Node / ReticulumProjects / MeshChatX.git / files / tests / frontend / deepLinks.protocol.security.test.js

Displaying Raw • Download

T8b949e// SPDX-License-Identifier: 0BSD

Tff7b72import Tb4b4b4{ Te6edf3describeTb4b4b4, Te6edf3itTb4b4b4, Te6edf3expectTb4b4b4, Te6edf3viTb4b4b4, Te6edf3beforeEach Tb4b4b4} Tff7b72from Ta5d6ff"vitest"Tb4b4b4;

Tff7b72import Te6edf3App Tff7b72from Ta5d6ff"../../meshchatx/src/frontend/components/App.vue"Tb4b4b4;

Tff7b72import Tb4b4b4{ Te6edf3handleLxmIngestUriResult Tb4b4b4} Tff7b72from Ta5d6ff"../../meshchatx/src/frontend/js/ingestUriResultNavigation.js"Tb4b4b4;

Tff7b72import Te6edf3WebSocketConnection Tff7b72from Ta5d6ff"../../meshchatx/src/frontend/js/WebSocketConnection"Tb4b4b4;

Tff7b72import Te6edf3ToastUtils Tff7b72from Ta5d6ff"../../meshchatx/src/frontend/js/ToastUtils"Tb4b4b4;

Te6edf3viTb4b4b4.Te6edf3mockTb4b4b4(Ta5d6ff"../../meshchatx/src/frontend/js/ToastUtils"Tb4b4b4, Tb4b4b4(Tb4b4b4) Tb4b4b4=> Tb4b4b4(Tb4b4b4{

Tff7b72defaultTff7b72: Tb4b4b4{

Te6edf3successTff7b72: Te6edf3viTb4b4b4.Te6edf3fnTb4b4b4(Tb4b4b4)Tb4b4b4,

Te6edf3errorTff7b72: Te6edf3viTb4b4b4.Te6edf3fnTb4b4b4(Tb4b4b4)Tb4b4b4,

Te6edf3infoTff7b72: Te6edf3viTb4b4b4.Te6edf3fnTb4b4b4(Tb4b4b4)Tb4b4b4,

Te6edf3warningTff7b72: Te6edf3viTb4b4b4.Te6edf3fnTb4b4b4(Tb4b4b4)Tb4b4b4,

Tb4b4b4}Tb4b4b4,

Tb4b4b4}Tb4b4b4)Tb4b4b4)Tb4b4b4;

Te6edf3viTb4b4b4.Te6edf3mockTb4b4b4(Ta5d6ff"../../meshchatx/src/frontend/js/WebSocketConnection"Tb4b4b4, Tb4b4b4(Tb4b4b4) Tb4b4b4=> Tb4b4b4(Tb4b4b4{

Tff7b72defaultTff7b72: Tb4b4b4{

Te6edf3sendTff7b72: Te6edf3viTb4b4b4.Te6edf3fnTb4b4b4(Tb4b4b4)Tb4b4b4,

Te6edf3connectTff7b72: Te6edf3viTb4b4b4.Te6edf3fnTb4b4b4(Tb4b4b4)Tb4b4b4,

Te6edf3onTff7b72: Te6edf3viTb4b4b4.Te6edf3fnTb4b4b4(Tb4b4b4)Tb4b4b4,

Te6edf3offTff7b72: Te6edf3viTb4b4b4.Te6edf3fnTb4b4b4(Tb4b4b4)Tb4b4b4,

Te6edf3destroyTff7b72: Te6edf3viTb4b4b4.Te6edf3fnTb4b4b4(Tb4b4b4)Tb4b4b4,

Tb4b4b4}Tb4b4b4,

Tb4b4b4}Tb4b4b4)Tb4b4b4)Tb4b4b4;

Te6edf3describeTb4b4b4(Ta5d6ff"App.vue deep link protocol handling (security-oriented)"Tb4b4b4, Tb4b4b4(Tb4b4b4) Tb4b4b4=> Tb4b4b4{

