create-nextblock 0.2.77 → 0.8.0

package/templates/nextblock-template/app/layout.tsx

@@ -1,30 +1,233 @@
 import '@nextblock-cms/ui/styles/globals.css';
-import '@nextblock-cms/editor/styles/editor.css';
 // app/layout.tsx
-import { EnvVarWarning } from "@/components/env-var-warning";
-import { SandboxBanner } from "@/components/SandboxBanner";
-import { Analytics } from "@vercel/analytics/next"
-import { ThemeSwitcher } from '@/components/theme-switcher';
+
 import type { Metadata } from 'next';
-import Header from "@/components/Header";
-import FooterNavigation from "@/components/FooterNavigation";
+import Script from 'next/script';
 import { Providers } from './providers';
+import { DeferredCartDrawer } from '../components/DeferredCartDrawer';
+import { CURRENCY_COOKIE_NAME } from '@nextblock-cms/ecommerce/currency-constants';
 import { ToasterProvider } from './ToasterProvider';
-import { createClient as createSupabaseServerClient, getProfileWithRoleServerSide } from '@nextblock-cms/db/server';
+import { AppShell } from '../components/AppShell';
+import { ConsentGatedAnalytics } from '../components/privacy/ConsentGatedAnalytics';
+import { ConsentBanner } from '../components/privacy/ConsentBanner';
+import { getPrivacySettings } from '../lib/privacy/settings';
+import { DEFAULT_PRIVACY_SETTINGS } from '../lib/privacy/types';
+import { DeferredSpeedInsights } from '../components/DeferredSpeedInsights';
+import { DeferredVisualEditing } from '../components/visual-editing/DeferredVisualEditing';
+import {
+  createClient as createSupabaseServerClient,
+  getProfileWithRoleServerSide,
+} from '@nextblock-cms/db/server';
 import { getActiveLanguagesServerSide } from '@nextblock-cms/db/server';
-import { getNavigationMenu } from '@/app/cms/navigation/actions';
-import { getActiveLogo } from '@/app/cms/settings/logos/actions';
-import { getCopyrightSettings } from '@/app/cms/settings/copyright/actions';
-import { getTranslations } from '@/app/cms/settings/extra-translations/actions';
 import type { Database } from '@nextblock-cms/db';
-import { headers, cookies } from 'next/headers';
+import { headers, cookies, draftMode } from 'next/headers';
+import { verifyPackageOnline } from '@nextblock-cms/db/server';
+import { unstable_cache } from 'next/cache';
+import { createStaticSupabaseClient, getSiteSettings } from './lib/site-settings';
+import { DEFAULT_OG_IMAGE } from './lib/seo';
 
-const defaultUrl = process.env.NEXT_PUBLIC_URL || "http://localhost:3000";
+const defaultUrl = process.env.NEXT_PUBLIC_URL || 'http://localhost:3000';
 
 const DEFAULT_LOCALE_FOR_LAYOUT = 'en';
+const PUBLIC_LAYOUT_REVALIDATE_SECONDS = 60;
+const PUBLIC_LAYOUT_LOGO_CACHE_TAG = 'public-layout-logo';
+const TRUSTED_TYPES_SCRIPT_STRATEGY =
+  process.env.NODE_ENV === 'production' ? 'beforeInteractive' : 'afterInteractive';
+const TRUSTED_TYPES_BOOTSTRAP = `
+(function () {
+  if (!window.trustedTypes || window.__nextblockTrustedTypesPolicy) return;
+  try {
+    window.__nextblockTrustedTypesPolicy = window.trustedTypes.createPolicy('default', {
+      createHTML: function (value) { return value; },
+      createScript: function (value) { return value; },
+      createScriptURL: function (value) { return value; }
+    });
+  } catch (error) {
+    window.__nextblockTrustedTypesPolicy = true;
+  }
+})();
+`;
 
