fix(xss): add escape hepler for resources

Author: mydearxym

test/groupher_server_web/mutation/cms/post_test.exs

@@ -63,18 +63,22 @@ defmodule GroupherServer.Test.Mutation.Post do
       assert {:ok, _} = ORM.find_by(CMS.Author, user_id: user.id)
     end
 
+<<<<<<< HEAD
+=======
+    @tag :wip
+>>>>>>> fix(xss): add escape hepler for resources
     test "create post should excape xss attracts" do
       {:ok, user} = db_insert(:user)
       user_conn = simu_conn(:user, user)
 
       {:ok, community} = db_insert(:community)
-      post_attr = mock_attrs(:post, %{body: assert_v(:xss_string)})
+      post_attr = mock_attrs(:post, %{body: "<script>alert(\"hello,world\")</script>"})
 
       variables = post_attr |> Map.merge(%{communityId: community.id})
       created = user_conn |> mutation_result(@create_post_query, variables, "createPost")
       {:ok, post} = ORM.find(CMS.Post, created["id"])
 
-      assert post.body == assert_v(:xss_safe_string)
+      assert post.body == "&lt;script&gt;alert(&quot;hello,world&quot;)&lt;/script&gt;"
     end
 
     # NOTE: this test is IMPORTANT, cause json_codec: Jason in router will cause