remotipart 1.4.2 → 1.4.3

data/spec/dummy_app/config.ru

@@ -0,0 +1,4 @@
+# This file is used by Rack-based servers to start the application.
+
+require ::File.expand_path('../config/environment', __FILE__)
+run DummyApp::Application

data/spec/dummy_app/config/application.rb

@@ -0,0 +1,18 @@
+require File.expand_path('../boot', __FILE__)
+
+require 'rails/all'
+
+# Require the gems listed in Gemfile, including any gems
+# you've limited to :test, :development, or :production.
+Bundler.require(*Rails.groups)
+
+module DummyApp
+  class Application < Rails::Application
+    # Settings in config/environments/* take precedence over those specified here.
+    # Application configuration should go into files in config/initializers
+    config.assets.paths << Rails.root.join("..", "..", "vendor", "assets", "javascripts")
+    config.active_record.raise_in_transactional_callbacks = true if Rails::VERSION::MAJOR == 4 && Rails::VERSION::MINOR == 2
+    config.active_record.time_zone_aware_types = [:datetime, :time] if Rails::VERSION::MAJOR >= 5
+    config.active_record.sqlite3.represent_boolean_as_integer = true if config.active_record.sqlite3.respond_to?(:represent_boolean_as_integer=) && Rails::VERSION::MAJOR == 5 && Rails::VERSION::MINOR == 2
+  end
+end

data/spec/dummy_app/config/boot.rb

@@ -0,0 +1,3 @@
+ENV['BUNDLE_GEMFILE'] ||= File.expand_path('../../../../gemfiles/rails_5.2.gemfile', __FILE__)
+
+require 'bundler/setup' # Set up gems listed in the Gemfile.

data/spec/dummy_app/config/database.yml

@@ -0,0 +1,7 @@
+development:
+  adapter: sqlite3
+  database: db/development.sqlite3
+
+test:
+  adapter: sqlite3
+  database: ":memory:"

data/spec/dummy_app/config/environment.rb

@@ -0,0 +1,5 @@
+# Load the Rails application.
+require File.expand_path('../application', __FILE__)
+
+# Initialize the Rails application.
+DummyApp::Application.initialize!

data/spec/dummy_app/config/environments/development.rb

@@ -0,0 +1,54 @@
+DummyApp::Application.configure do
+  # Settings specified here will take precedence over those in config/application.rb.
+
+  # In the development environment your application's code is reloaded on
+  # every request. This slows down response time but is perfect for development
+  # since you don't have to restart the web server when you make code changes.
+  config.cache_classes = false
+
+  # Do not eager load code on boot.
+  config.eager_load = false
+
+  # Show full error reports.
+  config.consider_all_requests_local = true
+
+  # Enable/disable caching. By default caching is disabled.
+  if Rails.root.join('tmp/caching-dev.txt').exist?
+    config.action_controller.perform_caching = true
+    config.cache_store = :memory_store
+    config.public_file_server.headers = {'Cache-Control' => 'public, max-age=172800'}
+  else
+    config.action_controller.perform_caching = false
+    config.cache_store = :null_store
+  end
+
+  # Don't care if the mailer can't send.
+  config.action_mailer.raise_delivery_errors = false
+
+  # Print deprecation notices to the Rails logger.
+  config.active_support.deprecation = :log
+
+  # Raise an error on page load if there are pending migrations.
+  config.active_record.migration_error = :page_load
+
+  # Debug mode disables concatenation and preprocessing of assets.
+  # This option may cause significant delays in view rendering with a large
+  # number of complex assets.
+  config.assets.debug = true
+
+  # Asset digests allow you to set far-future HTTP expiration dates on all assets,
+  # yet still be able to expire them through the digest params.
+  config.assets.digest = true
+
+  # Adds additional error checking when serving assets at runtime.
+  # Checks for improperly declared sprockets dependencies.
+  # Raises helpful error messages.
+  config.assets.raise_runtime_errors = true
+
+  # Raises error for missing translations
+  # config.action_view.raise_on_missing_translations = true
+
+  # Use an evented file watcher to asynchronously detect changes in source code,
+  # routes, locales, etc. This feature depends on the listen gem.
+  # config.file_watcher = ActiveSupport::EventedFileUpdateChecker
+end