 type Language = Database['public']['Tables']['languages']['Row'];
+type StoreCurrency = Database['public']['Tables']['currencies']['Row'];
 type NavigationItem = Database['public']['Tables']['navigation_items']['Row'];
+type MenuLocation = Database['public']['Enums']['menu_location'];
+type HeaderLogo = Database['public']['Tables']['logos']['Row'] & {
+  media: (Database['public']['Tables']['media']['Row'] & { alt_text: string | null }) | null;
+};
+
+const getCachedLanguages = unstable_cache(
+  async (): Promise<Language[]> => {
+    const supabase = createStaticSupabaseClient();
+    const { data, error } = await supabase
+      .from('languages')
+      .select('id, code, name, is_default, is_active, created_at, updated_at')
+      .order('name', { ascending: true });
+
+    if (error) {
+      console.error('Error fetching cached languages:', error.message);
+      return [];
+    }
+
+    return data || [];
+  },
+  ['public-layout-languages'],
+  { revalidate: PUBLIC_LAYOUT_REVALIDATE_SECONDS }
+);
+
+const getCachedCopyrightSettings = unstable_cache(
+  async (): Promise<Record<string, string>> => {
+    const supabase = createStaticSupabaseClient();
+    const { data, error } = await supabase
+      .from('site_settings')
+      .select('value')
+      .eq('key', 'footer_copyright')
+      .single();
+
+    if (error || !data) {
+      console.error('Error fetching cached copyright settings:', error);
+      return { en: '(c) {year} Nextblock CMS. All rights reserved.' };
+    }
+
+    return data.value as Record<string, string>;
+  },
+  ['public-layout-copyright'],
+  { revalidate: PUBLIC_LAYOUT_REVALIDATE_SECONDS }
+);
+
+const getCachedGlobalCss = unstable_cache(
+  async (): Promise<string> => {
+    const supabase = createStaticSupabaseClient();
+    const { data, error } = await supabase
+      .from('site_settings')
+      .select('value')
+      .eq('key', 'global_css')
+      .single();
+
+    if (error || !data || !data.value) {
+      return '';
+    }
+    if (typeof data.value === 'string') {
+        if (data.value.startsWith('"') && data.value.endsWith('"')) {
+            try { return JSON.parse(data.value); } catch { return data.value; }
+        }
+        return data.value;
+    }
+    return String(data.value);
+  },
+  ['public-layout-global-css'],
+  { revalidate: PUBLIC_LAYOUT_REVALIDATE_SECONDS }
+);
+
+const getCachedTranslations = unstable_cache(
+  async () => {
+    const supabase = createStaticSupabaseClient();
+    const { data, error } = await supabase
+      .from('translations')
+      .select('key, translations, created_at, updated_at')
+      .order('key');
+
+    if (error) {
+      console.error('Error fetching cached translations:', error.message);
+      return [];
+    }
+
+    return data || [];
+  },
+  ['public-layout-translations'],
+  {
+    revalidate: PUBLIC_LAYOUT_REVALIDATE_SECONDS,
+    tags: ['public-layout-translations'],
+  }
+);
+
+const getCachedCurrencies = unstable_cache(
+  async (): Promise<StoreCurrency[]> => {
+    const supabase = createStaticSupabaseClient();
+    const { data, error } = await supabase
+      .from('currencies')
+      .select(
+        'id, code, symbol, exchange_rate, is_default, is_active, auto_sync_product_prices, auto_update_exchange_rate, exchange_rate_source, exchange_rate_updated_at, rounding_mode, rounding_increment, rounding_charm_amount, created_at, updated_at'
+      )
+      .eq('is_active', true)
+      .order('code', { ascending: true });
+
+    if (error) {
+      console.error('Error fetching cached currencies:', error.message);
+      return [];
+    }
+
+    return data || [];
+  },
+  ['public-layout-currencies'],
+  { revalidate: PUBLIC_LAYOUT_REVALIDATE_SECONDS }
+);
+
+const getCachedNavigationMenu = unstable_cache(
+  async (menuKey: MenuLocation, languageCode: string): Promise<NavigationItem[]> => {
+    const supabase = createStaticSupabaseClient();
+
+    const { data: language, error: langError } = await supabase
+      .from('languages')
+      .select('id')
+      .eq('code', languageCode)
+      .single();
+
+    if (langError || !language) {
+      console.error(
+        `Error fetching cached navigation language ${languageCode} for ${menuKey}:`,
+        langError
+      );
+      return [];
+    }
+
+    const { data: items, error: itemsError } = await supabase
+      .from('navigation_items')
+      .select('*, pages(slug)')
+      .eq('menu_key', menuKey)
+      .eq('language_id', language.id)
+      .order('parent_id', { nullsFirst: true })
+      .order('order');
+
+    if (itemsError) {
+      console.error(
+        `Error fetching cached navigation items for ${menuKey} (${languageCode}):`,
+        itemsError
+      );
+      return [];
+    }
+
+    return (items || []).map((item) => ({ ...item, id: Number(item.id) }));
+  },
+  ['public-layout-navigation'],
+  { revalidate: PUBLIC_LAYOUT_REVALIDATE_SECONDS }
+);
+
+const getCachedActiveLogo = unstable_cache(
+  async (): Promise<HeaderLogo | null> => {
+    const supabase = createStaticSupabaseClient();
+    const { data, error } = await supabase
+      .from('logos')
+      .select(
+        `
+        *,
+        media:media_id (*)
+      `
+      )
+      .order('created_at', { ascending: false })
+      .limit(1)
+      .maybeSingle();
+
+    if (error) {
+      console.error('Error fetching cached active logo:', error.message);
+      return null;
+    }
+
+    return data as HeaderLogo | null;
+  },
+  ['public-layout-logo'],
+  { revalidate: PUBLIC_LAYOUT_REVALIDATE_SECONDS, tags: [PUBLIC_LAYOUT_LOGO_CACHE_TAG] }
+);
 
