decidim-core 0.28.0 → 0.28.2

data/lib/decidim/core/test/factories.rb

@@ -9,8 +9,39 @@ require "decidim/participatory_processes/test/factories"
 require "decidim/assemblies/test/factories"
 require "decidim/comments/test/factories"
 
-def generate_localized_title
-  Decidim::Faker::Localized.localized { generate(:title) }
+def generate_component_name(locales, manifest_name, skip_injection: false)
+  prepend = skip_injection ? "" : "<script>alert(\"#{manifest_name}\");</script>"
+
+  Decidim::Components::Namer.new(locales, manifest_name).i18n_name.transform_values { |v| [prepend, v].compact_blank.join(" ") }
+end
+
+def generate_localized_description(field = nil, skip_injection: false, before: "<p>", after: "</p>")
+  Decidim::Faker::Localized.wrapped(before, after) do
+    generate_localized_title(field, skip_injection:)
+  end
+end
+
+def generate_localized_word(field = nil, skip_injection: false)
+  skip_injection = true if field.nil?
+  Decidim::Faker::Localized.localized do
+    if skip_injection
+      Faker::Lorem.word
+    else
+      "<script>alert(\"#{field}\");</script> #{Faker::Lorem.word}"
+    end
+  end
+end
+
+def generate_localized_title(field = nil, skip_injection: false)
+  skip_injection = true if field.nil?
+
+  Decidim::Faker::Localized.localized do
+    if skip_injection
+      generate(:title)
+    else
+      "<script>alert(\"#{field}\");</script> #{generate(:title)}"
+    end
+  end
 end
 
 FactoryBot.define do
@@ -55,21 +86,29 @@ FactoryBot.define do
   end
 
   factory :category, class: "Decidim::Category" do
-    name { generate_localized_title }
-    description { Decidim::Faker::Localized.wrapped("<p>", "</p>") { generate_localized_title } }
+    transient do
+      skip_injection { false }
+    end
+
+    name { generate_localized_title(:category_name, skip_injection:) }
+    description { generate_localized_description(:category_description, skip_injection:) }
     weight { 0 }
 
     association :participatory_space, factory: :participatory_process
   end
 
   factory :subcategory, parent: :category do
-    parent { build(:category) }
+    transient do
+      skip_injection { false }
+    end
+    parent { build(:category, skip_injection:) }
 
     participatory_space { parent.participatory_space }
   end
 
   factory :organization, class: "Decidim::Organization" do
     transient do
+      skip_injection { false }
       create_static_pages { true }
     end
 
@@ -82,7 +121,7 @@ FactoryBot.define do
     youtube_handler { Faker::Hipster.word }
     github_handler { Faker::Hipster.word }
     sequence(:host) { |n| "#{n}.lvh.me" }
-    description { Decidim::Faker::Localized.wrapped("<p>", "</p>") { generate_localized_title } }
+    description { generate_localized_description(:organization_description, skip_injection:) }
     favicon { Decidim::Dev.test_file("icon.png", "image/png") }
     default_locale { Decidim.default_locale }
     available_locales { Decidim.available_locales }
@@ -95,7 +134,7 @@ FactoryBot.define do
     user_groups_enabled { true }
     send_welcome_notification { true }
     comments_max_length { 1000 }
-    admin_terms_of_service_body { Decidim::Faker::Localized.wrapped("<p>", "</p>") { generate_localized_title } }
+    admin_terms_of_service_body { generate_localized_description(:admin_terms_of_service_body, skip_injection:) }
     force_users_to_authenticate_before_access_organization { false }
     machine_translation_display_priority { "original" }
     external_domain_whitelist { ["example.org", "twitter.com", "facebook.com", "youtube.com", "github.com", "mytesturl.me"] }
@@ -126,12 +165,15 @@ FactoryBot.define do
     after(:create) do |organization, evaluator|
       if evaluator.create_static_pages
         tos_page = Decidim::StaticPage.find_by(slug: "terms-of-service", organization:)
-        create(:static_page, :tos, organization:) if tos_page.nil?
+        create(:static_page, :tos, organization:, skip_injection: evaluator.skip_injection) if tos_page.nil?
       end
     end
   end
 