data/spec/dummy_app/config/environments/test.rb

@@ -0,0 +1,53 @@
+DummyApp::Application.configure do
+  # Settings specified here will take precedence over those in config/application.rb.
+
+  # The test environment is used exclusively to run your application's
+  # test suite. You never need to work with it otherwise. Remember that
+  # your test database is "scratch space" for the test suite and is wiped
+  # and recreated between test runs. Don't rely on the data there!
+  config.cache_classes = true
+
+  # Do not eager load code on boot. This avoids loading your whole application
+  # just for the purpose of running a single test. If you are using a tool that
+  # preloads Rails for running tests, you may have to set it to true.
+  config.eager_load = false
+
+  # Configure public file server for tests with Cache-Control for performance.
+  if config.respond_to?(:public_file_server)
+    config.public_file_server.enabled = true
+    config.public_file_server.headers = {'Cache-Control' => 'public, max-age=3600'}
+  else
+    if Rails::VERSION::MAJOR < 4
+      config.assets.enabled = true
+      config.assets.debug = true
+      config.serve_static_assets = true
+    else
+      config.serve_static_files   = true
+    end
+    config.static_cache_control = 'public, max-age=3600'
+  end
+
+  # Show full error reports and disable caching.
+  config.consider_all_requests_local       = true
+  config.action_controller.perform_caching = false
+
+  # Raise exceptions instead of rendering exception templates.
+  config.action_dispatch.show_exceptions = false
+
+  # Disable request forgery protection in test environment.
+  config.action_controller.allow_forgery_protection = false
+
+  # Tell Action Mailer not to deliver emails to the real world.
+  # The :test delivery method accumulates sent emails in the
+  # ActionMailer::Base.deliveries array.
+  config.action_mailer.delivery_method = :test
+
+  # Randomize the order test cases are executed.
+  config.active_support.test_order = :random
+
+  # Print deprecation notices to the stderr.
+  config.active_support.deprecation = :stderr
+
+  # Raises error for missing translations
+  # config.action_view.raise_on_missing_translations = true
+end

data/spec/dummy_app/config/initializers/secret_token.rb

@@ -0,0 +1,3 @@
+if Rails::VERSION::MAJOR < 4
+  DummyApp::Application.config.secret_token = 'f2338e8b8018053b0b322cd6469d8c0ed06ab0aaf43dd30a1c33a4c55d9c0d6a1c1ad4140049019f85388db3ce1ddbeff597cf07c49c5b22242cecd146f2bd66'
+end

data/spec/dummy_app/config/routes.rb

@@ -0,0 +1,6 @@
+DummyApp::Application.routes.draw do
+  match 'comments' => 'comments#create', :via => [:put]
+  match 'say' => 'comments#say', :via => [:get]
+  resources :comments
+  root :to => "comments#index"
+end

data/spec/dummy_app/config/secrets.yml

@@ -0,0 +1,5 @@
+development:
+  secret_key_base: d059ae03480564f4e9dcb7c96b901e5803037b0e09fd53e96343dff0d18dc54390a2f07b99c231eacb1d0cc6b74b90676fec4786afaf0f2e7f69b971ab2f9600
+
+test:
+  secret_key_base: e5e0e4811c8cfc047799cf3e82d1626adbf02fa7a3530b4bdd39cc17e1098d328f4da6ada090ec01449b5c92662bcec92cfb13b4c3c4c4bb3fac5a303e91c356