 async function loadLayoutData() {
   const supabase = createSupabaseServerClient();
@@ -35,6 +238,7 @@ async function loadLayoutData() {
 
   const xUserLocaleHeader = headerList.get('x-user-locale');
   const nextUserLocaleCookie = cookieStore.get('NEXT_USER_LOCALE')?.value;
+  const serverCurrencyCode = cookieStore.get(CURRENCY_COOKIE_NAME)?.value ?? null;
 
   let serverDeterminedLocale =
     xUserLocaleHeader ??
@@ -42,19 +246,31 @@ async function loadLayoutData() {
     DEFAULT_LOCALE_FOR_LAYOUT;
 
   const [
-    { data: { user } },
+    {
+      data: { user },
+    },
     availableLanguagesResult,
+    currenciesResult,
     copyrightSettingsResult,
+    globalCssResult,
     translationsResult,
+    isEcommerceActive,
+    privacySettings,
   ] = await Promise.all([
     supabase.auth.getUser(),
-    getActiveLanguagesServerSide().catch(() => []),
-    getCopyrightSettings().catch(() => ({ en: '© {year} Nextblock CMS. All rights reserved.' })),
-    getTranslations().catch(() => []),
+    getCachedLanguages().catch(() => getActiveLanguagesServerSide().catch(() => [])),
+    getCachedCurrencies().catch(() => []),
+    getCachedCopyrightSettings().catch(() => ({
+      en: '(c) {year} Nextblock CMS. All rights reserved.',
+    })),
+    getCachedGlobalCss().catch(() => ''),
+    getCachedTranslations().catch(() => []),
+    verifyPackageOnline('ecommerce').catch(() => false),
+    getPrivacySettings().catch(() => DEFAULT_PRIVACY_SETTINGS),
   ]);
 
-  const profile = user ? await getProfileWithRoleServerSide(user.id) : null;
   const availableLanguages: Language[] = availableLanguagesResult;
+  const availableCurrencies: StoreCurrency[] = currenciesResult;
   const defaultLanguage: Language | null =
     availableLanguages.find((lang) => lang.is_default) ?? availableLanguages[0] ?? null;
 
@@ -66,28 +282,34 @@ async function loadLayoutData() {
 
   const copyrightSettings = copyrightSettingsResult as Record<string, string>;
   const fallbackTemplate =
-    copyrightSettings['en'] ?? '© {year} Nextblock CMS. All rights reserved.';
-  const templateForLocale =
-    copyrightSettings[serverDeterminedLocale] ?? fallbackTemplate;
+    copyrightSettings.en ?? '(c) {year} Nextblock CMS. All rights reserved.';
+  const templateForLocale = copyrightSettings[serverDeterminedLocale] ?? fallbackTemplate;
   const copyrightText = templateForLocale.replace('{year}', new Date().getFullYear().toString());
 
+  const globalCss = typeof globalCssResult === 'string' ? globalCssResult : '';
   const translations = Array.isArray(translationsResult) ? translationsResult : [];
 
