juice-shop/juice-shop

/*
 * Copyright (c) 2014-2024 Bjoern Kimminich & the OWASP Juice Shop contributors.
 * SPDX-License-Identifier: MIT
 */

import frisby = require('frisby')

const URL = 'http://localhost:3000'

describe('/promotion', () => {
  it('GET promotion video page is publicly accessible', () => {
    return frisby.get(URL + '/promotion')
      .expect('status', 200)
  })

  it('GET promotion video page contains embedded video', () => {
    return frisby.get(URL + '/promotion')
      .expect('header', 'content-type', /text\/html/)
      .expect('bodyContains', '<source src="./video" type="video/mp4">')
  })

  it('GET promotion video page contains subtitles as <script>', () => {
    return frisby.get(URL + '/promotion')
      .expect('header', 'content-type', /text\/html/)
      .expect('bodyContains', '<script id="subtitle" type="text/vtt" data-label="English" data-lang="en">')
  })
})

describe('/video', () => {
  it('GET promotion video is publicly accessible', () => {
    return frisby.get(URL + '/video')
      .expect('status', 200)
      .expect('header', 'content-type', /video\/mp4/)
  })
})