openAgent

1import { describe, expect, test } from "bun:test"
2import { OauthCallbackPage } from "../src/oauth/page"
3 
4describe("OauthCallbackPage", () => {
5  test("escapes bootstrap options embedded in the inline script", () => {
6    const html = OauthCallbackPage.bootstrap({
7      provider: `xAI</script><script>alert("provider")</script>`,
8      tokenPath: `/token</script><script>alert("path")</script>`,
9    })
10 
11    expect(html.match(/<\/script>/g)).toHaveLength(1)
12    expect(html).toContain(`xAI\\u003c/script>\\u003cscript>alert(\\\"provider\\\")\\u003c/script>`)
13    expect(html).toContain(`/token\\u003c/script>\\u003cscript>alert(\\\"path\\\")\\u003c/script>`)
14  })
15})
16