-  const hasSupabaseEnv =
-    Boolean(process.env.NEXT_PUBLIC_SUPABASE_URL && process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY);
+  const hasSupabaseEnv = Boolean(
+    process.env.NEXT_PUBLIC_SUPABASE_URL && process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY
+  );
 
-  const headerNavItems: NavigationItem[] = await getNavigationMenu('HEADER', serverDeterminedLocale).catch(() => []);
-  const footerNavItems: NavigationItem[] = await getNavigationMenu('FOOTER', serverDeterminedLocale).catch(() => []);
-  const logo = await getActiveLogo().catch(() => null);
+  const [profile, headerNavItems, footerNavItems, logo] = await Promise.all([
+    user ? getProfileWithRoleServerSide(user.id) : Promise.resolve(null),
+    getCachedNavigationMenu('HEADER', serverDeterminedLocale).catch(() => []),
+    getCachedNavigationMenu('FOOTER', serverDeterminedLocale).catch(() => []),
+    getCachedActiveLogo().catch(() => null),
+  ]);
 
   const role = profile?.role ?? null;
   const canAccessCms = role === 'ADMIN' || role === 'WRITER';
-  const siteTitle = logo?.site_title ?? 'Nextblock';
+  const { siteTitle } = await getSiteSettings();
 
   return {
     user,
     profile,
     serverDeterminedLocale,
+    availableCurrencies,
+    serverCurrencyCode,
     availableLanguages,
     defaultLanguage,
     translations,
@@ -99,47 +321,63 @@ async function loadLayoutData() {
     logo,
     canAccessCms,
     siteTitle,
+    isEcommerceActive,
+    globalCss,
+    privacySettings,
   };
 }
 
-export const metadata: Metadata = {
-  metadataBase: new URL(defaultUrl),
-  title: 'Nextblock CMS',
-  description: 'Nextblock CMS pairs a visual block editor with a blazing-fast Next.js + Supabase architecture.',
-  openGraph: {
-    title: 'Nextblock CMS',
-    description: 'Nextblock CMS pairs a visual block editor with a blazing-fast Next.js + Supabase architecture.',
-    url: defaultUrl,
-    siteName: 'Nextblock CMS',
-    images: [
-      {
-        url: '/images/metadata_image.webp',
-        width: 1200,
-        height: 630,
-        alt: 'Nextblock CMS',
-      },
-    ],
-    locale: 'en_US',
-    type: 'website',
-  },
-  twitter: {
-    card: 'summary_large_image',
-    title: 'Nextblock CMS',
-    description: 'Nextblock CMS pairs a visual block editor with a blazing-fast Next.js + Supabase architecture.',
-    images: ['/images/metadata_image.webp'],
-  },
-  icons: {
-    icon: [
-      { url: '/favicon/favicon.ico' },
-      { url: '/favicon/favicon-16x16.png', sizes: '16x16', type: 'image/png' },
-      { url: '/favicon/favicon-32x32.png', sizes: '32x32', type: 'image/png' },
-    ],
-    apple: [
-      { url: '/favicon/apple-touch-icon.png' },
-    ],
-  },
-  manifest: '/favicon/site.webmanifest',
-};
+export async function generateMetadata(): Promise<Metadata> {
+  const { siteTitle, siteDescription, siteKeywords } = await getSiteSettings();
+  const isSandbox = process.env.NEXT_PUBLIC_IS_SANDBOX === 'true';
+
+  return {
+    metadataBase: new URL(defaultUrl),
+    title: {
+      default: siteTitle,
+      template: `%s | ${siteTitle}`,
+    },
+    description: siteDescription,
+    keywords: siteKeywords,
+    applicationName: siteTitle,
+    openGraph: {
+      title: siteTitle,
+      description: siteDescription,
+      url: defaultUrl,
+      siteName: siteTitle,
+      images: [
+        {
+          url: DEFAULT_OG_IMAGE,
+          width: 1200,
+          height: 630,
+          alt: siteTitle,
+        },
+      ],
+      locale: 'en_US',
+      type: 'website',
+    },
+    twitter: {
+      card: 'summary_large_image',
+      title: siteTitle,
+      description: siteDescription,
+      images: [DEFAULT_OG_IMAGE],
+    },
+    icons: {
+      icon: [
+        { url: '/favicon/favicon.ico' },
+        { url: '/favicon/favicon-16x16.png', sizes: '16x16', type: 'image/png' },
+        { url: '/favicon/favicon-32x32.png', sizes: '32x32', type: 'image/png' },
+      ],
+      apple: [{ url: '/favicon/apple-touch-icon.png' }],
+    },
+    manifest: '/favicon/site.webmanifest',
+    // Sandbox is a copy of production, so keep it out of the index. Use
+    // `noindex, follow` (not nofollow) so Googlebot still follows internal links,
+    // recrawls every page, and drops them all — paired with an allow-crawl
+    // robots.txt (see app/robots.txt/route.ts) so the noindex is actually seen.
+    robots: isSandbox ? { index: false, follow: true } : { index: true, follow: true },
+  };
+}
 