   factory :user, class: "Decidim::User" do
+    transient do
+      skip_injection { false }
+    end
     email { generate(:email) }
     name { generate(:name) }
     nickname { generate(:nickname) }
@@ -140,7 +182,7 @@ FactoryBot.define do
     tos_agreement { "1" }
     avatar { Decidim::Dev.test_file("avatar.jpg", "image/jpeg") }
     personal_url { Faker::Internet.url }
-    about { "<script>alert(\"ABOUT\");</script>#{Faker::Lorem.paragraph(sentence_count: 2)}" }
+    about { generate_localized_title(:user_about, skip_injection:) }
     confirmation_sent_at { Time.current }
     accepted_tos_version { organization.tos_version }
     notifications_sending_frequency { "real_time" }
@@ -188,7 +230,7 @@ FactoryBot.define do
 
     trait :officialized do
       officialized_at { Time.current }
-      officialized_as { generate_localized_title }
+      officialized_as { generate_localized_title(:officialized_as, skip_injection:) }
     end
 
     after(:build) do |user, evaluator|
@@ -200,17 +242,24 @@ FactoryBot.define do
   end
 
   factory :participatory_space_private_user, class: "Decidim::ParticipatorySpacePrivateUser" do
+    transient do
+      skip_injection { false }
+    end
     user
-    privatable_to { create(:participatory_process, organization: user.organization) }
+    privatable_to { create(:participatory_process, organization: user.organization, skip_injection:) }
   end
 
   factory :assembly_private_user, class: "Decidim::ParticipatorySpacePrivateUser" do
+    transient do
+      skip_injection { false }
+    end
     user
-    privatable_to { create(:assembly, organization: user.organization) }
+    privatable_to { create(:assembly, organization: user.organization, skip_injection:) }
   end
 
   factory :user_group, class: "Decidim::UserGroup" do
     transient do
+      skip_injection { false }
       document_number { "#{Faker::Number.number(digits: 8)}X" }
       phone { Faker::PhoneNumber.phone_number }
       rejected_at { nil }
@@ -220,7 +269,7 @@ FactoryBot.define do
     sequence(:name) { |n| "#{Faker::Company.name} #{n}" }
     email { generate(:user_group_email) }
     nickname { generate(:nickname) }
-    about { "<script>alert(\"ABOUT\");</script>#{Faker::Lorem.paragraph(sentence_count: 2)}" }
+    about { generate_localized_title(:user_group_about, skip_injection:) }
     organization
     avatar { Decidim::Dev.test_file("avatar.jpg", "image/jpeg") } # Keep after organization
 
@@ -261,21 +310,27 @@ FactoryBot.define do
       next if users.empty?
 
       creator = users.shift
-      create(:user_group_membership, user: creator, user_group:, role: :creator)
+      create(:user_group_membership, user: creator, user_group:, role: :creator, skip_injection: evaluator.skip_injection)
 
       users.each do |user|
-        create(:user_group_membership, user:, user_group:, role: :admin)
+        create(:user_group_membership, user:, user_group:, role: :admin, skip_injection: evaluator.skip_injection)
       end
     end
   end
 
   factory :user_group_membership, class: "Decidim::UserGroupMembership" do
-    user { create(:user, :confirmed, organization: user_group.organization) }
+    transient do
+      skip_injection { false }
+    end
+    user { create(:user, :confirmed, organization: user_group.organization, skip_injection:) }
     role { :creator }
     user_group
   end
 
   factory :identity, class: "Decidim::Identity" do
+    transient do
+      skip_injection { false }
+    end
     provider { "facebook" }
     sequence(:uid)
     user
@@ -283,6 +338,9 @@ FactoryBot.define do
   end
 
   factory :authorization, class: "Decidim::Authorization" do
+    transient do
+      skip_injection { false }
+    end
     sequence(:name) { |n| "dummy_authorization_#{n}" }
     user
     metadata { {} }
@@ -299,37 +357,42 @@ FactoryBot.define do
 
   factory :authorization_transfer, class: "Decidim::AuthorizationTransfer" do
     transient do
-      organization { create(:organization) }
+      skip_injection { false }
+      organization { create(:organization, skip_injection:) }
     end
 
