package web

import (
	"strings"
	"testing"

	"github.com/stretchr/testify/assert"
)

func TestFormatKeysEscapesEveryCatalogFragment(t *testing.T) {
	formatted := string(formatKeys(`Ctrl+<img/src=x/onerror=alert(1)> / safe&sound`))

	assert.NotContains(t, formatted, "<img")
	assert.Contains(t, formatted, "&lt;img/src=x/onerror=alert(1)&gt;")
	assert.Contains(t, formatted, "safe&amp;sound")
	assert.Equal(t, strings.Count(formatted, `<span class="kbd">`), 3)
}