 export default async function RootLayout({
   children,
@@ -149,74 +387,92 @@ export default async function RootLayout({
   const {
     user,
     profile,
-  serverDeterminedLocale,
-  availableLanguages,
-  defaultLanguage,
-  translations,
-  copyrightText,
-  nonce,
-  hasSupabaseEnv,
-  headerNavItems,
-  logo,
+    serverDeterminedLocale,
+    availableCurrencies,
+    serverCurrencyCode,
+    availableLanguages,
+    defaultLanguage,
+    translations,
+    copyrightText,
+    nonce,
+    hasSupabaseEnv,
+    headerNavItems,
+    logo,
     footerNavItems,
-  canAccessCms,
-  siteTitle,
-} = await loadLayoutData();
+    canAccessCms,
+    siteTitle,
+    isEcommerceActive,
+    globalCss,
+    privacySettings,
+  } = await loadLayoutData();
+  const draft = await draftMode();
+  const resolvedGtmId = privacySettings.gtm_id || process.env.NEXT_PUBLIC_GTM_ID || '';
+  const visualEditingEnabled =
+    draft.isEnabled || process.env.NEXTBLOCK_VISUAL_EDITING_ENABLED === 'true';
+  const isVercelDeployment = process.env.VERCEL === '1';
+  const toolbarEnabled =
+    process.env.NEXTBLOCK_VERCEL_TOOLBAR_ENABLED === 'true' ||
+    (isVercelDeployment && visualEditingEnabled);
+  const Toolbar = toolbarEnabled
+    ? (await import('@vercel/toolbar/next')).VercelToolbar
+    : null;
 
