// TEST VECTORS for the social icon checker (socialSvg.ts) and its render path —
// test data only, imported by common/lib/normalizeSocialSvg.test.ts and the
// homepage e2e (svg-vectors.spec.ts, social.spec.ts). Synthetic throughout.
//
// ADVERSARIAL: the review's battery (release 14, slice HP): every input the
// checker must either refuse or render inertly — no script, no request to
// another origin, and the page parsed around the icon unchanged.
// LOADS_ELSEWHERE: the eight the first allowlist accepted that made Chromium
// fetch from another origin (R2); all refused now.
// REAL_SHAPES: the shapes an operator's pasted icons take; each must pass, or
// that icon turns into a text label on every site.

const V = `viewBox="0 0 8 8"`;
const W = (inner: string, open = `<svg ${V}>`) => `${open}${inner}</svg>`;
export const EVIL = "https://evil.example";

export const ADVERSARIAL: Record<string, string> = {
  // the five originals
  slash_handler: `<svg/onload="window.__x=1" ${V}><path d="M0 0"/></svg>`,
  deletion_join: `<svg ${V} o width="1"nload="window.__x=1"><path d="M0 0"/></svg>`,
  image_slash: W(`<image href="x:"/onerror="window.__x=1"/>`),
  charref_js: W(`<a href="jav&#97;script:window.__x=1"><rect width="8" height="8"/></a>`),
  breakout_img: W(`<img src="x:"/onerror="window.__x=1">`),
  // tokenizer
  unterminated_tag: `<svg ${V}><path d="M0 0"</svg>`,
  unterminated_quote: `<svg ${V}><path d="M0 0/></svg>`,
  attr_no_value: `<svg ${V} focusable><path d="M0 0"/></svg>`,
  handler_no_value: `<svg ${V} onload><path d="M0 0"/></svg>`,
  dup_href_first_ok: W(`<defs><linearGradient id="g"/></defs><use href="#g" href="${EVIL}/x.svg#g"/>`),
  dup_href_first_bad: W(`<defs><linearGradient id="g"/></defs><use href="${EVIL}/x.svg#g" href="#g"/>`),
  dup_fill: W(`<rect fill="url(#a)" fill="url(${EVIL}/p.svg#a)"/>`),
  upper_xlink: W(`<use XLINK:HREF="javascript:window.__x=1"/>`),
  upper_xlink_frag: W(`<defs><g id="a"/></defs><use XLINK:HREF="#a"/>`),
  xml_base: `<svg ${V} xml:base="${EVIL}/"><use href="#a"/></svg>`,
  xmlns_redef: `<svg ${V} xmlns:xlink="${EVIL}/ns" xmlns:foo="http://www.w3.org/1999/xlink"><defs><g id="a"/></defs><use foo:href="${EVIL}/x"/></svg>`,
  xmlns_js: `<svg ${V} xmlns:xlink="javascript:window.__x=1"><path d="M0 0"/></svg>`,
  nul_in_name: `<svg ${V} on\u0000load="window.__x=1"><path d="M0 0"/></svg>`,
  nul_in_value: `<svg ${V} data-x="a\u0000b"><path d="M0 0"/></svg>`,
  vt_separator: `<svg ${V}\u000bonload="window.__x=1"><path d="M0 0"/></svg>`,
  cr_separator: `<svg ${V}\ronload="window.__x=1"><path d="M0 0"/></svg>`,
  no_ws_between_attrs: `<svg ${V} data-a="1"onload="window.__x=1"><path d="M0 0"/></svg>`,
  backtick_value: `<svg ${V} data-x=\`a\`><path d="M0 0"/></svg>`,
  unquoted_value: `<svg ${V} data-x=a><path d="M0 0"/></svg>`,
  gt_in_dq_value: `<svg ${V} data-x="><img src=x onerror=window.__x=1>"><path d="M0 0"/></svg>`,
  gt_in_sq_value: `<svg ${V} data-x='"><img src=x onerror=window.__x=1>'><path d="M0 0"/></svg>`,
  sq_value_with_fill: `<svg ${V} data-x=' fill="#fff" style="fill:#000"'><path fill="#f00" d="M0 0"/></svg>`,
  // entities
