smartbotic/tests/nodes/form-render-escaping.json

{
  "name": "verify-form-render-escaping",
  "nodes": [
    {"id": "n1", "name": "Form", "type": "form-trigger", "position": {"x": 0, "y": 0},
     "config": {"title": "<script>alert(1)</script>",
                "description": "a \"quoted\" & <b>bold</b> description",
                "path": "/x\"><script>x4</script>",
                "fields": [
                  {"name": "q", "label": "<img src=x onerror=alert(2)>", "type": "text"},
                  {"name": "ph", "label": "Placeholder field", "type": "text",
                   "placeholder": "\"><script>x1</script>"},
                  {"name": "sel", "label": "Select field", "type": "select",
                   "options": ["\"><script>x2</script>"]},
                  {"name": "file1", "label": "File field", "type": "file",
                   "accept": "\"><script>x3</script>"}
                ]}}
  ],
  "connections": [],
  "http": {
    "method": "GET",
    "path": "/webhook/{workflowId}/x%22%3E%3Cscript%3Ex4%3C/script%3E",
    "expectStatus": 200,
    "expectBodyContains": [
      "&lt;script&gt;alert(1)&lt;/script&gt;",
      "&lt;img src=x onerror=alert(2)&gt;",
      "&amp;",
      "&quot;&gt;&lt;script&gt;x1&lt;/script&gt;",
      "&quot;&gt;&lt;script&gt;x2&lt;/script&gt;",
      "&quot;&gt;&lt;script&gt;x3&lt;/script&gt;",
      "/x&quot;&gt;&lt;script&gt;x4&lt;/script&gt;"
    ],
    "expectBodyExcludes": [
      "<script>alert(1)</script>",
      "<img src=x onerror",
      "\"><script>x1</script>",
      "\"><script>x2</script>",
      "\"><script>x3</script>",
      "\"><script>x4</script>"
    ]
  }
}