-    user { create(:user, :confirmed, organization:) }
-    source_user { create(:user, :confirmed, :deleted, organization: user.try(:organization) || organization) }
+    user { create(:user, :confirmed, organization:, skip_injection:) }
+    source_user { create(:user, :confirmed, :deleted, organization: user.try(:organization) || organization, skip_injection:) }
     authorization do
       create(
         :authorization,
-        user: source_user || create(:user, :confirmed, :deleted, organization: user.try(:organization) || organization)
+        user: source_user || create(:user, :confirmed, :deleted, organization: user.try(:organization) || organization, skip_injection:)
       )
     end
 
     trait :transferred do
-      authorization { create(:authorization, user:) }
+      authorization { create(:authorization, user:, skip_injection:) }
     end
   end
 
   factory :authorization_transfer_record, class: "Decidim::AuthorizationTransferRecord" do
     transient do
-      organization { resource.try(:organization) || create(:organization) }
+      skip_injection { false }
+      organization { resource.try(:organization) || create(:organization, skip_injection:) }
     end
 
-    transfer { create(:authorization_transfer, organization:) }
-    resource { create(:dummy_resource) }
+    transfer { create(:authorization_transfer, organization:, skip_injection:) }
+    resource { create(:dummy_resource, skip_injection:) }
   end
 
   factory :static_page, class: "Decidim::StaticPage" do
+    transient do
+      skip_injection { false }
+    end
     slug { generate(:slug) }
-    title { generate_localized_title }
-    content { Decidim::Faker::Localized.wrapped("<p>", "</p>") { generate_localized_title } }
-    organization { build(:organization) }
+    title { generate_localized_title(:static_page_title, skip_injection:) }
+    content { generate_localized_description(:static_page_content, skip_injection:) }
+    organization { build(:organization, skip_injection:) }
     allow_public_access { false }
 
     trait :default do
@@ -345,8 +408,8 @@ FactoryBot.define do
     end
 
     trait :with_topic do
-      after(:create) do |static_page|
-        topic = create(:static_page_topic, organization: static_page.organization)
+      after(:create) do |static_page, evaluator|
+        topic = create(:static_page_topic, organization: static_page.organization, skip_injection: evaluator.skip_injection)
         static_page.topic = topic
         static_page.save
       end
@@ -354,24 +417,33 @@ FactoryBot.define do
   end
 
   factory :static_page_topic, class: "Decidim::StaticPageTopic" do
-    title { generate_localized_title }
-    description { Decidim::Faker::Localized.wrapped("<p>", "</p>") { generate_localized_title } }
+    transient do
+      skip_injection { false }
+    end
+    title { generate_localized_title(:static_page_topic_title, skip_injection:) }
+    description { generate_localized_description(:static_page_topic_description, skip_injection:) }
     organization
   end
 
   factory :attachment_collection, class: "Decidim::AttachmentCollection" do
-    name { generate_localized_title }
-    description { generate_localized_title }
+    transient do
+      skip_injection { false }
+    end
+    name { generate_localized_title(:attachment_collection_name, skip_injection:) }
+    description { generate_localized_title(:attachment_collection_description, skip_injection:) }
     weight { Faker::Number.number(digits: 1) }
 
     association :collection_for, factory: :participatory_process
   end
 
   factory :attachment, class: "Decidim::Attachment" do
-    title { generate_localized_title }
-    description { Decidim::Faker::Localized.wrapped("<p>", "</p>") { generate_localized_title } }
+    transient do
+      skip_injection { false }
+    end
+    title { generate_localized_title(:attachment_title, skip_injection:) }
+    description { generate_localized_title(:attachment_description, skip_injection:) }
     weight { Faker::Number.number(digits: 1) }
-    attached_to { build(:participatory_process) }
+    attached_to { build(:participatory_process, skip_injection:) }
     content_type { "image/jpeg" }
     file { Decidim::Dev.test_file("city.jpeg", "image/jpeg") } # Keep after attached_to
     file_size { 108_908 }
@@ -389,23 +461,24 @@ FactoryBot.define do
 
   factory :component, class: "Decidim::Component" do
     transient do
-      organization { create(:organization) }
+      skip_injection { false }
+      organization { create(:organization, skip_injection:) }
     end
 