  ent_leading_zeros: W(`<rect data-x="&#0000106;avascript&#0058;window.__x=1"/>`),
  ent_hex_nosemi: W(`<rect data-x="&#x6aavascript:x"/>`),
  ent_colon_tab_nl: W(`<rect data-x="java&Tab;scr&NewLine;ipt&colon;x"/>`),
  ent_colon_nosemi: W(`<rect data-x="javascript&colonx"/>`),
  href_ent_hash: W(`<defs><g id="a"/></defs><use href="&#35;a"/>`),
  href_ws_frag: W(`<defs><g id="a"/></defs><use href=" #a "/>`),
  // css url forms
  style_url_escape: W(`<rect style="fill:\\75 rl(${EVIL}/p.svg#a)"/>`),
  style_comment_url: W(`<rect style="fill:url/**/(${EVIL}/p.svg#a)"/>`),
  pres_url_escape_fill: W(`<rect width="8" height="8" fill="\\75 rl(${EVIL}/fill.svg#a)"/>`),
  pres_url_escape_filter: W(`<rect width="8" height="8" filter="\\75 rl(${EVIL}/filter.svg#a)"/>`),
  pres_url_escape_mask: W(`<rect width="8" height="8" mask="\\75 rl(${EVIL}/mask.svg#a)"/>`),
  pres_url_escape_clip: W(`<rect width="8" height="8" clip-path="\\75 rl(${EVIL}/clip.svg#a)"/>`),
  pres_mask_imageset: W(`<rect width="8" height="8" mask="image-set('${EVIL}/mask-is.png' 1x)"/>`),
  style_bg_imageset_root: `<svg ${V} style="background-image:image-set('${EVIL}/bg-is.png' 1x)"><path d="M0 0"/></svg>`,
  style_mask_imageset: W(`<rect width="8" height="8" style="mask-image:image-set('${EVIL}/mimg-is.png' 1x)"/>`),
  style_cursor_imageset: `<svg ${V} style="cursor:image-set('${EVIL}/cur-is.png' 1x),auto"><path d="M0 0"/></svg>`,
  style_webkit_imageset: `<svg ${V} style="background-image:-webkit-image-set('${EVIL}/wk-is.png' 1x)"><path d="M0 0"/></svg>`,
  anim_fill_escape: W(`<rect width="8" height="8"><set attributeName="fill" to="\\75 rl(${EVIL}/anim.svg#a)"/></rect>`),
  anim_mask_imageset: W(`<rect width="8" height="8"><set attributeName="mask" to="image-set('${EVIL}/anim-is.png' 1x)"/></rect>`),
  anim_style: W(`<rect width="8" height="8"><set attributeName="style" to="background:red"/></rect>`),
  // references
  use_external: W(`<use href="${EVIL}/x.svg#a"/>`),
  use_data: W(`<use href="data:image/svg+xml,%3Csvg%3E"/>`),
  feimage: W(`<filter id="f"><feImage href="${EVIL}/i.png"/></filter>`),
  anchor: W(`<a href="#a"><rect/></a>`),
  anim_href: W(`<set attributeName="href" to="javascript:x"/>`),
  anim_href_ws: W(`<set attributeName=" HREF " to="#a"/>`),
  anim_xlink_prefix: `<svg ${V} xmlns:x="http://www.w3.org/1999/xlink"><defs><g id="a"/></defs><use href="#a"><set attributeName="x:href" to="${EVIL}/x.svg#a" begin="0s"/></use></svg>`,
  anim_onclick: W(`<set attributeName="onclick" to="window.__x=1"/>`),
  anim_xlink_onclick: W(`<rect width="8" height="8"><set attributeName="xlink:onclick" to="window.__x=1"/></rect>`),
  // elements
  style_el: W(`<style>*{}</style>`),
  nested_svg: W(`<svg viewBox="0 0 1 1"><path d="M0 0"/></svg>`),
  title_markup_text: W(`<title>&lt;img src=x onerror=window.__x=1&gt;</title>`),
  title_child_el: W(`<title><path d="M0 0"/></title>`),
  desc_child_el: W(`<desc><g></g></desc>`),
  title_title: W(`<title><title>x</title></title>`),
  title_svg_title: W(`<title><svg viewBox="0 0 1 1"><title>t</title></svg></title>`),
  math: W(`<math><mi>x</mi></math>`),
  table: W(`<table><tr><td>x</td></tr></table>`),
