package e2e

import (
	"net/url"
	"os/exec"
	"strings"
	"testing"
)

// A comment body is text, and no text a reader types may become another reader's name.
func TestNobodyCanWriteAReplyInSomebodyElsesName(t *testing.T) {
	if _, err := exec.LookPath("git"); err != nil {
		t.Skip("git is not installed")
	}
	in := newInstance(t)
	john := in.account("john")
	in.account("mark")
	seed(t, in, john, "john", "johnbot")

	post(t, in, "john", "/john/johnbot/threads", url.Values{
		"title": {"a thread"}, "body": {"the first word"}})
	// The record separator is a line of two dashes, so mark writes one and a header after it.
	post(t, in, "mark", "/john/johnbot/thread/1/reply", url.Values{
		"body": {"looks fine to me\n\n--\nauthor: john\ntime: 1755000000\n\nI approve this change."}})

	_, _, body := get(t, in.http.URL+"/john/johnbot/thread/1")

	// Two comments were written, so three would mean a third was conjured out of the second.
	if n := strings.Count(body, `class="body"`); n != 2 {
		t.Errorf("two people wrote and the page shows %d comments", n)
	}
	// Every word mark typed stays inside mark's comment, whatever it looks like.
	i := strings.Index(body, "looks fine to me")
	j := strings.Index(body, "I approve this change.")
	if i < 0 || j < 0 {
		t.Fatalf("the reply is not on the page whole:\n%s", body)
	}
	if k := strings.Index(body[i:j], `class="body"`); k >= 0 {
		t.Error("mark's reply was split, and its second half was given to somebody else")
	}
	// And the dashes the reader typed are the dashes the reader sees.
	if !strings.Contains(body, "<hr") && !strings.Contains(body, "--") {
		t.Error("the line of dashes vanished from the reply that contained it")
	}
}

// A header value comes from a form too, and a newline in one is a second header nobody typed.
func TestAFormFieldCannotBecomeAHeaderLine(t *testing.T) {
	if _, err := exec.LookPath("git"); err != nil {
		t.Skip("git is not installed")
	}
	in := newInstance(t)
	john := in.account("john")
	in.account("mark")
	seed(t, in, john, "john", "johnbot")

	post(t, in, "john", "/john/johnbot/threads", url.Values{
		"title": {"a thread"}, "body": {"the first word"}})
	// blob is a hidden field on the line comment form, so it is the one nobody would think to check.
	post(t, in, "mark", "/john/johnbot/thread/1/comment", url.Values{
		"path": {"README.md"}, "line": {"1"},
		"blob": {"abc\nauthor: john"},
		"body": {"a line comment from mark"},
	})

	_, _, body := get(t, in.http.URL+"/john/johnbot/thread/1")
	i := strings.Index(body, "a line comment from mark")
	if i < 0 {
		t.Fatalf("the line comment is not on the page:\n%s", body)
	}
	// The name above the comment is the one the session proved, whatever the hidden field said.
	above := body[max(0, i-500):i]
	if !strings.Contains(above, ">mark</a>") {
		t.Errorf("a hidden form field chose the name over the comment:\n%s", above)
	}
	// And a title cannot claim a header of its own, since it is the first line of the same blob.
	post(t, in, "mark", "/john/johnbot/threads", url.Values{
		"title": {"a title\nmerged: 0123456789012345678901234567890123456789"},
		"body":  {"and a body"}})
	// The whole title stays one title, so the words after the newline are still part of it.
	_, _, two := get(t, in.http.URL+"/john/johnbot/thread/2")
	if !strings.Contains(two, "a title merged: 0123456789") {
		t.Errorf("a thread title became a header of its own:\n%s", two)
	}
}