mirror of
https://github.com/langgenius/dify.git
synced 2026-03-28 01:29:55 +08:00
d66b0d2d11
- Moved test files for completion parameters, clipboard, app redirection, and emoji utilities to the appropriate directory structure. - Added comprehensive tests for clipboard functionality, including modern and legacy methods. - Implemented tests for app redirection logic based on user permissions and app modes. - Enhanced tests for completion parameters validation and error handling. - Introduced tests for emoji search functionality with various scenarios. - Updated icon utility tests to cover edge cases and security concerns. - Improved formatting tests for numbers, file sizes, and time representation.
50 lines
2.0 KiB
TypeScript
50 lines
2.0 KiB
TypeScript
import { validateRedirectUrl } from '../urlValidation'
|
|
|
|
describe('URL Validation', () => {
|
|
describe('validateRedirectUrl', () => {
|
|
it('should reject data: protocol', () => {
|
|
expect(() => validateRedirectUrl('data:text/html,<script>alert(1)</script>')).toThrow('Authorization URL must be HTTP or HTTPS')
|
|
})
|
|
|
|
it('should reject file: protocol', () => {
|
|
expect(() => validateRedirectUrl('file:///etc/passwd')).toThrow('Authorization URL must be HTTP or HTTPS')
|
|
})
|
|
|
|
it('should reject ftp: protocol', () => {
|
|
expect(() => validateRedirectUrl('ftp://example.com')).toThrow('Authorization URL must be HTTP or HTTPS')
|
|
})
|
|
|
|
it('should reject vbscript: protocol', () => {
|
|
expect(() => validateRedirectUrl('vbscript:msgbox(1)')).toThrow('Authorization URL must be HTTP or HTTPS')
|
|
})
|
|
|
|
it('should reject malformed URLs', () => {
|
|
expect(() => validateRedirectUrl('not a url')).toThrow('Invalid URL')
|
|
expect(() => validateRedirectUrl('://example.com')).toThrow('Invalid URL')
|
|
expect(() => validateRedirectUrl('')).toThrow('Invalid URL')
|
|
})
|
|
|
|
it('should handle URLs with query parameters', () => {
|
|
expect(() => validateRedirectUrl('https://example.com?param=value')).not.toThrow()
|
|
expect(() => validateRedirectUrl('https://example.com?redirect=http://evil.com')).not.toThrow()
|
|
})
|
|
|
|
it('should handle URLs with fragments', () => {
|
|
expect(() => validateRedirectUrl('https://example.com#section')).not.toThrow()
|
|
expect(() => validateRedirectUrl('https://example.com/path#fragment')).not.toThrow()
|
|
})
|
|
|
|
it('should handle URLs with authentication', () => {
|
|
expect(() => validateRedirectUrl('https://user:pass@example.com')).not.toThrow()
|
|
})
|
|
|
|
it('should handle international domain names', () => {
|
|
expect(() => validateRedirectUrl('https://例え.jp')).not.toThrow()
|
|
})
|
|
|
|
it('should reject protocol-relative URLs', () => {
|
|
expect(() => validateRedirectUrl('//example.com')).toThrow('Invalid URL')
|
|
})
|
|
})
|
|
})
|