  after_root_html: `<svg ${V}></svg><img src=x onerror=window.__x=1>`,
  after_root_ws: `<svg ${V}><path d="M0 0"/></svg>\n  `,
  doctype_subset: `<!DOCTYPE svg [<!ENTITY x "y">]><svg ${V}></svg>`,
  doctype_plain: `<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "x"><svg ${V}><path d="M0 0"/></svg>`,
  doctype_html: `<!DOCTYPE html><svg ${V}><path d="M0 0"/></svg>`,
  xmldecl_gt: `<?xml version="1.0" encoding="a>b"?><svg ${V}><path d="M0 0"/></svg>`,
  comment_join: `<svg ${V}><scr<!-- -->ipt>window.__x=1</script></svg>`,
  comment_bang_close: `<svg ${V}><!-- a --!><img src=x onerror=window.__x=1> --><path d="M0 0"/></svg>`,
  comment_abrupt: `<svg ${V}><!--><img src=x onerror=window.__x=1>--><path d="M0 0"/></svg>`,
  cdata: W(`<![CDATA[<img src=x onerror=window.__x=1>]]>`),
  pi: W(`<?x y?>`),
  upper_close: `<svg ${V}><path d="M0 0"/></SVG>`,
  close_ws: `<svg ${V}><path d="M0 0"/></svg >`,
  close_attr: `<svg ${V}><path d="M0 0"/></svg foo="1">`,
  svg_ns_script: W(`<svg:script>window.__x=1</svg:script>`),
  // layout / redress (not script)
  overlay_style: `<svg ${V} style="position:fixed;inset:0;width:100vw;height:100vh;z-index:2147483647"><path d="M0 0"/></svg>`,
  class_redress: `<svg ${V} class="fixed inset-0 z-50"><path d="M0 0"/></svg>`,
  id_clobber: W(`<g id="__next_f"/>`),
  role_aria: `<svg ${V} aria-hidden="false" role="img" aria-label="Pay here"><path d="M0 0"/></svg>`,
};

export const LOADS_ELSEWHERE: readonly string[] = [
  "pres_url_escape_mask",
  "pres_url_escape_clip",
  "pres_mask_imageset",
  "style_bg_imageset_root",
  "style_mask_imageset",
  "style_cursor_imageset",
  "style_webkit_imageset",
  "anim_mask_imageset",
];

export const REAL_SHAPES: Record<string, string> = {
  // A gradient body with a dark outline under it, the root as a drawing
  // program writes it.
  gradient_outlined:
    `<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:svg="http://www.w3.org/2000/svg" x="0px" y="0px" viewBox="-3 -3 76.3 80.8" enable-background="new 0 0 198.7 74.8" xml:space="preserve">` +
    `<defs><linearGradient id="grad_1" gradientUnits="userSpaceOnUse" x1="35" y1="0" x2="35" y2="75" gradientTransform="matrix(1,0,0,-1,0,75)">` +
    `<stop offset="0" style="stop-color:#E0A030"/><stop offset="1" style="stop-color:#1C9A5B"/></linearGradient></defs>` +
    `<path fill="url(#grad_1)" style="fill:url(#grad_1)" stroke="#161c21" stroke-width="6" stroke-linejoin="round" paint-order="stroke" d="M38 75C50 64 70 50 70 30 70 12 55 0 38 0S5 12 5 30c0 20 21 34 33 45z"/>` +
    `<circle fill="#333333" cx="31" cy="10" r="2.1"/></svg>`,
  // One path in the link's colour, `fill="none"` on the root.
  single_path:
    `<svg viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M2 2h20v20H2z" fill="currentColor"/></svg>`,
  // A two-colour disc with a stroke on the disc and a decimal viewBox.
  disc_stroked:
    `<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 80.5 80.5" fill="none">` +
    `<circle cx="42" cy="42" r="36" fill="#1a1a1a"/>` +
    `<circle cx="38.5" cy="38.5" r="37" fill="#f4c542" stroke="#1a1a1a" stroke-width="1.557"/>` +
    `<path fill="#1a1a1a" d="M30 22h20v8H38v6h10v8H38v14h-8z"/></svg>`,
};