smartbotic/tests/nodes/form-render-escaping.json

{
  "name": "verify-form-render-escaping",
  "nodes": [
    {"id": "n1", "name": "Form", "type": "form-trigger", "position": {"x": 0, "y": 0},
     "config": {"title": "<script>alert(1)</script>",
                "description": "a \"quoted\" & <b>bold</b> description",
                "fields": [{"name": "q", "label": "<img src=x onerror=alert(2)>", "type": "text"}]}}
  ],
  "connections": [],
  "http": {
    "method": "GET",
    "path": "/webhook/{workflowId}",
    "expectStatus": 200,
    "expectBodyContains": [
      "&lt;script&gt;alert(1)&lt;/script&gt;",
      "&lt;img src=x onerror=alert(2)&gt;",
      "&amp;"
    ],
    "expectBodyExcludes": ["<script>alert(1)</script>", "<img src=x onerror"]
  }
}