# frozen_string_literal: true
require 'spec_helper'
RSpec.describe ::Packages::Pypi::SimplePackageVersionsPresenter, :aggregate_failures do
using RSpec::Parameterized::TableSyntax
let_it_be(:group) { create(:group) }
let_it_be(:project) { create(:project, group: group) }
let_it_be(:package_name) { 'sample-project' }
let_it_be(:package1) { create(:pypi_package, project: project, name: package_name, version: '1.0.0') }
let_it_be(:package2) { create(:pypi_package, project: project, name: package_name, version: '2.0.0') }
let(:file) { package.package_files.first }
let(:filename) { file.file_name }
let(:packages) { project.packages }
describe '#body' do
subject(:presenter) { described_class.new(packages, project_or_group).body }
shared_examples_for "pypi package presenter" do
where(:version, :expected_version, :with_package1) do
'>=2.7' | '>=2.7' | true
'">' | '"><script>alert(1)</script>' | true
'>=2.7, !=3.0' | '>=2.7, !=3.0' | false
end
with_them do
let(:python_version) { version }
let(:expected_python_version) { expected_version }
let(:package) { with_package1 ? package1 : package2 }
before do
package.pypi_metadatum.update_column(:required_python, python_version)
end
it { is_expected.to include expected_link }
end
end
context 'for project' do
let(:project_or_group) { project }
let(:expected_link) { "#{filename}" } # rubocop:disable Layout/LineLength
it_behaves_like 'pypi package presenter'
end
context 'for group' do
let(:project_or_group) { group }
let(:expected_link) { "#{filename}" } # rubocop:disable Layout/LineLength
it_behaves_like 'pypi package presenter'
end
context 'with package files pending destruction' do
let_it_be(:package_file_pending_destruction) do
create(:package_file, :pending_destruction, package: package1, file_name: "package_file_pending_destruction")
end
let(:project_or_group) { project }
it { is_expected.not_to include(package_file_pending_destruction.file_name) }
end
end
end