data/spec/dummy_app/db/migrate/20110209210252_create_comments.rb

@@ -0,0 +1,14 @@
+class CreateComments < ActiveRecord::Migration
+  def self.up
+    create_table :comments do |t|
+      t.string :subject
+      t.text :body
+
+      t.timestamps
+    end
+  end
+
+  def self.down
+    drop_table :comments
+  end
+end

data/spec/dummy_app/db/migrate/20110209210315_add_attachment_to_comment.rb

@@ -0,0 +1,15 @@
+class AddAttachmentToComment < ActiveRecord::Migration
+  def self.up
+    add_column :comments, :attachment_file_name,    :string
+    add_column :comments, :attachment_content_type, :string
+    add_column :comments, :attachment_file_size,    :integer
+    add_column :comments, :attachment_updated_at,   :datetime
+  end
+
+  def self.down
+    remove_column :comments, :attachment_file_name
+    remove_column :comments, :attachment_content_type
+    remove_column :comments, :attachment_file_size
+    remove_column :comments, :attachment_updated_at
+  end
+end

data/spec/dummy_app/db/migrate/20110714205346_add_other_attachment_to_comment.rb

@@ -0,0 +1,8 @@
+class AddOtherAttachmentToComment < ActiveRecord::Migration
+  def change
+    add_column :comments, :other_attachment_file_name,    :string
+    add_column :comments, :other_attachment_content_type, :string
+    add_column :comments, :other_attachment_file_size,    :integer
+    add_column :comments, :other_attachment_updated_at,   :datetime
+  end
+end

data/spec/dummy_app/db/schema.rb

@@ -0,0 +1,31 @@
+# encoding: UTF-8
+# This file is auto-generated from the current state of the database. Instead
+# of editing this file, please use the migrations feature of Active Record to
+# incrementally modify your database, and then regenerate this schema definition.
+#
+# Note that this schema.rb definition is the authoritative source for your
+# database schema. If you need to create the application database on another
+# system, you should be using db:schema:load, not running all the migrations
+# from scratch. The latter is a flawed and unsustainable approach (the more migrations
+# you'll amass, the slower it'll run and the greater likelihood for issues).
+#
+# It's strongly recommended to check this file into your version control system.
+
+ActiveRecord::Schema.define(:version => 20110714205346) do
+
+  create_table "comments", :force => true do |t|
+    t.string   "subject"
+    t.text     "body"
+    t.datetime "created_at"
+    t.datetime "updated_at"
+    t.string   "attachment_file_name"
+    t.string   "attachment_content_type"
+    t.integer  "attachment_file_size"
+    t.datetime "attachment_updated_at"
+    t.string   "other_attachment_file_name"
+    t.string   "other_attachment_content_type"
+    t.integer  "other_attachment_file_size"
+    t.datetime "other_attachment_updated_at"
+  end
+
+end

data/spec/dummy_app/db/seeds.rb

@@ -0,0 +1,7 @@
+# This file should contain all the record creation needed to seed the database with its default values.
+# The data can then be loaded with the rake db:seed (or created alongside the db with db:setup).
+#
+# Examples:
+#
+#   cities = City.create([{ :name => 'Chicago' }, { :name => 'Copenhagen' }])
+#   Mayor.create(:name => 'Daley', :city => cities.first)

