Initial import of space_profiles module

tests/codeception/unit/ProfileAccessTest.php

@@ -0,0 +1,69 @@
+<?php
+
+namespace space_profiles;
+
+use humhub\modules\space\models\Space;
+use humhub\modules\space_profiles\helpers\ProfileAccess;
+use humhub\modules\user\models\User;
+
+class ProfileAccessTest extends UnitTester
+{
+    public function testPublicSpaceAllowsGuest(): void
+    {
+        $space = $this->createSpaceMock(Space::VISIBILITY_ALL, true, false);
+
+        $this->assertTrue(ProfileAccess::canView($space, null));
+    }
+
+    public function testMembersOnlyBlocksGuestAndAllowsUser(): void
+    {
+        $space = $this->createSpaceMock(Space::VISIBILITY_REGISTERED_ONLY, true, false);
+        $user = $this->createUserMock(false);
+
+        $this->assertFalse(ProfileAccess::canView($space, null));
+        $this->assertTrue(ProfileAccess::canView($space, $user));
+    }
+
+    public function testPrivateSpaceRequiresMembership(): void
+    {
+        $user = $this->createUserMock(false);
+        $nonMemberSpace = $this->createSpaceMock(Space::VISIBILITY_NONE, true, false);
+        $memberSpace = $this->createSpaceMock(Space::VISIBILITY_NONE, true, true);
+
+        $this->assertFalse(ProfileAccess::canView($nonMemberSpace, $user));
+        $this->assertTrue(ProfileAccess::canView($memberSpace, $user));
+    }
+
+    public function testDisabledSpaceDenied(): void
+    {
+        $space = $this->createSpaceMock(Space::VISIBILITY_ALL, false, true);
+
+        $this->assertFalse(ProfileAccess::canView($space, $this->createUserMock(true)));
+    }
+
+    private function createSpaceMock(int $visibility, bool $enabled, bool $isMember): Space
+    {
+        $space = $this->getMockBuilder(Space::class)
+            ->disableOriginalConstructor()
+            ->onlyMethods(['isMember'])
+            ->getMock();
+
+        $space->visibility = $visibility;
+        $space->status = $enabled ? Space::STATUS_ENABLED : Space::STATUS_ARCHIVED;
+        $space->method('isMember')->willReturn($isMember);
+
+        return $space;
+    }
+
+    private function createUserMock(bool $isAdmin): User
+    {
+        $user = $this->getMockBuilder(User::class)
+            ->disableOriginalConstructor()
+            ->onlyMethods(['isSystemAdmin'])
+            ->getMock();
+
+        $user->method('isSystemAdmin')->willReturn($isAdmin);
+
+        return $user;
+    }
+}

tests/codeception/unit/ProfileHtmlSanitizerTest.php

@@ -0,0 +1,40 @@
+<?php
+
+namespace space_profiles;
+
+use humhub\modules\space_profiles\helpers\ProfileHtmlSanitizer;
+
+class ProfileHtmlSanitizerTest extends UnitTester
+{
+    public function testSanitizeRemovesScriptsAndHandlers(): void
+    {
+        $input = '<script>alert(1)</script><div class="hdr" onclick="alert(2)">OK</div>';
+
+        $output = ProfileHtmlSanitizer::sanitize($input);
+
+        $this->assertStringNotContainsString('<script', $output);
+        $this->assertStringNotContainsString('onclick=', $output);
+        $this->assertStringContainsString('<div class="hdr">OK</div>', $output);
+    }
+
+    public function testSanitizeStripsJavascriptUris(): void
+    {
+        $input = '<a href="javascript:alert(1)">bad</a><a href="https://example.org">good</a>';
+
+        $output = ProfileHtmlSanitizer::sanitize($input);
+
+        $this->assertStringNotContainsString('javascript:', $output);
+        $this->assertStringContainsString('https://example.org', $output);
+    }
+
+    public function testSanitizeScopesEmbeddedCss(): void
+    {
+        $input = '<style>body{color:red}.hdr{font-weight:bold}</style><div class="hdr">Title</div>';
+
+        $output = ProfileHtmlSanitizer::sanitize($input);
+
+        $this->assertStringContainsString('.rescue-profile-scope', $output);
+        $this->assertStringContainsString('.rescue-profile-scope .hdr', $output);
+        $this->assertStringNotContainsString('<style>body{color:red}', $output);
+    }
+}

tests/codeception/unit/SpaceProfileFormTest.php

@@ -0,0 +1,52 @@
+<?php
+
+namespace space_profiles;
+
+use humhub\modules\space\models\Space;
+use humhub\modules\space_profiles\models\forms\SpaceProfileForm;
+
+class SpaceProfileFormTest extends UnitTester
+{
+    public function testValidMinimalDataPassesValidation(): void
+    {
+        $space = Space::findOne(['id' => 2]);
+        $this->assertNotNull($space, 'Expected fixture space with id=2 to exist.');
+
+        $form = new SpaceProfileForm(['contentContainer' => $space]);
+        $form->profile_name = 'Test Rescue Space';
+        $form->city = 'Boston';
+        $form->state = 'MA';
+        $form->zip_code = '02110';
+        $form->contact_email = 'team@example.org';
+        $form->contact_phone = '(617) 555-1212';
+        $form->website_url = 'https://example.org';
+
+        $this->assertTrue($form->validate());
+    }
+
+    public function testStateMustBeTwoCharacters(): void
+    {
+        $space = Space::findOne(['id' => 2]);
+        $this->assertNotNull($space, 'Expected fixture space with id=2 to exist.');
+
+        $form = new SpaceProfileForm(['contentContainer' => $space]);
+        $form->profile_name = 'Invalid State Case';
+        $form->state = 'Massachusetts';
+
+        $this->assertFalse($form->validate(['state']));
+        $this->assertArrayHasKey('state', $form->getErrors());
+    }
+
+    public function testContactEmailMustBeValid(): void
+    {
+        $space = Space::findOne(['id' => 2]);
+        $this->assertNotNull($space, 'Expected fixture space with id=2 to exist.');
+
+        $form = new SpaceProfileForm(['contentContainer' => $space]);
+        $form->profile_name = 'Invalid Email Case';
+        $form->contact_email = 'not-an-email';
+
+        $this->assertFalse($form->validate(['contact_email']));
+        $this->assertArrayHasKey('contact_email', $form->getErrors());
+    }
+}

tests/codeception/unit/_bootstrap.php

@@ -0,0 +1 @@
+<?php