private_image/frontend/src/utils/share/buildHtmlLink.spec.ts

import { describe, expect, it } from 'vitest';
import { buildHtmlLink } from '@/utils/share/buildHtmlLink';

describe('buildHtmlLink', () => {
    it('builds an anchor with escaped href and label', () => {
        expect(buildHtmlLink('photo.jpg', 'https://example.com/v/1#key')).toBe(
            '<a href="https://example.com/v/1#key">photo.jpg</a>'
        );
    });

    it('escapes HTML in link label', () => {
        expect(buildHtmlLink('<script>alert(1)</script>', 'https://example.com/v/1')).toBe(
            '<a href="https://example.com/v/1">&lt;script&gt;alert(1)&lt;/script&gt;</a>'
        );
    });

    it('escapes quotes in href', () => {
        expect(buildHtmlLink('label', 'https://example.com/x" y')).toBe(
            '<a href="https://example.com/x&quot; y">label</a>'
        );
    });
});