   return (
     <html lang={serverDeterminedLocale} suppressHydrationWarning>
       <head>
-        <title>{metadata.title as string}</title>
-        <meta name="description" content={metadata.description as string} />
-        <link rel="preconnect" href="https://ppcppwsfnrptznvbxnsz.supabase.co" />
-        <link rel="dns-prefetch" href="https://ppcppwsfnrptznvbxnsz.supabase.co" />
-        <link rel="dns-prefetch" href="https://aws-0-us-east-1.pooler.supabase.com" />
-        <link rel="dns-prefetch" href="https://db.ppcppwsfnrptznvbxnsz.supabase.co" />
-        <link rel="dns-prefetch" href="https://realtime.supabase.com" />
         <meta name="viewport" content="width=device-width, initial-scale=1" />
-        <Analytics/>
+        {globalCss && <style dangerouslySetInnerHTML={{ __html: globalCss }} />}
       </head>
-      <body className="bg-background text-foreground min-h-screen flex flex-col">
+      <body className="min-h-screen">
+        {/* In development this loads after hydration to avoid browser-hidden nonce comparisons. */}
+        <Script
+          id="trusted-types-bootstrap"
+          strategy={TRUSTED_TYPES_SCRIPT_STRATEGY}
+          nonce={nonce}
+          dangerouslySetInnerHTML={{ __html: TRUSTED_TYPES_BOOTSTRAP }}
+        />
         <Providers
           serverUser={user}
           serverProfile={profile}
           serverLocale={serverDeterminedLocale}
+          initialCurrencies={availableCurrencies}
+          initialCurrencyCode={serverCurrencyCode}
           initialAvailableLanguages={availableLanguages}
           initialDefaultLanguage={defaultLanguage}
           translations={translations}
           nonce={nonce}
         >
-          {process.env.NEXT_PUBLIC_IS_SANDBOX === 'true' && <SandboxBanner />}
           <ToasterProvider />
-          <div className="flex-1 w-full flex flex-col items-center">
-            <nav className="w-full flex justify-center border-b border-b-foreground/10 h-16">
-              <div className="w-full max-w-7xl flex justify-between items-center p-3 px-5 text-sm">
-                {!hasSupabaseEnv ? (
-                  <EnvVarWarning />
-                ) : (
-                  <Header
-                    navItems={headerNavItems}
-                    canAccessCms={canAccessCms}
-                    logo={logo}
-                    siteTitle={siteTitle}
-                  />
-                )}
-              </div>
-            </nav>
-            <main className="flex-grow w-full">
-              {children}
-            </main>
-            <footer className="w-full border-t py-8">
-              <div className="mx-auto flex flex-col items-center justify-center gap-6 text-center text-xs">
-                <FooterNavigation navItems={footerNavItems} />
-                <div className="flex flex-row items-center gap-2">
-                  <p className="text-muted-foreground">{copyrightText}</p>
-                  <ThemeSwitcher />
-                </div>
-              </div>
-            </footer>
-          </div>
+          <AppShell
+            canAccessCms={canAccessCms}
+            copyrightText={copyrightText}
+            corporateFooter={{
+              legalName: privacySettings.corporate.legal_name,
+              address: privacySettings.corporate.address,
+              supportEmail: privacySettings.corporate.support_email,
+            }}
+            footerNavItems={footerNavItems}
+            hasSupabaseEnv={hasSupabaseEnv}
+            headerNavItems={headerNavItems}
+            isDraftModeEnabled={draft.isEnabled}
+            isEcommerceActive={isEcommerceActive}
+            logo={logo}
+            siteTitle={siteTitle}
+          >
+            {children}
+          </AppShell>
+
+          {isEcommerceActive && <DeferredCartDrawer />}
+          {visualEditingEnabled && <DeferredVisualEditing />}
+          {Toolbar && <Toolbar nonce={nonce} />}
+          {privacySettings.banner_enabled && <ConsentBanner />}
         </Providers>
+        <DeferredSpeedInsights />
+        <ConsentGatedAnalytics
+          gtmId={resolvedGtmId}
+          customScripts={privacySettings.custom_scripts}
+          nonce={nonce}
+        />
       </body>
     </html>
   );

package/templates/nextblock-template/app/lib/seo.test.ts

@@ -0,0 +1,52 @@
+import { describe, expect, it } from "vitest";
+import {
+  extractIntroExcerptFromBlocks,
+  resolveMetaTitle,
+  resolvePageMetaDescription,
+  resolvePostMetaDescription,
+  resolveProductMetaDescription,
+  stringifyJsonLd,
+} from "./seo";
+
+describe("seo helpers", () => {
+  it("uses manual title only when it contains text", () => {
+    expect(resolveMetaTitle("  Custom SEO Title  ", "Fallback Title")).toBe("Custom SEO Title");
+    expect(resolveMetaTitle("   ", "Fallback Title")).toBe("Fallback Title");
+  });
+
+  it("resolves page descriptions from the first meaningful paragraph", () => {
+    const blocks = [
+      {
+        block_type: "text",
+        content: {
+          html_content: "<h1>Hero heading</h1>",
+        },
+      },
+      {
+        block_type: "text",
+        content: {
+          html_content:
+            "<p>NextBlock gives teams a fast CMS foundation with editable content, commerce, and production-ready metadata.</p>",
+        },
+      },
+    ];
+
+    expect(extractIntroExcerptFromBlocks(blocks)).toBe(
+      "NextBlock gives teams a fast CMS foundation with editable content, commerce, and production-ready metadata."
+    );
+    expect(resolvePageMetaDescription(null, blocks)).toBe(
+      "NextBlock gives teams a fast CMS foundation with editable content, commerce, and production-ready metadata."
+    );
+  });
+
+  it("uses type-specific description fallbacks", () => {
+    expect(resolvePostMetaDescription(null, "Post subtitle")).toBe("Post subtitle");
+    expect(resolveProductMetaDescription(null, "<p>Short product description.</p>")).toBe(
+      "Short product description."
+    );
+  });
+
+  it("escapes JSON-LD closing tags", () => {
+    expect(stringifyJsonLd({ name: "</script>" })).toContain("\\u003c/script>");
+  });
+});