-    name { generate_localized_title }
-    participatory_space { create(:participatory_process, organization:) }
+    name { generate_localized_title(:component_name, skip_injection:) }
+    participatory_space { create(:participatory_process, organization:, skip_injection:) }
     manifest_name { "dummy" }
     published_at { Time.current }
     settings do
       {
-        dummy_global_translatable_text: generate_localized_title,
+        dummy_global_translatable_text: generate_localized_title(:dummy_global_translatable_text, skip_injection:),
         comments_max_length: participatory_space.organization.comments_max_length || organization.comments_max_length
       }
     end
 
     default_step_settings do
       {
-        dummy_step_translatable_text: generate_localized_title
+        dummy_step_translatable_text: generate_localized_title(:dummy_step_translatable_text, skip_injection:)
       }
     end
 
@@ -443,7 +516,8 @@ FactoryBot.define do
         create(:participatory_process_step,
                active: true,
                end_date: 1.month.from_now,
-               participatory_process: participatory_space)
+               participatory_process: participatory_space,
+               skip_injection:)
         participatory_space.reload
         participatory_space.steps.reload
       end
@@ -486,20 +560,29 @@ FactoryBot.define do
   end
 
   factory :scope_type, class: "Decidim::ScopeType" do
-    name { Decidim::Faker::Localized.word }
+    transient do
+      skip_injection { false }
+    end
+    name { generate_localized_word(:scope_type_name, skip_injection:) }
     plural { Decidim::Faker::Localized.literal(name.values.first.pluralize) }
     organization
   end
 
   factory :scope, class: "Decidim::Scope" do
+    transient do
+      skip_injection { false }
+    end
     name { Decidim::Faker::Localized.literal(generate(:scope_name)) }
     code { generate(:scope_code) }
-    scope_type { create(:scope_type, organization:) }
-    organization { parent ? parent.organization : build(:organization) }
+    scope_type { create(:scope_type, organization:, skip_injection:) }
+    organization { parent ? parent.organization : build(:organization, skip_injection:) }
   end
 
   factory :subscope, parent: :scope do
-    parent { build(:scope) }
+    transient do
+      skip_injection { false }
+    end
+    parent { build(:scope, skip_injection:) }
 
     before(:create) do |object|
       object.parent.save unless object.parent.persisted?
@@ -507,36 +590,49 @@ FactoryBot.define do
   end
 
   factory :area_type, class: "Decidim::AreaType" do
-    name { Decidim::Faker::Localized.word }
+    transient do
+      skip_injection { false }
+    end
+    name { generate_localized_word(:area_type_name, skip_injection:) }
     plural { Decidim::Faker::Localized.literal(name.values.first.pluralize) }
     organization
   end
 
   factory :area, class: "Decidim::Area" do
+    transient do
+      skip_injection { false }
+    end
     name { Decidim::Faker::Localized.literal(generate(:area_name)) }
     organization
   end
 
   factory :coauthorship, class: "Decidim::Coauthorship" do
-    coauthorable { create(:dummy_resource) }
+    transient do
+      skip_injection { false }
+    end
+    coauthorable { create(:dummy_resource, skip_injection:) }
     transient do
       organization { coauthorable.component.participatory_space.organization }
     end
-    author { create(:user, :confirmed, organization:) }
+    author { create(:user, :confirmed, organization:, skip_injection:) }
   end
 
   factory :resource_link, class: "Decidim::ResourceLink" do
+    transient do
+      skip_injection { false }
+    end
     name { generate(:slug) }
-    to { build(:dummy_resource) }
-    from { build(:dummy_resource, component: to.component) }
+    to { build(:dummy_resource, skip_injection:) }
+    from { build(:dummy_resource, component: to.component, skip_injection:) }
   end
 
   factory :newsletter, class: "Decidim::Newsletter" do
     transient do
-      body { Decidim::Faker::Localized.wrapped("<p>", "</p>") { generate_localized_title } }
+      skip_injection { false }
+      body { generate_localized_description(:newsletter_body, skip_injection:) }
     end
 
