discourse/plugins/chat/test/javascripts/components/chat-channel-delete-modal-inner-test.js

import { setupRenderingTest } from "discourse/tests/helpers/component-test";
import fabricators from "../helpers/fabricators";
import { query } from "discourse/tests/helpers/qunit-helpers";
import hbs from "htmlbars-inline-precompile";
import { render } from "@ember/test-helpers";
import { module, test } from "qunit";

module(
  "Discourse Chat | Component | chat-channel-delete-modal-inner",
  function (hooks) {
    setupRenderingTest(hooks);

    test("channel title is escaped in instructions correctly", async function (assert) {
      this.set(
        "channel",
        fabricators.chatChannel({
          title: `<script>someeviltitle</script>`,
        })
      );

      await render(
        hbs`<ChatChannelDeleteModalInner @chatChannel={{this.channel}} />`
      );

      assert.true(
        query(".chat-channel-delete-modal-instructions").innerHTML.includes(
          "&lt;script&gt;someeviltitle&lt;/script&gt;"
        )
      );
    });
  }
);