rusty-figlet 0.3.1

Render ASCII-art banners from text — a Rust port of cmatsuoka's `figlet(6)` v2.2.5 with an in-house FIGfont 2.0 parser, all six horizontal smush rules + universal, 12 bundled `.flf` fonts via `include_bytes!`, terminal-width-aware layout, color/rainbow output, byte-equal Strict-mode upstream compatibility, and a typed library API. v0.2: feature layout reorganized — see CHANGELOG. v0.3: toilet feature parity — TLF parser, 10 filters, HTML/IRC/SVG export, truecolor — see CHANGELOG.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98

//! E012 Phase 9 — `--background=<color>` integration tests (T064).
//!
//! Covers SC-007: typed background color parsing happens BEFORE export
//! emit so XSS-via-color-spec is impossible per spec Edge Cases. Tests
//! drive the binary via `assert_cmd` to exercise the full CLI surface.

#![cfg(all(feature = "cli", feature = "color"))]

use assert_cmd::Command;

fn cmd() -> Command {
    let mut c = Command::cargo_bin("rusty-figlet").expect("binary built");
    // Stable env: no terminal probing, no NO_COLOR override.
    c.env_clear();
    #[cfg(windows)]
    c.env("PATH", std::env::var("PATH").unwrap_or_default());
    c
}

// ---------------------------------------------------------------------------
// SC-007 — parse-time rejection of injection payloads (the security claim).
// ---------------------------------------------------------------------------

#[test]
fn background_rejects_ansi_escape_injection() {
    // ESC byte (0x1B) — the canonical SGR injection seed.
    let payload = "\x1b[Hclear";
    cmd()
        .args(["--background", payload, "X"])
        .assert()
        .failure();
}

#[test]
fn background_rejects_shell_metachars() {
    cmd()
        .args(["--background", "red; rm -rf /", "X"])
        .assert()
        .failure();
}

#[test]
fn background_rejects_partial_hex() {
    cmd().args(["--background", "#xx", "X"]).assert().failure();
    cmd().args(["--background", "#12", "X"]).assert().failure();
    cmd()
        .args(["--background", "#1234567", "X"])
        .assert()
        .failure();
}

#[test]
fn background_rejects_newline() {
    cmd()
        .args(["--background", "red\nINJECT", "X"])
        .assert()
        .failure();
}

#[test]
fn background_rejects_unknown_named_color() {
    cmd().args(["--background", "puce", "X"]).assert().failure();
}

// ---------------------------------------------------------------------------
// Accepts the documented set.
// ---------------------------------------------------------------------------

#[test]
fn background_accepts_named_color() {
    // Without `-E`, the CLI renders normally — we only assert exit success
    // (the spec is parsed, the color carries through type-safely).
    cmd().args(["--background", "red", "X"]).assert().success();
}

#[test]
fn background_accepts_bright_variant() {
    cmd()
        .args(["--background", "bright_blue", "X"])
        .assert()
        .success();
}

#[test]
fn background_accepts_rrggbb_hex() {
    cmd()
        .args(["--background", "#1A2B3C", "X"])
        .assert()
        .success();
}

#[test]
fn background_accepts_lowercase_hex() {
    cmd()
        .args(["--background", "#abcdef", "X"])
        .assert()
        .success();
}