agw/overleaf-cep
1
0
Fork 0
mirror of https://github.com/yu-i-i/overleaf-cep.git synced 2026-05-30 12:24:25 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #3902 from overleaf/sk-ref-providers-hide

Browse Source 
Editor: don't leak encrypted tokens to frontend
GitOrigin-RevId: 245c1e9d479f7eec2979b46a5959bd3eb9f08363
This commit is contained in:
Shane Kilkelly
2021-04-21 09:23:46 +01:00
committed by Copybot
parent 58fbbf6269
commit 07ec567b07
3 changed files with 41 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
services/web/test/unit/src/Project/ProjectControllerTests.js
View File

@@ -896,7 +896,11 @@ describe('ProjectController', function () {
fontSize: 'massive',
theme: 'sexy'
},
email: 'bob@bob.com'
email: 'bob@bob.com',
refProviders: {
mendeley: { encrypted: 'aaaa' },
zotero: { encrypted: 'bbbb' }
}
}
this.ProjectGetter.getProject.callsArgWith(2, null, this.project)
this.UserModel.findById.callsArgWith(2, null, this.user)
@@ -927,6 +931,17 @@ describe('ProjectController', function () {
this.ProjectController.loadEditor(this.req, this.res)
})
it('should sanitize refProviders', function (done) {
this.res.render = (_pageName, opts) => {
expect(opts.user.refProviders).to.deep.equal({
mendeley: true,
zotero: true
})
done()
}
this.ProjectController.loadEditor(this.req, this.res)
})
it('should add on userSettings', function (done) {
this.res.render = (pageName, opts) => {
opts.userSettings.fontSize.should.equal(this.user.ace.fontSize)