|
|
assert.equal(MemoPages.normalizeMemo({
|
|
memoId: Number('2060000000000000001'),
|
|
genealogyId: '2',
|
|
memoTitle: '提醒',
|
|
completed: '0',
|
|
status: '0'
|
|
}), null);
|
|
});
|
|
|
|
test('备忘录渲染业务字段但不暴露手机号、OSS ID 或未转义内容', () => {
|
|
const memo = MemoPages.normalizeMemo({
|
|
memoId: '1',
|
|
genealogyId: '2',
|
|
appUserId: '3',
|
|
appUserNickName: '叶子',
|
|
appUserPhone: '19100000000',
|
|
memoTitle: '<script>alert(1)</script>',
|
|
memoContent: '<img src=x onerror=alert(1)>准备供品',
|
|
remindTime: '2026-07-24 09:30:00',
|
|
completed: '1',
|
|
mediaOssIds: '4,5',
|
|
sortOrder: 1,
|
|
status: '0',
|
|
remark: '年度事项'
|
|
});
|
|
const html = MemoPages.renderMemoDetail(memo);
|
|
|
|
assert.doesNotMatch(html, /<script>|<img/);
|
|
assert.match(html, /准备供品/);
|
|
assert.match(html, /已完成/);
|
|
assert.match(html, /2 个附件/);
|
|
assert.doesNotMatch(html, /19100000000|>4<|>5</);
|
|
});
|
|
|
|
test('备忘录写后重读必须返回同一条稳定记录', () => {
|
|
const detail = {
|
|
memoId: '2060000000000000001',
|
|
genealogyId: '2060000000000000002',
|
|
memoTitle: '祭祖提醒',
|
|
completed: '0',
|
|
status: '0'
|
|
};
|
|
|
|
assert.equal(MemoPages.matchesSavedMemo(detail, '2060000000000000001'), true);
|
|
assert.equal(MemoPages.matchesSavedMemo(detail, '2060000000000000009'), false);
|
|
assert.equal(MemoPages.matchesSavedMemo({}, '2060000000000000001'), false);
|
|
});
|
|
|
|
test('备忘录编辑器拒绝不可重读的停用记录', () => {
|
|
assert.equal(MemoPages.isEditableMemo({ status: '0' }), true);
|
|
assert.equal(MemoPages.isEditableMemo({ status: '1' }), false);
|
|
assert.equal(MemoPages.isEditableMemo(null), false);
|
|
});
|
|
|
|
test('备忘录列表和编辑页按家谱能力开放 PC CRUD，且不允许手填 OSS ID 或业务状态', () => {
|
|
const root = path.join(__dirname, '..');
|
|
const listPage = fs.readFileSync(path.join(root, 'profile-memo.html'), 'utf8');
|
|
const editPage = fs.readFileSync(path.join(root, 'profile-memo-edit.html'), 'utf8');
|
|
const styles = fs.readFileSync(path.join(root, 'public', 'css', 'profile-module.css'), 'utf8');
|
|
|
|
assert.match(listPage, /data-memo-list/);
|
|
assert.match(listPage, /data-memo-detail/);
|
|
assert.match(listPage, /data-memo-create-link hidden/);
|
|
assert.doesNotMatch(listPage, /原始 JSON|不开放编辑和删除/);
|
|
assert.match(editPage, /name="remindTime" type="datetime-local"/);
|
|
assert.match(editPage, /data-memo-form[^>]*novalidate/);
|
|
assert.match(editPage, /for="memoTitle">备忘标题<span class="field-required"/);
|
|
assert.match(editPage, /name="completed"/);
|
|
assert.match(editPage, /value="0"/);
|
|
assert.match(editPage, /value="1"/);
|
|
assert.match(editPage, /name="status" type="hidden" value="0"/);
|
|
assert.match(editPage, /name="mediaOssIds" type="hidden"/);
|
|
assert.match(editPage, /data-memo-clear-media/);
|
|
assert.match(editPage, /data-memo-form-status role="status" aria-live="polite"/);
|
|
assert.match(editPage, /data-memo-editor-placeholder>[\s\S]*api-state--loading" role="status" aria-live="polite" aria-busy="true"/);
|
|
assert.doesNotMatch(editPage, /name="(?:mediaOssIds|status)"[^>]*type="text"/);
|
|
assert.match(editPage, /public\/js\/md5\.js/);
|
|
assert.match(editPage, /public\/js\/upload-pages\.js/);
|
|
assert.match(editPage, /public\/js\/memo-pages\.js/);
|
|
assert.match(styles, /\[data-memo-editor\]\[hidden\][^{]*\{[^}]*display:\s*none\s*!important/s);
|
|
});
|
|
|
|
test('备忘录只向内容维护者或管理员开放写操作', () => {
|
|
const root = path.join(__dirname, '..');
|
|
const script = fs.readFileSync(path.join(root, 'public', 'js', 'memo-pages.js'), 'utf8');
|
|
|
|
assert.equal(MemoPages.canEditRecords({ canEditContent: true }), true);
|
|
assert.equal(MemoPages.canEditRecords({ canManage: true }), true);
|
|
assert.equal(MemoPages.canEditRecords({ canEditContent: false, canManage: false }), false);
|
|
assert.match(script, /await loadCapability\(api, genealogyId\);/);
|
|
assert.match(script, /if \(writePending \|\| !canEditContent \|\| !genealogyId/);
|
|
assert.match(script, /if \(canEditContent\) \{[\s\S]*data-memo-delete-id/);
|
|
});
|
|
|
|
test('备忘录使用统一的加载、空数据、失败和无权限状态，以及提交中的按钮反馈', () => {
|
|
const root = path.join(__dirname, '..');
|
|
const script = fs.readFileSync(path.join(root, 'public', 'js', 'memo-pages.js'), 'utf8');
|
|
|
|
assert.match(script, /function getApiStateType\(error\)[\s\S]*isForbidden\(error\) \? 'forbidden' : 'error'/);
|
|
assert.match(script, /setState\(query\('\[data-memo-list\]'\), 'loading', '正在加载备忘录…'\)/);
|
|
assert.match(script, /setState\(query\('\[data-memo-detail\]'\), 'loading', '正在加载备忘录详情…'\)/);
|
|
assert.match(script, /setFormStatus\('正在读取家谱权限…', 'loading'\)/);
|
|
assert.match(script, /setFormStatus\(validation, 'error'\)/);
|
|
assert.match(script, /setWritePending\(true, '正在保存…'\)/);
|
|
assert.match(script, /setFormStatus\('正在保存备忘录…', 'loading'\)/);
|
|
});
|