Te6edf3beforeEachTb4b4b4(Tb4b4b4(Tb4b4b4) Tb4b4b4=> Tb4b4b4{

Te6edf3viTb4b4b4.Te6edf3clearAllMocksTb4b4b4(Tb4b4b4)Tb4b4b4;

Tb4b4b4}Tb4b4b4)Tb4b4b4;

Te6edf3itTb4b4b4(Ta5d6ff"routes meshchatx://docs with reticulum query to documentation page"Tb4b4b4, Tb4b4b4(Tb4b4b4) Tb4b4b4=> Tb4b4b4{

Tff7b72const Te6edf3push Tff7b72= Te6edf3viTb4b4b4.Te6edf3fnTb4b4b4(Tb4b4b4)Tb4b4b4;

Te6edf3AppTb4b4b4.Te6edf3methodsTb4b4b4.Te6edf3handleProtocolLinkTb4b4b4.Te6edf3callTb4b4b4(

Tb4b4b4{ Te6edf3$routerTff7b72: Tb4b4b4{ Te6edf3push Tb4b4b4} Tb4b4b4}Tb4b4b4,

Ta5d6ff"meshchatx://docs?reticulum=" Tff7b72+ Tffa657encodeURIComponentTb4b4b4(Ta5d6ff"manual/interfaces.html#foo"Tb4b4b4)

Tb4b4b4)Tb4b4b4;

Te6edf3expectTb4b4b4(Te6edf3pushTb4b4b4)Tb4b4b4.Te6edf3toHaveBeenCalledWithTb4b4b4(Tb4b4b4{

Te6edf3nameTff7b72: Ta5d6ff"documentation"Tb4b4b4,

Te6edf3queryTff7b72: Tb4b4b4{

Te6edf3reticulumTff7b72: Tffa657encodeURIComponentTb4b4b4(Ta5d6ff"manual/interfaces.html#foo"Tb4b4b4)Tb4b4b4,

Tb4b4b4}Tb4b4b4,

Tb4b4b4}Tb4b4b4)Tb4b4b4;

Te6edf3pushTb4b4b4.Te6edf3mockClearTb4b4b4(Tb4b4b4)Tb4b4b4;

Te6edf3AppTb4b4b4.Te6edf3methodsTb4b4b4.Te6edf3handleProtocolLinkTb4b4b4.Te6edf3callTb4b4b4(Tb4b4b4{ Te6edf3$routerTff7b72: Tb4b4b4{ Te6edf3push Tb4b4b4} Tb4b4b4}Tb4b4b4, Ta5d6ff"meshchat://docs?path=manual/index.html"Tb4b4b4)Tb4b4b4;

Te6edf3expectTb4b4b4(Te6edf3pushTb4b4b4)Tb4b4b4.Te6edf3toHaveBeenCalledWithTb4b4b4(Tb4b4b4{

Te6edf3nameTff7b72: Ta5d6ff"documentation"Tb4b4b4,

Te6edf3queryTff7b72: Tb4b4b4{ Te6edf3reticulumTff7b72: Tffa657encodeURIComponentTb4b4b4(Ta5d6ff"manual/index.html"Tb4b4b4) Tb4b4b4}Tb4b4b4,

Tb4b4b4}Tb4b4b4)Tb4b4b4;

Tb4b4b4}Tb4b4b4)Tb4b4b4;

Te6edf3itTb4b4b4(Ta5d6ff"routes meshchatx://docs without query to documentation index"Tb4b4b4, Tb4b4b4(Tb4b4b4) Tb4b4b4=> Tb4b4b4{

Tff7b72const Te6edf3push Tff7b72= Te6edf3viTb4b4b4.Te6edf3fnTb4b4b4(Tb4b4b4)Tb4b4b4;

Te6edf3AppTb4b4b4.Te6edf3methodsTb4b4b4.Te6edf3handleProtocolLinkTb4b4b4.Te6edf3callTb4b4b4(Tb4b4b4{ Te6edf3$routerTff7b72: Tb4b4b4{ Te6edf3push Tb4b4b4} Tb4b4b4}Tb4b4b4, Ta5d6ff"meshchatx://docs"Tb4b4b4)Tb4b4b4;