data/spec/features/comments_spec.rb

@@ -0,0 +1,414 @@
+require 'spec_helper'
+
+describe 'comments', type: :feature do
+  it 'creates a new comment', js: true do
+    visit root_path
+    click_link 'New Comment'
+
+    # New Comment link should disappear
+    expect(page).to have_no_link('New Comment')
+    # Comment form should appear
+    expect(page).to have_field('comment_subject')
+    expect(page).to have_field('comment_body')
+    expect(page).to have_no_field('comment_file')
+
+    # Filling in form and submitting
+    comment_subject = 'A new comment!'
+    comment_body = 'Woo, this is my comment, dude.'
+    fill_in 'comment_subject', with: comment_subject
+    fill_in 'comment_body', with: comment_body
+    click_button 'Create Comment'
+
+    # Comment should appear in the comments table
+    within '#comments' do
+      expect(page).to have_content(comment_subject)
+      expect(page).to have_content(comment_body)
+    end
+    # Form should clear
+    expect(page).to have_field('comment_subject', with: '')
+    expect(page).to have_field('comment_body', with: '')
+    # ...and be replaced by link again
+    expect(page).to have_link('Cancel')
+  end
+
+  it "cancels creating a comment", js: true do
+    visit root_path
+    click_link 'New Comment'
+
+    expect(page).to have_field('comment_subject')
+    expect(page).to have_link('Cancel')
+    click_link 'Cancel'
+
+    # Form should disappear
+    expect(page).to have_no_field('comment_subject')
+    expect(page).to have_link('New Comment')
+  end
+
+  it "deletes a comment", js: true do
+    Comment.create(subject: 'The Great Yogurt', body: 'The Schwarz is strong with this one.')
+    visit root_path
+
+    within '#comments' do
+      expect(page).to have_content('The Great Yogurt')
+      accept_js_confirm do
+        click_link 'Destroy'
+      end
+
+      expect(page).to have_no_content('The Great Yogurt')
+    end
+  end
+
+  it "uploads a file", js: true do
+    visit root_path
+    click_link 'New Comment with Attachment'
+
+    expect(page).to have_field('comment_subject')
+    expect(page).to have_field('comment_body')
+    expect(page).to have_field('comment_attachment')
+    expect(page).to have_field('comment_other_attachment')
+
+    comment_subject = 'Newby'
+    comment_body = 'Woot, a file!'
+    fill_in 'comment_subject', with: comment_subject
+    fill_in 'comment_body', with: comment_body
+
+    # Attach file
+    file_path = File.join(fixture_path, 'qr.jpg')
+    other_file_path = File.join(fixture_path, 'hi.txt')
+    attach_file 'comment_attachment', file_path
+    attach_file 'comment_other_attachment', other_file_path
+
+    page_should_not_redirect do
+      click_button 'Create Comment'
+    end
+
+    within '#comments' do
+      expect(page).to have_selector("td", text: comment_subject)
+      expect(page).to have_selector("td", text: comment_body)
+      expect(page).to have_selector("a", text: File.basename(file_path))
+      expect(page).to have_selector("a", text: File.basename(other_file_path))
+    end
+  end
+
+  it "Disables submit button while submitting", js: true do
+    visit root_path
+
+    click_link 'New Comment'
+    # Needed to make test wait for above to finish
+    form = find('form')
+
+    button = find_button('Create Comment')
+    page.execute_script(%q{$('form').append('<input name="pause" type="hidden" value=1 />');})
+
+    fill_in 'comment_subject', with: 'Hi'
+    fill_in 'comment_body', with: 'there'
+    click_button 'Create Comment'
+
+    expect(button[:disabled]).to be true
+    expect(button.value).to eq "Submitting..."
+
+    sleep 1.5
+
+    expect(button[:disabled]).to be false
+    expect(button.value).to eq "Create Comment"
+  end
+
+  it "triggers ajax:remotipartSubmit event hook", js: true do
+    visit root_path
+    page.execute_script("$(document).delegate('form', 'ajax:remotipartSubmit', function() { $('#comments').after('remotipart!'); });")
