feat : update

lib/rich-text.test.ts

@@ -0,0 +1,40 @@
+import { describe, expect, it } from "vitest";
+
+import {
+  normalizeExtraRichText,
+  sanitizeRichTextHtml,
+  sanitizeRichTextUrl,
+} from "@/lib/rich-text";
+
+describe("rich text sanitization", () => {
+  it("keeps supported formatting, colors, and safe links", () => {
+    expect(sanitizeRichTextHtml(
+      '<p><strong>Good</strong> <span style="color: #ff3b30">news</span> <a href="https://example.com" onclick="bad()">link</a></p>',
+    )).toBe(
+      '<p><strong>Good</strong> <span style="color: #FF3B30">news</span> <a href="https://example.com" target="_blank" rel="noopener noreferrer">link</a></p>',
+    );
+  });
+
+  it("removes executable markup, unsafe links, and unsupported styles", () => {
+    expect(sanitizeRichTextHtml(
+      '<script>alert(1)</script><p onclick="bad()">Safe <span style="background:red;color:red">text</span><a href="javascript:bad()">link</a></p>',
+    )).toBe("<p>Safe <span>text</span><a>link</a></p>");
+    expect(sanitizeRichTextUrl("data:text/html,bad")).toBe("");
+  });
+});
+
+describe("legacy Extra rich text conversion", () => {
+  it("escapes plain text, preserves newlines, and converts phrase colors", () => {
+    expect(normalizeExtraRichText("<unsafe>\nMASSIVE damage", [
+      { text: "MASSIVE", color: "#ff0000" },
+    ])).toBe(
+      '<p>&lt;unsafe&gt;<br><span style="color: #FF0000">MASSIVE</span> damage</p>',
+    );
+  });
+
+  it("leaves sanitized rich text in rich-text form", () => {
+    expect(normalizeExtraRichText('<p><em>Ready</em></p>', [
+      { text: "Ready", color: "#ff0000" },
+    ])).toBe("<p><em>Ready</em></p>");
+  });
+});