import pytest

from account.utils.sanitize import sanitize_relationship_notes


@pytest.mark.parametrize(
    'html, expected',
    [
        pytest.param(
            '<b>bold</b><i>italic</i><u>underline</u>Hello<br>World',
            '<b>bold</b><i>italic</i><u>underline</u>Hello<br>World',
            id='basic safe tags',
        ),
        pytest.param(
            '<ul><li>Item 1</li><li>Item 2</li></ul>',
            '<ul><li>Item 1</li><li>Item 2</li></ul>',
            id='list structure',
        ),
        pytest.param(
            "<p onclick='hack()' dir='ltr'>Text</p>",
            '<p dir="ltr">Text</p>',
            id='safe and unsafe attributes',
        ),
        pytest.param(
            '<div><p><b>Bold</b></p></div>',
            '<div><p><b>Bold</b></p></div>',
            id='nested safe tags',
        ),
        pytest.param(
            "<span style='color:red'>Hello</span>",
            '<span style="color:red">Hello</span>',
            id='style attribute sanitization',
        ),
        pytest.param(
            "<a href='https://google.com'>Google</a>",
            '<a href="https://google.com">Google</a>',
            id='safe link',
        ),
        pytest.param(
            "<a href='javascript:alert(1)'>Click</a>",
            '<a>Click</a>',
            id='dangerous protocol blocking',
        ),
        pytest.param(
            "<script>alert('x')</script>Hello",
            'Hello',
            id='script tag stripping',
        ),
        pytest.param('', '', id='empty string'),
    ],
)
def test_sanitize_relationship_notes(html, expected):
    """
    Minimal high-confidence test set covering:
    - Tag allowlist
    - Attribute allowlist
    - Protocol filtering
    - Nested HTML safety
    - XSS protection
    """
    result = sanitize_relationship_notes(html)
    assert result == expected


def test_none_input_raises_type_error():
    """Ensure None input raises TypeError."""
    with pytest.raises(TypeError):
        sanitize_relationship_notes(None)