mirror of
https://github.com/Hopiu/angular.js.git
synced 2026-03-20 00:10:26 +00:00
cd139f5767
")]}\',\n" is a commonly used security prefix added to json http responses iat google and elsewhere in order to prevent certain cross-site attacks $xhr service now autodetects the prefix and strips it before deserializing the json. the implementation should be more flexible to allow for wider range of prefixes, but we need this one right now and can address other usecases later.
86 lines
2.2 KiB
JavaScript
86 lines
2.2 KiB
JavaScript
describe('$xhr', function() {
|
|
var scope, $browser, $browserXhr, $log, $xhr, log;
|
|
|
|
beforeEach(function(){
|
|
scope = angular.scope({}, angular.service, { '$log': $log = {} });
|
|
$browser = scope.$service('$browser');
|
|
$browserXhr = $browser.xhr;
|
|
$xhr = scope.$service('$xhr');
|
|
log = '';
|
|
});
|
|
|
|
|
|
afterEach(function(){
|
|
dealoc(scope);
|
|
});
|
|
|
|
|
|
function callback(code, response) {
|
|
expect(code).toEqual(200);
|
|
log = log + toJson(response) + ';';
|
|
}
|
|
|
|
|
|
it('should forward the request to $browser and decode JSON', function(){
|
|
$browserXhr.expectGET('/reqGET').respond('first');
|
|
$browserXhr.expectGET('/reqGETjson').respond('["second"]');
|
|
$browserXhr.expectPOST('/reqPOST', {post:'data'}).respond('third');
|
|
|
|
$xhr('GET', '/reqGET', null, callback);
|
|
$xhr('GET', '/reqGETjson', null, callback);
|
|
$xhr('POST', '/reqPOST', {post:'data'}, callback);
|
|
|
|
$browserXhr.flush();
|
|
|
|
expect(log).toEqual('"third";["second"];"first";');
|
|
});
|
|
|
|
|
|
it('should handle exceptions in callback', function(){
|
|
$log.error = jasmine.createSpy('$log.error');
|
|
$browserXhr.expectGET('/reqGET').respond('first');
|
|
$xhr('GET', '/reqGET', null, function(){ throw "MyException"; });
|
|
$browserXhr.flush();
|
|
|
|
expect($log.error).wasCalledWith("MyException");
|
|
});
|
|
|
|
|
|
it('should automatically deserialize json objects', function() {
|
|
var response;
|
|
|
|
$browserXhr.expectGET('/foo').respond('{"foo":"bar","baz":23}');
|
|
$xhr('GET', '/foo', function(code, resp) {
|
|
response = resp;
|
|
});
|
|
$browserXhr.flush();
|
|
|
|
expect(response).toEqual({foo:'bar', baz:23});
|
|
});
|
|
|
|
|
|
it('should automatically deserialize json arrays', function() {
|
|
var response;
|
|
|
|
$browserXhr.expectGET('/foo').respond('[1, "abc", {"foo":"bar"}]');
|
|
$xhr('GET', '/foo', function(code, resp) {
|
|
response = resp;
|
|
});
|
|
$browserXhr.flush();
|
|
|
|
expect(response).toEqual([1, 'abc', {foo:'bar'}]);
|
|
});
|
|
|
|
|
|
it('should automatically deserialize json with security prefix', function() {
|
|
var response;
|
|
|
|
$browserXhr.expectGET('/foo').respond(')]}\',\n[1, "abc", {"foo":"bar"}]');
|
|
$xhr('GET', '/foo', function(code, resp) {
|
|
response = resp;
|
|
});
|
|
$browserXhr.flush();
|
|
|
|
expect(response).toEqual([1, 'abc', {foo:'bar'}]);
|
|
});
|
|
});
|