+
+    click_link 'New Comment with Attachment'
+
+    fill_in 'comment_subject', with: 'Hi'
+    fill_in 'comment_body', with: 'there'
+    attach_file 'comment_attachment', File.join(fixture_path, 'qr.jpg')
+    click_button 'Create Comment'
+
+    expect(page).to have_content('remotipart!')
+  end
+
+  it "allows remotipart submission to be cancelable via event hook", js: true do
+    visit root_path
+    page.execute_script("$(document).delegate('form', 'ajax:remotipartSubmit', function() { $('#comments').after('remotipart!'); return false; });")
+
+    click_link 'New Comment with Attachment'
+
+    file_path = File.join(fixture_path, 'qr.jpg')
+    fill_in 'comment_subject', with: 'Hi'
+    fill_in 'comment_body', with: 'there'
+    attach_file 'comment_attachment', file_path
+    click_button 'Create Comment'
+
+    expect(page).to have_content('remotipart!')
+
+    within '#comments' do
+      expect(page).to have_no_content('Hi')
+      expect(page).to have_no_content('there')
+      expect(page).to have_no_content(File.basename(file_path))
+    end
+  end
+
+  it "allows custom data-type on form", js: true do
+    visit root_path
+    page.execute_script("$(document).delegate('form', 'ajax:success', function(evt, data, status, xhr) { $('#comments').after(xhr.responseText); });")
+
+    click_link 'New Comment with Attachment'
+
+    # Needed to make test wait for above to finish
+    form = find('form')
+    page.execute_script("$('form').attr('data-type', 'html');")
+
+    file_path = File.join(fixture_path, 'qr.jpg')
+    fill_in 'comment_subject', with: 'Hi'
+    fill_in 'comment_body', with: 'there'
+    attach_file 'comment_attachment', file_path
+    click_button 'Create Comment'
+
+    expect(page).to have_content('HTML response')
+  end
+
+  it "allows users to use ajax response data safely", js: true do
+    visit root_path
+    page.execute_script("$(document).delegate('form', 'ajax:success', function(evt, data, status, xhr) { $('#comments').after(data); });")
+
+    click_link 'New Comment with Attachment'
+
+    # Needed to make test wait for above to finish
+    form = find('form')
+    page.execute_script("$('form').attr('data-type', 'html');")
+
+    file_path = File.join(fixture_path, 'qr.jpg')
+    fill_in 'comment_subject', with: 'Hi'
+    fill_in 'comment_body', with: 'there'
+    attach_file 'comment_attachment', file_path
+    click_button 'Create Comment'
+
+    expect(page).to have_content('HTML response')
+  end
+
+  it "escapes html response content properly", js: true do
+    visit root_path
+    page.execute_script("$(document).delegate('form', 'ajax:success', function(evt, data, status, xhr) { $('#comments').after(xhr.responseText); });")
+
+    click_link 'New Comment with Attachment'
+
+    # Needed to make test wait for above to finish
+    form = find('form')
+    page.execute_script("$('form').attr('data-type', 'html');")
+    page.execute_script("$('form').append('<input type=\"hidden\" name=\"template\" value=\"escape\" />');")
+
+    file_path = File.join(fixture_path, 'qr.jpg')
+    fill_in 'comment_subject', with: 'Hi'
+    fill_in 'comment_body', with: 'there'
+    attach_file 'comment_attachment', file_path
+    click_button 'Create Comment'
+
+    expect(find('input[name="quote"]').value).to eq '"'
+  end
+
+  it "returns the correct response status", js: true do
+    visit root_path
+
+    click_link 'New Comment with Attachment'
+    # Needed to make test wait for above to finish
+    input = find('#comment_subject')
+    page.execute_script("$('#comment_subject').removeAttr('required');")
+
+    file_path = File.join(fixture_path, 'qr.jpg')
+    fill_in 'comment_body', with: 'there'
+    attach_file 'comment_attachment', file_path
+    click_button 'Create Comment'
+
+    #within '#error_explanation' do
+    #  expect(page).to have_content "Subject can't be blank"
+    #end