-    author { build(:user, :confirmed, organization:) }
+    author { build(:user, :confirmed, organization:, skip_injection:) }
     organization
 
     subject { generate_localized_title }
@@ -548,7 +644,8 @@ FactoryBot.define do
         organization: evaluator.organization,
         scoped_resource_id: newsletter.id,
         manifest_name: "basic_only_text",
-        settings: evaluator.body.transform_keys { |key| "body_#{key}" }
+        settings: evaluator.body.transform_keys { |key| "body_#{key}" },
+        skip_injection: evaluator.skip_injection
       )
     end
 
@@ -558,7 +655,10 @@ FactoryBot.define do
   end
 
   factory :moderation, class: "Decidim::Moderation" do
-    reportable { build(:dummy_resource) }
+    transient do
+      skip_injection { false }
+    end
+    reportable { build(:dummy_resource, skip_injection:) }
     participatory_space { reportable.component.participatory_space }
 
     trait :hidden do
@@ -567,35 +667,47 @@ FactoryBot.define do
   end
 
   factory :report, class: "Decidim::Report" do
+    transient do
+      skip_injection { false }
+    end
     moderation
-    user { build(:user, organization: moderation.reportable.organization) }
+    user { build(:user, organization: moderation.reportable.organization, skip_injection:) }
     reason { "spam" }
   end
 
   factory :impersonation_log, class: "Decidim::ImpersonationLog" do
-    admin { build(:user, :admin) }
-    user { build(:user, :managed, organization: admin.organization) }
+    transient do
+      skip_injection { false }
+    end
+    admin { build(:user, :admin, skip_injection:) }
+    user { build(:user, :managed, organization: admin.organization, skip_injection:) }
     started_at { 10.minutes.ago }
   end
 
   factory :follow, class: "Decidim::Follow" do
+    transient do
+      skip_injection { false }
+    end
     user do
       build(
         :user,
-        organization: followable.try(:organization) || build(:organization)
+        organization: followable.try(:organization) || build(:organization, skip_injection:)
       )
     end
-    followable { build(:dummy_resource) }
+    followable { build(:dummy_resource, skip_injection:) }
   end
 
   factory :notification, class: "Decidim::Notification" do
+    transient do
+      skip_injection { false }
+    end
     user do
       build(
         :user,
-        organization: resource.try(:organization) || build(:organization)
+        organization: resource.try(:organization) || build(:organization, skip_injection:)
       )
     end
-    resource { build(:dummy_resource) }
+    resource { build(:dummy_resource, skip_injection:) }
     event_name { resource.class.name.underscore.tr("/", ".") }
     event_class { "Decidim::Dev::DummyResourceEvent" }
     extra do
@@ -605,16 +717,60 @@ FactoryBot.define do
     end
   end
 
+  factory :conversation, class: "Decidim::Messaging::Conversation" do
+    transient do
+      skip_injection { false }
+    end
+
+    originator { build(:user, skip_injection:) }
+    interlocutors { [build(:user, skip_injection:)] }
+    body { Faker::Lorem.sentence }
+    user
+
+    after(:create) do |object|
+      object.participants ||= [originator + interlocutors].flatten
+    end
+
+    initialize_with { Decidim::Messaging::Conversation.start(originator:, interlocutors:, body:, user:) }
+  end
+
+  factory :message, class: "Decidim::Messaging::Message" do
+    transient do
+      skip_injection { false }
+    end
+
+    body { generate_localized_description(:message_body, skip_injection:) }
+    conversation
+
+    before(:create) do |object|
+      object.sender ||= object.conversation.participants.take
+    end
+  end
+
+  factory :push_notification_message, class: "Decidim::PushNotificationMessage" do
+    transient do
+      skip_injection { false }
+    end
+
+    recipient { build(:user, skip_injection:) }
+    conversation { create(:conversation, skip_injection:) }
+    message { generate_localized_description(:push_notification_message_message, skip_injection:) }
+
+    skip_create
+    initialize_with { new(recipient:, conversation:, message:) }
+  end
+
   factory :action_log, class: "Decidim::ActionLog" do
     transient do
+      skip_injection { false }
       extra_data { {} }
     end
 
