import org.specs2.mutable._ import org.specs2.runner._ import org.junit.runner._ import play.api.test._ import play.api.test.Helpers._ @RunWith(classOf[JUnitRunner]) class ApplicationSpec extends Specification { "Application" should { "Send JavaScript content" in { running(FakeApplication()) { val js = route(FakeRequest(GET, "/assets/javascripts/chatroom.js?username=julien")).get status(js) must equalTo (OK) contentType(js) must beSome.which(_ == "text/javascript") } } "Resist to XSS attacks" in { running(FakeApplication()) { val js = route(FakeRequest(GET, "/assets/javascripts/chatroom.js?username='")).get contentAsString(js).contains("""if(data.user == '\'')""") must beTrue } } } }