/*
* Copyright (C) 2026 Fluxer Contributors
*
* This file is part of Fluxer.
*
* Fluxer is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as published by
* the Free Software Foundation, either version 3 of the License, or
* (at your option) any later version.
*
* Fluxer is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with Fluxer. If not, see .
*/
package integration
import (
"fmt"
"net/http"
"strings"
"testing"
)
func TestEmoji_MessageSanitization_DM(t *testing.T) {
client := newTestClient(t)
user := createTestAccount(t, client)
user2 := createTestAccount(t, client)
ensureSessionStarted(t, client, user.Token)
createFriendship(t, client, user, user2)
dmChannel := createDmChannel(t, client, user.Token, parseSnowflake(t, user2.UserID))
dmChannelID := parseSnowflake(t, dmChannel.ID)
t.Run("non-premium user has external emoji replaced with name", func(t *testing.T) {
content := "Hello <:external_emoji:999999999999999999>"
msg := sendChannelMessage(t, client, user.Token, dmChannelID, content)
resp, err := client.getWithAuth(fmt.Sprintf("/channels/%d/messages/%s", dmChannelID, msg.ID), user.Token)
if err != nil {
t.Fatalf("failed to fetch message: %v", err)
}
defer resp.Body.Close()
assertStatus(t, resp, http.StatusOK)
var result struct {
Content string `json:"content"`
}
decodeJSONResponse(t, resp, &result)
if strings.Contains(result.Content, "<:external_emoji:") {
t.Error("expected custom emoji to be sanitized for non-premium user in DM")
}
if !strings.Contains(result.Content, ":external_emoji:") {
t.Error("expected emoji to be replaced with :name: format")
}
})
t.Run("non-premium user animated emoji replaced with name", func(t *testing.T) {
content := "Animated "
msg := sendChannelMessage(t, client, user.Token, dmChannelID, content)
resp, err := client.getWithAuth(fmt.Sprintf("/channels/%d/messages/%s", dmChannelID, msg.ID), user.Token)
if err != nil {
t.Fatalf("failed to fetch message: %v", err)
}
defer resp.Body.Close()
assertStatus(t, resp, http.StatusOK)
var result struct {
Content string `json:"content"`
}
decodeJSONResponse(t, resp, &result)
if strings.Contains(result.Content, "", emoji.ID)
msg := sendChannelMessage(t, client, premiumUser.Token, premiumDMID, content)
resp, err := client.getWithAuth(fmt.Sprintf("/channels/%d/messages/%s", premiumDMID, msg.ID), premiumUser.Token)
if err != nil {
t.Fatalf("failed to fetch message: %v", err)
}
defer resp.Body.Close()
assertStatus(t, resp, http.StatusOK)
var result struct {
Content string `json:"content"`
}
decodeJSONResponse(t, resp, &result)
if !strings.Contains(result.Content, "<:premium_emoji:") {
t.Errorf("expected premium user message to contain custom emoji, got: %s", result.Content)
}
})
t.Run("emoji in code block preserved", func(t *testing.T) {
content := "Look at this: `<:code_emoji:123456789>`"
msg := sendChannelMessage(t, client, user.Token, dmChannelID, content)
resp, err := client.getWithAuth(fmt.Sprintf("/channels/%d/messages/%s", dmChannelID, msg.ID), user.Token)
if err != nil {
t.Fatalf("failed to fetch message: %v", err)
}
defer resp.Body.Close()
assertStatus(t, resp, http.StatusOK)
var result struct {
Content string `json:"content"`
}
decodeJSONResponse(t, resp, &result)
if !strings.Contains(result.Content, "`<:code_emoji:123456789>`") {
t.Error("expected emoji in code block to be preserved")
}
})
t.Run("emoji in triple backtick code block preserved", func(t *testing.T) {
content := "```\n<:block_emoji:123456789>\n```"
msg := sendChannelMessage(t, client, user.Token, dmChannelID, content)
resp, err := client.getWithAuth(fmt.Sprintf("/channels/%d/messages/%s", dmChannelID, msg.ID), user.Token)
if err != nil {
t.Fatalf("failed to fetch message: %v", err)
}
defer resp.Body.Close()
assertStatus(t, resp, http.StatusOK)
var result struct {
Content string `json:"content"`
}
decodeJSONResponse(t, resp, &result)
if !strings.Contains(result.Content, "<:block_emoji:123456789>") {
t.Error("expected emoji in code block to be preserved")
}
})
t.Run("unicode emoji allowed", func(t *testing.T) {
content := "Hello 👋 world 🌍"
msg := sendChannelMessage(t, client, user.Token, dmChannelID, content)
resp, err := client.getWithAuth(fmt.Sprintf("/channels/%d/messages/%s", dmChannelID, msg.ID), user.Token)
if err != nil {
t.Fatalf("failed to fetch message: %v", err)
}
defer resp.Body.Close()
assertStatus(t, resp, http.StatusOK)
var result struct {
Content string `json:"content"`
}
decodeJSONResponse(t, resp, &result)
if !strings.Contains(result.Content, "👋") {
t.Error("expected unicode emoji to be preserved")
}
})
}