// SPDX-License-Identifier: AGPL-3.0-or-later import {beforeAll, beforeEach, describe, it} from 'vitest'; import {createTestAccount} from '../../auth/tests/AuthTestUtils'; import {createGuild} from '../../guild/tests/GuildTestUtils'; import {type ApiTestHarness, createApiTestHarness} from '../../test/ApiTestHarness'; import {createBuilderWithoutAuth} from '../../test/TestRequestBuilder'; import {createWebhook, deleteWebhook} from './WebhookTestUtils'; describe('Webhook sticker bypass', () => { let harness: ApiTestHarness; beforeAll(async () => { harness = await createApiTestHarness(); }); beforeEach(async () => { await harness.reset(); }); it('webhook messages ignore sticker_ids', async () => { const user = await createTestAccount(harness); const guild = await createGuild(harness, user.token, 'Webhook Sticker Test Guild'); const channelId = guild.system_channel_id!; const webhook = await createWebhook(harness, channelId, user.token, 'Sticker Test Webhook'); await createBuilderWithoutAuth(harness) .post(`/webhooks/${webhook.id}/${webhook.token}`) .body({ content: 'Webhook sticker test', sticker_ids: ['999999999999999999'], }) .expect(204) .execute(); await deleteWebhook(harness, webhook.id, user.token); }); });