+    expect(page).to have_content "Error status code: 422"
+    expect(page).to have_content "Error status message: Unprocessable Entity"
+  end
+
+  it "passes the method as _method parameter (rails convention)", js: true do
+    visit root_path
+
+    click_link 'New Comment with Attachment'
+    sleep 0.5
+    page.execute_script(%q{$('form').append('<input name="_method" type="hidden" value="put" />');})
+
+    file_path = File.join(fixture_path, 'qr.jpg')
+    fill_in 'comment_subject', with: 'Hi'
+    fill_in 'comment_body', with: 'there'
+    attach_file 'comment_attachment', file_path
+    click_button 'Create Comment'
+
+    expect(page).to have_content 'PUT request!'
+  end
+
+  it "does not submit via remotipart unless file is present", js: true do
+    visit root_path
+    page.execute_script("$(document).delegate('form', 'ajax:remotipartSubmit', function() { $('#comments').after('remotipart!'); });")
+
+    click_link 'New Comment with Attachment'
+
+    fill_in 'comment_subject', with: 'Hi'
+    fill_in 'comment_body', with: 'there'
+    click_button 'Create Comment'
+
+    expect(page).to have_no_content('remotipart!')
+  end
+
+  it "fires all the ajax callbacks on the form", js: true do
+    visit root_path
+    click_link 'New Comment with Attachment'
+
+    # Needed to make test wait for above to finish
+    form = find('form')
+
+    page.execute_script("$('form').bind('ajax:beforeSend', function() { $('#comments').after('thebefore'); });")
+    page.execute_script("$(document).delegate('form', 'ajax:success', function() { $('#comments').after('success'); });")
+    page.execute_script("$(document).delegate('form', 'ajax:complete', function() { $('#comments').after('complete'); });")
+
+    file_path = File.join(fixture_path, 'qr.jpg')
+    fill_in 'comment_subject', with: 'Hi'
+    fill_in 'comment_body', with: 'there'
+    attach_file 'comment_attachment', file_path
+    click_button 'Create Comment'
+
+    expect(page).to have_content('before')
+    expect(page).to have_content('success')
+    expect(page).to have_content('complete')
+  end
+
+  it "fires the ajax callbacks for json data-type with remotipart", js: true do
+    visit root_path
+    click_link 'New Comment with Attachment'
+
+    # Needed to make test wait for above to finish
+    form = find('form')
+
+    page.execute_script("$('form').data('type', 'json');")
+
+    page.execute_script("$('form').bind('ajax:beforeSend', function() { $('#comments').after('thebefore'); });")
+    page.execute_script("$(document).delegate('form', 'ajax:success', function() { $('#comments').after('success'); });")
+    page.execute_script("$(document).delegate('form', 'ajax:complete', function() { $('#comments').after('complete'); });")
+
+    file_path = File.join(fixture_path, 'qr.jpg')
+    fill_in 'comment_subject', with: 'Hi'
+    fill_in 'comment_body', with: 'there'
+    attach_file 'comment_attachment', file_path
+    click_button 'Create Comment'
+
+    expect(page).to have_content('before')
+    expect(page).to have_content('success')
+    expect(page).to have_content('complete')
+  end
+
+  it "only fires the beforeSend hook once", js: true do
+    visit root_path
+    click_link 'New Comment with Attachment'
+
+    # Needed to make test wait for above to finish
+    form = find('form')
+
+    page.execute_script("$('form').bind('ajax:beforeSend', function() { $('#comments').after('<div class=\"ajax\">ajax!</div>'); });")
+
+    file_path = File.join(fixture_path, 'qr.jpg')
+    fill_in 'comment_subject', with: 'Hi'
+    fill_in 'comment_body', with: 'there'
+    attach_file 'comment_attachment', file_path
+    click_button 'Create Comment'
+
+    expect(page).to have_css("div.ajax", :count => 1)
+  end
+
+  it "cleans up after itself when uploading files", js: true do
+    visit root_path
+    page.execute_script("$(document).delegate('form', 'ajax:remotipartSubmit', function(evt, xhr, data) { if ($(this).data('remotipartSubmitted')) { $('#comments').after('remotipart before!'); } });")
