', result)
+ self.assertIn('| ', result)
+ self.assertIn(' | ', result)
+
+ def test_truncate_markdown_basic(self):
+ """truncate_markdown filter should truncate and strip Markdown."""
+ from boxes.templatetags.dict_extras import truncate_markdown
+ result = truncate_markdown('**bold** text here', 10)
+ self.assertNotIn('**', result)
+ self.assertNotIn('', result)
+
+ def test_truncate_markdown_long_text(self):
+ """truncate_markdown filter should add ellipsis for long text."""
+ from boxes.templatetags.dict_extras import truncate_markdown
+ long_text = 'This is a very long text that should be truncated'
+ result = truncate_markdown(long_text, 20)
+ self.assertTrue(result.endswith('...'))
+ self.assertLessEqual(len(result), 25)
+
+ def test_truncate_markdown_empty(self):
+ """truncate_markdown filter should handle empty strings."""
+ from boxes.templatetags.dict_extras import truncate_markdown
+ result = truncate_markdown('')
+ self.assertEqual(result, '')
+
+ def test_truncate_markdown_short_text(self):
+ """truncate_markdown filter should not truncate short text."""
+ from boxes.templatetags.dict_extras import truncate_markdown
+ result = truncate_markdown('Short', 100)
+ self.assertEqual(result, 'Short')
+ self.assertNotIn('...', result)
+
+
+class MarkdownInViewsTests(AuthTestCase):
+ """Tests for Markdown rendering in views."""
+
+ def setUp(self):
+ """Set up test fixtures."""
+ super().setUp()
+ self.box_type = BoxType.objects.create(
+ name='Standard Box',
+ width=200,
+ height=100,
+ length=300
+ )
+ self.box = Box.objects.create(
+ id='BOX001',
+ box_type=self.box_type
+ )
+
+ def test_thing_detail_renders_markdown(self):
+ """Thing detail page should render Markdown in description."""
+ thing = Thing.objects.create(
+ name='Test Item',
+ box=self.box,
+ description='**Bold text** and *italic*'
+ )
+ response = self.client.get(f'/thing/{thing.id}/')
+ self.assertEqual(response.status_code, 200)
+ self.assertContains(response, 'Bold text')
+ self.assertContains(response, 'italic')
+
+ def test_thing_detail_renders_markdown_links(self):
+ """Thing detail page should render Markdown links with target blank."""
+ thing = Thing.objects.create(
+ name='Test Item',
+ box=self.box,
+ description='Check [this link](https://example.com)'
+ )
+ response = self.client.get(f'/thing/{thing.id}/')
+ self.assertEqual(response.status_code, 200)
+ self.assertContains(response, 'href="https://example.com"')
+ self.assertContains(response, 'target="_blank"')
+
+ def test_thing_detail_sanitizes_html(self):
+ """Thing detail page should sanitize dangerous HTML in description."""
+ thing = Thing.objects.create(
+ name='Test Item',
+ box=self.box,
+ description='Normal text'
+ )
+ response = self.client.get(f'/thing/{thing.id}/')
+ self.assertEqual(response.status_code, 200)
+ # The description should not contain script tags (they are stripped)
+ # Note: The base template has a |