# retoor <retoor@molodetz.nl>
from tests.conftest import login_admin


def test_login_and_editor_preview(page, app_server):
    login_admin(page, app_server)
    page.goto(app_server + "/admin/posts/new", wait_until="domcontentloaded")
    page.wait_for_selector("html[data-app=ready]")
    page.fill("#body", "Een **vette** zin <script>alert(1)</script> [link](javascript:alert(1)) <b onclick=alert(1)>b</b>")
    page.wait_for_function("document.querySelector('[data-preview-target] strong')")
    preview = page.locator("[data-preview-target]").inner_html()
    assert "<strong>vette</strong>" in preview
    assert "<script" not in preview
    assert "javascript:" not in preview
    assert "onclick" not in preview
    assert page.console_errors == []