实现本地 Markdown 清洗评审器

reviewer/tests/DiffView.test.tsx

@@ -0,0 +1,21 @@
+import { render, screen } from "@testing-library/react";
+import { describe, expect, it } from "vitest";
+
+import { DiffView } from "../src/client/DiffView.js";
+
+describe("DiffView", () => {
+  it("keeps Markdown and raw HTML as inert editor text", () => {
+    render(
+      <DiffView
+        before={'# title\n<img src="https://example.com/private.png" onerror="alert(1)">'}
+        after={'# title\n<script>alert("x")</script>'}
+        beforeLabel="清洗前"
+        afterLabel="清洗后"
+      />,
+    );
+
+    expect(screen.getByRole("region", { name: "清洗前与清洗后对比" })).toBeInTheDocument();
+    expect(document.querySelector("img")).toBeNull();
+    expect(document.querySelector("script")).toBeNull();
+  });
+});