Te6edf3expectTb4b4b4(Te6edf3pushTb4b4b4)Tb4b4b4.Te6edf3toHaveBeenCalledWithTb4b4b4(Tb4b4b4{ Te6edf3nameTff7b72: Ta5d6ff"documentation" Tb4b4b4}Tb4b4b4)Tb4b4b4;

Tb4b4b4}Tb4b4b4)Tb4b4b4;

Te6edf3itTb4b4b4(Ta5d6ff"sends map deep links to lxm.ingest_uri unchanged over WebSocket"Tb4b4b4, Tb4b4b4(Tb4b4b4) Tb4b4b4=> Tb4b4b4{

Tff7b72const Te6edf3uri Tff7b72= Ta5d6ff"meshchatx://map?lat=1&lon=2&z=4&label=" Tff7b72+ Tffa657encodeURIComponentTb4b4b4(Ta5d6ff"<img src=x onerror=alert(1)>"Tb4b4b4)Tb4b4b4;

Te6edf3AppTb4b4b4.Te6edf3methodsTb4b4b4.Te6edf3handleProtocolLinkTb4b4b4.Te6edf3callTb4b4b4(Tb4b4b4{ Te6edf3$routerTff7b72: Tb4b4b4{ Te6edf3pushTff7b72: Te6edf3viTb4b4b4.Te6edf3fnTb4b4b4(Tb4b4b4) Tb4b4b4} Tb4b4b4}Tb4b4b4, Te6edf3uriTb4b4b4)Tb4b4b4;

Te6edf3expectTb4b4b4(Te6edf3WebSocketConnectionTb4b4b4.Te6edf3sendTb4b4b4)Tb4b4b4.Te6edf3toHaveBeenCalledTimesTb4b4b4(T79c0ff1Tb4b4b4)Tb4b4b4;

Tff7b72const Te6edf3payload Tff7b72= Tffa657JSONTb4b4b4.Te6edf3parseTb4b4b4(Te6edf3WebSocketConnectionTb4b4b4.Te6edf3sendTb4b4b4.Te6edf3mockTb4b4b4.Te6edf3callsTb4b4b4[T79c0ff0Tb4b4b4]Tb4b4b4[T79c0ff0Tb4b4b4]Tb4b4b4)Tb4b4b4;

Te6edf3expectTb4b4b4(Te6edf3payloadTb4b4b4.Te6edf3typeTb4b4b4)Tb4b4b4.Te6edf3toBeTb4b4b4(Ta5d6ff"lxm.ingest_uri"Tb4b4b4)Tb4b4b4;

Te6edf3expectTb4b4b4(Te6edf3payloadTb4b4b4.Te6edf3uriTb4b4b4)Tb4b4b4.Te6edf3toBeTb4b4b4(Te6edf3uriTb4b4b4)Tb4b4b4;

Tb4b4b4}Tb4b4b4)Tb4b4b4;

Te6edf3itTb4b4b4(Ta5d6ff"does not router-push for meshchat map links (server resolves map_query)"Tb4b4b4, Tb4b4b4(Tb4b4b4) Tb4b4b4=> Tb4b4b4{

Tff7b72const Te6edf3push Tff7b72= Te6edf3viTb4b4b4.Te6edf3fnTb4b4b4(Tb4b4b4)Tb4b4b4;

Te6edf3AppTb4b4b4.Te6edf3methodsTb4b4b4.Te6edf3handleProtocolLinkTb4b4b4.Te6edf3callTb4b4b4(Tb4b4b4{ Te6edf3$routerTff7b72: Tb4b4b4{ Te6edf3push Tb4b4b4} Tb4b4b4}Tb4b4b4, Ta5d6ff"meshchatx://map?lat=0&lon=0&z=1"Tb4b4b4)Tb4b4b4;

Te6edf3expectTb4b4b4(Te6edf3pushTb4b4b4)Tb4b4b4.Te6edf3notTb4b4b4.Te6edf3toHaveBeenCalledTb4b4b4(Tb4b4b4)Tb4b4b4;

Tb4b4b4}Tb4b4b4)Tb4b4b4;

