Sven
5e7babf265
Unterschriftenerfassung dauerhaft auf Deutsch anzeigen, lokale VHS-Buildkonfiguration und Regressionstests ergänzen sowie Version auf 357.0.0+357 anheben.
83 lines
2.6 KiB
Dart
83 lines
2.6 KiB
Dart
import 'package:flutter_test/flutter_test.dart';
|
|
import 'package:stadtbote/tools/vhs_map_access.dart';
|
|
|
|
void main() {
|
|
group('VHS-Kartenlink', () {
|
|
test('erlaubt HTTPS inklusive Kartenparameter und Fragment', () {
|
|
final access = VhsMapAccess(
|
|
Uri.parse('https://vhs.example/map?job=42#courier'),
|
|
);
|
|
expect(access.isValid, isTrue);
|
|
});
|
|
|
|
test('weist unsichere und unvollständige Links zurück', () {
|
|
for (final url in [
|
|
'http://vhs.example/map',
|
|
'/map?job=42',
|
|
'//vhs.example/map',
|
|
'javascript:alert(1)',
|
|
'https:///map',
|
|
'https://user:password@vhs.example/map',
|
|
'https://vhs.example:0/map',
|
|
'https://vhs.example:65536/map',
|
|
]) {
|
|
expect(VhsMapAccess(Uri.parse(url)).isValid, isFalse, reason: url);
|
|
}
|
|
});
|
|
|
|
test('erlaubt Navigation nur innerhalb derselben HTTPS-Origin', () {
|
|
final access = VhsMapAccess(Uri.parse('https://vhs.example/map?job=42'));
|
|
expect(
|
|
access.allowsNavigation(Uri.parse('https://vhs.example:443/other')),
|
|
isTrue,
|
|
);
|
|
for (final url in [
|
|
'http://vhs.example/map',
|
|
'https://other.example/map',
|
|
'https://vhs.example.other.example/map',
|
|
'https://vhs.example:8443/map',
|
|
'https://user@vhs.example/map',
|
|
'file:///map',
|
|
]) {
|
|
expect(access.allowsNavigation(Uri.parse(url)), isFalse, reason: url);
|
|
}
|
|
});
|
|
});
|
|
|
|
group('VHS-Anmeldung', () {
|
|
test('sendet Zugangsdaten nur an den exakten Kartenhost', () {
|
|
final access = VhsMapAccess(Uri.parse('https://vhs.example/map'));
|
|
expect(access.allowsAuthentication('VHS.EXAMPLE'), isTrue);
|
|
for (final host in [
|
|
'other.example',
|
|
'vhs.example.other.example',
|
|
'sub.vhs.example',
|
|
'',
|
|
]) {
|
|
expect(access.allowsAuthentication(host), isFalse, reason: host);
|
|
}
|
|
expect(
|
|
VhsMapAccess(
|
|
Uri.parse('http://vhs.example'),
|
|
).allowsAuthentication('vhs.example'),
|
|
isFalse,
|
|
);
|
|
});
|
|
|
|
test('begrenzt wiederholte Authentifizierungsanfragen', () {
|
|
final access = VhsMapAccess(Uri.parse('https://vhs.example/map'));
|
|
expect(access.tryAuthentication('other.example'), isFalse);
|
|
for (
|
|
var attempt = 0;
|
|
attempt < VhsMapAccess.maxAuthenticationAttempts;
|
|
attempt++
|
|
) {
|
|
expect(access.tryAuthentication('vhs.example'), isTrue);
|
|
}
|
|
expect(access.tryAuthentication('vhs.example'), isFalse);
|
|
expect(access.tryAuthentication('vhs.example'), isFalse);
|
|
expect(VhsMapAccess(access.uri).tryAuthentication('vhs.example'), isTrue);
|
|
});
|
|
});
|
|
}
|