     organization { user.organization }
     user
-    participatory_space { build(:participatory_process, organization:) }
-    component { build(:component, participatory_space:) }
-    resource { build(:dummy_resource, component:) }
+    participatory_space { build(:participatory_process, organization:, skip_injection:) }
+    component { build(:component, participatory_space:, skip_injection:) }
+    resource { build(:dummy_resource, component:, skip_injection:) }
     action { "create" }
     visibility { "admin-only" }
     extra do
@@ -640,6 +796,9 @@ FactoryBot.define do
   end
 
   factory :oauth_application, class: "Decidim::OAuthApplication" do
+    transient do
+      skip_injection { false }
+    end
     organization
     sequence(:name) { |n| "OAuth application #{n}" }
     sequence(:organization_name) { |n| "OAuth application owner #{n}" }
@@ -650,8 +809,11 @@ FactoryBot.define do
   end
 
   factory :oauth_access_token, class: "Doorkeeper::AccessToken" do
-    resource_owner_id { create(:user, organization: application.organization).id }
-    application { build(:oauth_application) }
+    transient do
+      skip_injection { false }
+    end
+    resource_owner_id { create(:user, organization: application.organization, skip_injection:).id }
+    application { build(:oauth_application, skip_injection:) }
     token { SecureRandom.hex(32) }
     expires_in { 1.month.from_now }
     created_at { Time.current }
@@ -659,7 +821,10 @@ FactoryBot.define do
   end
 
   factory :searchable_resource, class: "Decidim::SearchableResource" do
-    resource { build(:dummy_resource) }
+    transient do
+      skip_injection { false }
+    end
+    resource { build(:dummy_resource, skip_injection:) }
     resource_id { resource.id }
     resource_type { resource.class.name }
     organization { resource.component.organization }
@@ -671,6 +836,9 @@ FactoryBot.define do
   end
 
   factory :content_block, class: "Decidim::ContentBlock" do
+    transient do
+      skip_injection { false }
+    end
     organization
     scope_name { :homepage }
     manifest_name { :hero }
@@ -684,24 +852,33 @@ FactoryBot.define do
   end
 
   factory :hashtag, class: "Decidim::Hashtag" do
+    transient do
+      skip_injection { false }
+    end
     name { generate(:hashtag_name) }
     organization
   end
 
   factory :metric, class: "Decidim::Metric" do
+    transient do
+      skip_injection { false }
+    end
     organization
     day { Time.zone.today }
     metric_type { "random_metric" }
     cumulative { 2 }
     quantity { 1 }
     category { create(:category) }
-    participatory_space { create(:participatory_process, organization:) }
-    related_object { create(:component, participatory_space:) }
+    participatory_space { create(:participatory_process, organization:, skip_injection:) }
+    related_object { create(:component, participatory_space:, skip_injection:) }
   end
 
   factory :amendment, class: "Decidim::Amendment" do
-    amendable { build(:dummy_resource) }
-    emendation { build(:dummy_resource) }
+    transient do
+      skip_injection { false }
+    end
+    amendable { build(:dummy_resource, skip_injection:) }
+    emendation { build(:dummy_resource, skip_injection:) }
     amender { emendation.try(:creator_author) || emendation.try(:author) }
     state { "evaluating" }
 
