Canto-Bio-AuditTest.t.sol

// SPDX-License-Identifier: GPL-3.0-only
pragma solidity >=0.8.0;

import "forge-std/Test.sol";
import "../src/Bio.sol";

contract AuditTest is Test {
    Bio public bio;

    function setUp() public {
        bio = new Bio();
    }

    function test_Bio_tokenURI_Injection() public {
        string memory text = "description\",\"attribute\":\"injected arbitrary data";
        bio.mint(text);
        console.log(bio.tokenURI(1));
    }

    function test_Bio_tokenURI_LineBufferOverflow() public {
        // This is a skin tone codepoint ("f09f8fbe") repeated 21 times
        string memory text = unicode"🏾🏾🏾🏾🏾🏾🏾🏾🏾🏾🏾🏾🏾🏾🏾🏾🏾🏾🏾🏾🏾";
        bio.mint(string(text));
        vm.expectRevert();
        bio.tokenURI(1);
    }

    function test_Bio_tokenURI_BadLineBreak1() public {
        // The following text will be badly splitted
        string memory text = unicode"👁️‍🗨️👁️‍🗨️👁️‍🗨️👁️‍🗨️👁️‍🗨️👁️‍🗨️👁️‍🗨️👁️‍🗨️👁️‍🗨️👁️‍🗨️👁️‍🗨️";
        bio.mint(string(text));
        console.log(bio.tokenURI(1));
    }

    function test_Bio_tokenURI_BadLineBreak2() public {
        // The following text will be badly splitted
        string memory text = unicode"🏴󠁧󠁢󠁥󠁮󠁧󠁿🏴󠁧󠁢󠁥󠁮󠁧󠁿🏴󠁧󠁢󠁥󠁮󠁧󠁿🏴󠁧󠁢󠁥󠁮󠁧󠁿🏴󠁧󠁢󠁥󠁮󠁧󠁿🏴󠁧󠁢󠁥󠁮󠁧󠁿🏴󠁧󠁢󠁥󠁮󠁧󠁿";
        bio.mint(string(text));
        console.log(bio.tokenURI(1));
    }
}