+
+    click_link 'New Comment with Attachment'
+    page.execute_script("$('form').attr('data-type', 'html');")
+
+    file_path = File.join(fixture_path, 'qr.jpg')
+    fill_in 'comment_subject', with: 'Hi'
+    fill_in 'comment_body', with: 'there'
+    attach_file 'comment_attachment', file_path
+    click_button 'Create Comment'
+
+    expect(page).to have_content('remotipart before!')
+
+    page.execute_script("if (!$('form').data('remotipartSubmitted')) { $('#comments').after('no remotipart after!'); } ")
+    expect(page).to have_content('no remotipart after!')
+  end
+
+  it "submits via remotipart when a file upload is present", js: true do
+    visit root_path
+    page.execute_script("$(document).delegate('form', 'ajax:remotipartSubmit', function(evt, xhr, data) { $('#comments').after('<div class=\"remotipart\">remotipart!</div>'); });")
+
+    click_link 'New Comment with Attachment'
+    page.execute_script("$('form').attr('data-type', 'html');")
+
+    file_path = File.join(fixture_path, 'qr.jpg')
+    fill_in 'comment_subject', with: 'Hi'
+    fill_in 'comment_body', with: 'there'
+    attach_file 'comment_attachment', file_path
+    click_button 'Create Comment'
+
+    expect(page).to have_css("div.remotipart")
+  end
+
+  it "does not submit via remotipart when a file upload is not present", js: true do
+    visit root_path
+    page.execute_script("$(document).delegate('form', 'ajax:remotipartSubmit', function(evt, xhr, data) { $('#comments').after('<div class=\"remotipart\">remotipart!</div>'); });")
+
+    click_link 'New Comment with Attachment'
+    page.execute_script("$('form').attr('data-type', 'html');")
+
+    fill_in 'comment_subject', with: 'Hi'
+    fill_in 'comment_body', with: 'there'
+    click_button 'Create Comment'
+
+    expect(page).not_to have_css("div.remotipart")
+  end
+
+  it "Disables submit button while submitting with remotipart", js: true do
+    visit root_path
+
+    click_link 'New Comment with Attachment'
+
+    button = find_button('Create Comment')
+    # clicking 'Create Comment' button causes capybara evaluation freeze until request ends, so perform check by JavaScript
+    page.execute_script("$('form').bind('ajax:remotipartComplete', function(data) { window.commitButtonDisabled = $('input[name=\"commit\"]').is(':disabled'); window.commitButtonValue = $('input[name=\"commit\"]').val(); });")
+
+    file_path = File.join(fixture_path, 'qr.jpg')
+    fill_in 'comment_subject', with: 'Hi'
+    fill_in 'comment_body', with: 'there'
+    attach_file 'comment_attachment', file_path
+    click_button 'Create Comment'
+
+    expect(page.evaluate_script("window.commitButtonDisabled")).to be true
+    expect(page.evaluate_script("window.commitButtonValue")).to eq "Submitting..."
+
+    expect(button[:disabled]).to be false
+    expect(button.value).to eq "Create Comment"
+  end
+
+  it "submits the clicked button with the form like non-file remote form", js: true do
+    visit root_path
+    click_link 'New Comment with Attachment'
+
+    form = find('form')
+    page.execute_script("$('form').bind('ajax:remotipartSubmit', function(e, xhr, settings) { $('#comments').after('<div class=\"params\">' + $.param(settings.data) + '</div>'); });")
+
+    file_path = File.join(fixture_path, 'qr.jpg')
+    fill_in 'comment_subject', with: 'Hi'
+    fill_in 'comment_body', with: 'there'
+    attach_file 'comment_attachment', file_path
+    click_button 'Create Comment'
+
+    expect(page).to have_content('commit=')
+  end
+
+  it "doesn't allow XSS via script injection for text responses", js: true do
+    visit "/say?message=%3C/textarea%3E%3Csvg/onload=alert(domain)%3E&remotipart_submitted=x"
+    expect(page).to have_selector("textarea")
+    expect(find("textarea").value).to eq('</textarea><svg/onload=alert(domain)>')
+  end
+end