import type { SecurityConfig } from '@n8n/config';
import { Container } from '@n8n/di';
import { mock } from 'vitest-mock-extended';

import {
	isWebhookHtmlSandboxingDisabled,
	isFormHtmlSandboxingDisabled,
	getHtmlSandboxCSP,
} from '@/html-sandbox';

const securityConfig = mock<SecurityConfig>();

describe('isWebhookHtmlSandboxingDisabled', () => {
	afterAll(() => {
		vi.restoreAllMocks();
	});
	beforeEach(() => {
		vi.spyOn(Container, 'get').mockReturnValue(securityConfig);
	});

	it('should return false when sandboxing is enabled', () => {
		securityConfig.disableWebhookHtmlSandboxing = false;
		expect(isWebhookHtmlSandboxingDisabled()).toBe(false);
	});

	it('should return true when sandboxing is disabled', () => {
		securityConfig.disableWebhookHtmlSandboxing = true;
		expect(isWebhookHtmlSandboxingDisabled()).toBe(true);
	});
});

describe('isFormHtmlSandboxingDisabled', () => {
	afterAll(() => {
		vi.restoreAllMocks();
	});
	beforeEach(() => {
		vi.spyOn(Container, 'get').mockReturnValue(securityConfig);
	});

	it('should return false when sandboxing is enabled', () => {
		securityConfig.disableFormHtmlSandboxing = false;
		expect(isFormHtmlSandboxingDisabled()).toBe(false);
	});

	it('should return true when sandboxing is disabled', () => {
		securityConfig.disableFormHtmlSandboxing = true;
		expect(isFormHtmlSandboxingDisabled()).toBe(true);
	});
});

describe('getHtmlSandboxCSP', () => {
	it('should return correct CSP sandbox directive', () => {
		const csp = getHtmlSandboxCSP();
		expect(csp).toBe(
			'sandbox allow-downloads allow-forms allow-modals allow-orientation-lock allow-pointer-lock allow-popups allow-popups-to-escape-sandbox allow-presentation allow-scripts allow-top-navigation-by-user-activation allow-top-navigation-to-custom-protocols',
		);
	});

	it('should not include allow-same-origin', () => {
		const csp = getHtmlSandboxCSP();
		expect(csp).not.toContain('allow-same-origin');
	});
});