41 lines
1.9 KiB
TypeScript
41 lines
1.9 KiB
TypeScript
 
|
import { test } from 'node:test';
|
|||
|
|
import assert from 'node:assert/strict';
|
|||
|
|
import { analyzeLink, hostFromText, registrableDomain } from './linkSafety';
|
|||
|
|
|
|||
|
|
test('visible text that names another site is a mismatch', () => {
|
|||
|
|
const r = analyzeLink('https://matrix.lotusguild.org/login', 'https://evil.example/login');
|
|||
|
|
assert.equal(r?.mismatch, true);
|
|||
|
|
assert.equal(r?.shownHost, 'matrix.lotusguild.org');
|
|||
|
|
assert.equal(r?.realHost, 'evil.example');
|
|||
|
|
});
|
|||
|
|
|
|||
|
|
test('honest links are not flagged: same registrable domain, plain words, non-http', () => {
|
|||
|
|
assert.equal(
|
|||
|
|
analyzeLink('youtube.com/watch?v=1', 'https://www.youtube.com/watch?v=1')?.mismatch,
|
|||
|
|
false,
|
|||
|
|
);
|
|||
|
|
assert.equal(analyzeLink('bbc.co.uk', 'https://news.bbc.co.uk/x')?.mismatch, false);
|
|||
|
|
assert.equal(analyzeLink('click here', 'https://evil.example')?.mismatch, false);
|
|||
|
|
assert.equal(analyzeLink('evil.example', 'mailto:someone@evil.example'), null);
|
|||
|
|
assert.equal(analyzeLink('elsewhere.org', 'https://matrix.to/#/#room:x'), null);
|
|||
|
|
assert.equal(
|
|||
|
|
analyzeLink('lotusguild.org', 'https://chat.lotusguild.org/home/!r:x')?.mismatch,
|
|||
|
|
false,
|
|||
|
|
);
|
|||
|
|
});
|
|||
|
|
|
|||
|
|
test('registrable domain handles two-label suffixes', () => {
|
|||
|
|
assert.equal(registrableDomain('news.bbc.co.uk'), 'bbc.co.uk');
|
|||
|
|
assert.equal(registrableDomain('www.example.com'), 'example.com');
|
|||
|
|
assert.equal(registrableDomain('example.com'), 'example.com');
|
|||
|
|
});
|
|||
|
|
|
|||
|
|
test('hostFromText only accepts URL/host-shaped text; IDN becomes punycode', () => {
|
|||
|
|
assert.equal(hostFromText('Visit https://a.example/path'), null);
|
|||
|
|
assert.equal(hostFromText('a.example/path'), 'a.example');
|
|||
|
|
assert.equal(hostFromText('user@a.example:8448/x'), 'a.example');
|
|||
|
|
assert.equal(hostFromText('pаypal.com'), 'xn--pypal-4ve.com'); // Cyrillic а
|
|||
|
|
assert.equal(analyzeLink('paypal.com', 'https://xn--pypal-4ve.com/')?.punycode, true);
|
|||
|
|
assert.equal(analyzeLink('paypal.com', 'https://xn--pypal-4ve.com/')?.mismatch, true);
|
|||
|
|
});
|