Te6edf3itTb4b4b4(Ta5d6ff"routes lxmf paper URIs through WebSocket ingest"Tb4b4b4, Tb4b4b4(Tb4b4b4) Tb4b4b4=> Tb4b4b4{

Te6edf3AppTb4b4b4.Te6edf3methodsTb4b4b4.Te6edf3handleProtocolLinkTb4b4b4.Te6edf3callTb4b4b4(Tb4b4b4{ Te6edf3$routerTff7b72: Tb4b4b4{ Te6edf3pushTff7b72: Te6edf3viTb4b4b4.Te6edf3fnTb4b4b4(Tb4b4b4) Tb4b4b4} Tb4b4b4}Tb4b4b4, Ta5d6ff"lxmf://%3Cinjection%3E"Tb4b4b4)Tb4b4b4;

Te6edf3expectTb4b4b4(Te6edf3WebSocketConnectionTb4b4b4.Te6edf3sendTb4b4b4)Tb4b4b4.Te6edf3toHaveBeenCalledTb4b4b4(Tb4b4b4)Tb4b4b4;

Tff7b72const Te6edf3payload Tff7b72= Tffa657JSONTb4b4b4.Te6edf3parseTb4b4b4(Te6edf3WebSocketConnectionTb4b4b4.Te6edf3sendTb4b4b4.Te6edf3mockTb4b4b4.Te6edf3callsTb4b4b4[T79c0ff0Tb4b4b4]Tb4b4b4[T79c0ff0Tb4b4b4]Tb4b4b4)Tb4b4b4;

Te6edf3expectTb4b4b4(Te6edf3payloadTb4b4b4.Te6edf3typeTb4b4b4)Tb4b4b4.Te6edf3toBeTb4b4b4(Ta5d6ff"lxm.ingest_uri"Tb4b4b4)Tb4b4b4;

Tb4b4b4}Tb4b4b4)Tb4b4b4;

Te6edf3itTb4b4b4(Ta5d6ff"routes rns:// only when hash segment is exactly 32 chars"Tb4b4b4, Tb4b4b4(Tb4b4b4) Tb4b4b4=> Tb4b4b4{

Tff7b72const Te6edf3push Tff7b72= Te6edf3viTb4b4b4.Te6edf3fnTb4b4b4(Tb4b4b4)Tb4b4b4;

Tff7b72const Te6edf3h Tff7b72= Ta5d6ff"a"Tb4b4b4.Te6edf3repeatTb4b4b4(T79c0ff32Tb4b4b4)Tb4b4b4;

Te6edf3AppTb4b4b4.Te6edf3methodsTb4b4b4.Te6edf3handleProtocolLinkTb4b4b4.Te6edf3callTb4b4b4(Tb4b4b4{ Te6edf3$routerTff7b72: Tb4b4b4{ Te6edf3push Tb4b4b4} Tb4b4b4}Tb4b4b4, Ta5d6ff`Ta5d6ffrns://Tffd700${Te6edf3hTffd700}Ta5d6ff`Tb4b4b4)Tb4b4b4;

Te6edf3expectTb4b4b4(Te6edf3pushTb4b4b4)Tb4b4b4.Te6edf3toHaveBeenCalledWithTb4b4b4(Tb4b4b4{

Te6edf3nameTff7b72: Ta5d6ff"messages"Tb4b4b4,

Te6edf3paramsTff7b72: Tb4b4b4{ Te6edf3destinationHashTff7b72: Te6edf3h Tb4b4b4}Tb4b4b4,

Tb4b4b4}Tb4b4b4)Tb4b4b4;

Te6edf3pushTb4b4b4.Te6edf3mockClearTb4b4b4(Tb4b4b4)Tb4b4b4;

Te6edf3AppTb4b4b4.Te6edf3methodsTb4b4b4.Te6edf3handleProtocolLinkTb4b4b4.Te6edf3callTb4b4b4(Tb4b4b4{ Te6edf3$routerTff7b72: Tb4b4b4{ Te6edf3push Tb4b4b4} Tb4b4b4}Tb4b4b4, Ta5d6ff`Ta5d6ffrns://Tffd700${Ta5d6ff"b"Tb4b4b4.Te6edf3repeatTb4b4b4(T79c0ff31Tb4b4b4)Tffd700}Ta5d6ff`Tb4b4b4)Tb4b4b4;