@@ -713,29 +890,44 @@ FactoryBot.define do
   end
 
   factory :user_report, class: "Decidim::UserReport" do
+    transient do
+      skip_injection { false }
+    end
     reason { "spam" }
-    moderation { create(:user_moderation, user:) }
+    moderation { create(:user_moderation, user:, skip_injection:) }
     user { build(:user) }
   end
 
   factory :user_moderation, class: "Decidim::UserModeration" do
+    transient do
+      skip_injection { false }
+    end
     user { build(:user) }
   end
 
   factory :endorsement, class: "Decidim::Endorsement" do
-    resource { build(:dummy_resource) }
-    author { resource.try(:creator_author) || resource.try(:author) || build(:user, organization: resource.organization) }
+    transient do
+      skip_injection { false }
+    end
+    resource { build(:dummy_resource, skip_injection:) }
+    author { resource.try(:creator_author) || resource.try(:author) || build(:user, organization: resource.organization, skip_injection:) }
   end
 
   factory :user_group_endorsement, class: "Decidim::Endorsement" do
-    resource { build(:dummy_resource) }
-    author { build(:user, organization: resource.organization) }
-    user_group { create(:user_group, verified_at: Time.current, organization: resource.organization, users: [author]) }
+    transient do
+      skip_injection { false }
+    end
+    resource { build(:dummy_resource, skip_injection:) }
+    author { build(:user, organization: resource.organization, skip_injection:) }
+    user_group { create(:user_group, verified_at: Time.current, organization: resource.organization, users: [author], skip_injection:) }
   end
 
   factory :share_token, class: "Decidim::ShareToken" do
-    token_for { build(:component) }
-    user { build(:user, organization: token_for.organization) }
+    transient do
+      skip_injection { false }
+    end
+    token_for { build(:component, skip_injection:) }
+    user { build(:user, organization: token_for.organization, skip_injection:) }
 
     before(:create) do |object|
       object.organization ||= object.token_for.organization
@@ -752,19 +944,28 @@ FactoryBot.define do
   end
 
   factory :editor_image, class: "Decidim::EditorImage" do
+    transient do
+      skip_injection { false }
+    end
     organization
-    author { create(:user, :admin, :confirmed, organization:) }
+    author { create(:user, :admin, :confirmed, organization:, skip_injection:) }
     file { Decidim::Dev.test_file("city.jpeg", "image/jpeg") }
   end
 
   factory :reminder, class: "Decidim::Reminder" do
-    user { build(:user) }
-    component { build(:dummy_component, organization: user.organization) }
+    transient do
+      skip_injection { false }
+    end
+    user { build(:user, skip_injection:) }
+    component { build(:dummy_component, organization: user.organization, skip_injection:) }
   end
 
   factory :reminder_record, class: "Decidim::ReminderRecord" do
-    reminder { create(:reminder) }
-    remindable { build(:dummy_resource) }
+    transient do
+      skip_injection { false }
+    end
+    reminder { create(:reminder, skip_injection:) }
+    remindable { build(:dummy_resource, skip_injection:) }
 
     Decidim::ReminderRecord::STATES.keys.each do |defined_state|
       trait defined_state do
@@ -774,17 +975,23 @@ FactoryBot.define do
   end
 
   factory :reminder_delivery, class: "Decidim::ReminderDelivery" do
-    reminder { create(:reminder) }
+    transient do
+      skip_injection { false }
+    end
+    reminder { create(:reminder, skip_injection:) }
   end
 
   factory :short_link, class: "Decidim::ShortLink" do
-    target { create(:component, manifest_name: "dummy") }
+    transient do
+      skip_injection { false }
+    end
+    target { create(:component, manifest_name: "dummy", skip_injection:) }
     route_name { nil }
     params { {} }
 
-    before(:create) do |object|
+    before(:create) do |object, evaluator|
       object.organization ||= object.target if object.target.is_a?(Decidim::Organization)
-      object.organization ||= object.target.try(:organization) || create(:organization)
+      object.organization ||= object.target.try(:organization) || create(:organization, skip_injection: evaluator.skip_injection)
       object.identifier ||= Decidim::ShortLink.unique_identifier_within(object.organization)
       object.mounted_engine_name ||=
         if object.target.respond_to?(:participatory_space)