patilswapnilv / shortcodely

        $this->assertErrorResponse('rest_invalid_param', $response, 400);

    }

    public function test_create_item_alt_text() 

    {

        wp_set_current_user(self::$author_id);

        $request = new WP_REST_Request('POST', '/wp/v2/media');

        $request->set_header('Content-Type', 'image/jpeg');

        $request->set_header('Content-Disposition', 'attachment; filename=canola.jpg');

        $request->set_body(file_get_contents($this->test_file));

        $request->set_param('alt_text', 'test alt text');

        $response = $this->server->dispatch($request);

        $attachment = $response->get_data();

        $this->assertEquals('test alt text', $attachment['alt_text']);

    }

    public function test_create_item_unsafe_alt_text() 

        $this->assertEquals('test alt text', $attachment['alt_text']);

    }

    public function test_create_item_unsafe_alt_text() 

    {

        wp_set_current_user(self::$author_id);

        $request = new WP_REST_Request('POST', '/wp/v2/media');

        $request->set_header('Content-Type', 'image/jpeg');

        $request->set_header('Content-Disposition', 'attachment; filename=canola.jpg');

        $request->set_body(file_get_contents($this->test_file));

        $request->set_param('alt_text', '<script>alert(document.cookie)</script>');

        $response = $this->server->dispatch($request);

        $attachment = $response->get_data();

        $this->assertEquals('', $attachment['alt_text']);

    }

    public function test_update_item() 

        $this->check_user_data($userdata, $data, 'edit', $data['_links']);

    }

    public function test_get_items_with_edit_context_without_permission() 

    {

        //test with a user not logged in

        $request = new WP_REST_Request('GET', '/wp/v2/users');

        $request->set_param('context', 'edit');

        $response = $this->server->dispatch($request);

        $this->assertEquals(401, $response->get_status());

        //test with a user logged in but without sufficient capabilities; capability in question: 'list_users'

        wp_set_current_user(self::$editor);

        $request = new WP_REST_Request('GET', '/wp/v2/users');

        $request->set_param('context', 'edit');

        $response = $this->server->dispatch($request);

        $this->assertEquals(403, $response->get_status());

    }

    public function test_get_items_unauthenticated_only_shows_public_users() 

        $this->assertErrorResponse('rest_user_invalid_id', $response, 404);

    }

    public function test_update_item_invalid_password() 

    {

        $this->allow_user_to_manage_multisite();

        wp_set_current_user(self::$user);

        $request = new WP_REST_Request('PUT', sprintf('/wp/v2/users/%d', self::$editor));

        $request->set_param('password', 'no\\backslashes\\allowed');

        $response = $this->server->dispatch($request);

        $this->assertErrorResponse('rest_invalid_param', $response, 400);

        $request->set_param('password', '');

        $response = $this->server->dispatch($request);

        $this->assertErrorResponse('rest_invalid_param', $response, 400);

    }

    public function verify_user_roundtrip( $input = array(), $expected_output = array() )