Te6edf3expectTb4b4b4(Te6edf3pushTb4b4b4)Tb4b4b4.Te6edf3notTb4b4b4.Te6edf3toHaveBeenCalledTb4b4b4(Tb4b4b4)Tb4b4b4;

Tb4b4b4}Tb4b4b4)Tb4b4b4;

Te6edf3itTb4b4b4(Ta5d6ff"onWebsocketMessage map_view passes label and layers as opaque query strings"Tb4b4b4, Tff7b72async Tb4b4b4(Tb4b4b4) Tb4b4b4=> Tb4b4b4{

Tff7b72const Te6edf3push Tff7b72= Te6edf3viTb4b4b4.Te6edf3fnTb4b4b4(Tb4b4b4)Tb4b4b4.Te6edf3mockResolvedValueTb4b4b4(Tff7b72undefinedTb4b4b4)Tb4b4b4;

Tff7b72const Te6edf3marker Tff7b72= Ta5d6ff"<svg/onload=alert(1)>"Tb4b4b4;

Tff7b72const Te6edf3handled Tff7b72= Tff7b72await Te6edf3handleLxmIngestUriResultTb4b4b4(

Tb4b4b4{

Te6edf3typeTff7b72: Ta5d6ff"lxm.ingest_uri.result"Tb4b4b4,

Te6edf3statusTff7b72: Ta5d6ff"success"Tb4b4b4,

Te6edf3ingest_typeTff7b72: Ta5d6ff"map_view"Tb4b4b4,

Te6edf3messageTff7b72: Ta5d6ff"Opening map view."Tb4b4b4,

Te6edf3map_queryTff7b72: Tb4b4b4{

Te6edf3latTff7b72: T79c0ff3Tb4b4b4,

Te6edf3lonTff7b72: T79c0ff4Tb4b4b4,

Te6edf3zoomTff7b72: T79c0ff5Tb4b4b4,

Te6edf3layersTff7b72: Ta5d6ff"discovered"Tb4b4b4,

Te6edf3labelTff7b72: Te6edf3markerTb4b4b4,

Tb4b4b4}Tb4b4b4,

Tb4b4b4}Tb4b4b4,

Tb4b4b4{ Te6edf3routerTff7b72: Tb4b4b4{ Te6edf3push Tb4b4b4}Tb4b4b4, Te6edf3toastTff7b72: Te6edf3ToastUtils Tb4b4b4}

Tb4b4b4)Tb4b4b4;

Te6edf3expectTb4b4b4(Te6edf3handledTb4b4b4)Tb4b4b4.Te6edf3toBeTb4b4b4(Tff7b72trueTb4b4b4)Tb4b4b4;

Te6edf3expectTb4b4b4(Te6edf3pushTb4b4b4)Tb4b4b4.Te6edf3toHaveBeenCalledWithTb4b4b4(Tb4b4b4{

Te6edf3nameTff7b72: Ta5d6ff"map"Tb4b4b4,

Te6edf3queryTff7b72: Tb4b4b4{

Te6edf3latTff7b72: Ta5d6ff"3"Tb4b4b4,

Te6edf3lonTff7b72: Ta5d6ff"4"Tb4b4b4,

Te6edf3zoomTff7b72: Ta5d6ff"5"Tb4b4b4,

Te6edf3layersTff7b72: Ta5d6ff"discovered"Tb4b4b4,

Te6edf3labelTff7b72: Te6edf3markerTb4b4b4,

Tb4b4b4}Tb4b4b4,

Tb4b4b4}Tb4b4b4)Tb4b4b4;

Te6edf3expectTb4b4b4(Te6edf3ToastUtilsTb4b4b4.Te6edf3infoTb4b4b4)Tb4b4b4.Te6edf3toHaveBeenCalledTb4b4b4(Tb4b4b4)Tb4b4b4;

Tb4b4b4}Tb4b4b4)Tb4b4b4;

Tb4b4b4}Tb4b4b4)Tb4b4b4;