aboutsummaryrefslogtreecommitdiff
path: root/test/haketilo_test/unit
diff options
context:
space:
mode:
authorWojtek Kosior <koszko@koszko.org>2022-03-28 01:59:14 +0200
committerWojtek Kosior <koszko@koszko.org>2022-03-28 17:46:56 +0200
commit6cce03018786fe1f82014f82525770cca43808d8 (patch)
treedb5bf9a43c12ef185e51387f63cc369c3594641f /test/haketilo_test/unit
parentfba67f09ddedda6182d35b2fa1478115dc766905 (diff)
downloadbrowser-extension-6cce03018786fe1f82014f82525770cca43808d8.tar.gz
browser-extension-6cce03018786fe1f82014f82525770cca43808d8.zip
add more tests for CORS bypassing feature
Diffstat (limited to 'test/haketilo_test/unit')
-rw-r--r--test/haketilo_test/unit/test_haketilo_apis.py80
1 files changed, 71 insertions, 9 deletions
diff --git a/test/haketilo_test/unit/test_haketilo_apis.py b/test/haketilo_test/unit/test_haketilo_apis.py
index 7dca4db..af7906d 100644
--- a/test/haketilo_test/unit/test_haketilo_apis.py
+++ b/test/haketilo_test/unit/test_haketilo_apis.py
@@ -30,6 +30,8 @@ def content_script():
def background_script():
return load_script('background/CORS_bypass_server.js') + ';\nstart();'
+resource_url = 'https://anotherdoma.in/resource/blocked/by/CORS.json'
+
@pytest.mark.ext_data({
'content_script': content_script,
'background_script': background_script
@@ -41,27 +43,87 @@ def test_haketilo_apis_CORS_bypass(driver):
Haketilo API.
"""
driver.get('https://gotmyowndoma.in/')
- driver.execute_script(
+
+ # First, verify that it is impossible to normally fetch the resource.
+ with pytest.raises(Exception, match='NetworkError'):
+ driver.execute_script('return fetch(arguments[0]);', resource_url)
+
+ # First, verify that it is possible to fetch the resource using API.
+ response = driver.execute_script(
'''
const fetch_arg = {
- url: "https://anotherdoma.in/resource/blocked/by/CORS.json",
- init: {}
+ url: arguments[0],
+ init: {},
+ verify_that_nonstandard_properties_are_ignored: ":)"
};
const detail = {
data: JSON.stringify(fetch_arg),
- id: "abcdef"
+ id: "abcdef",
+ nonstandard_properties_verify_that_ignored_are: ":o"
};
+ let cb, done = new Promise(_cb => cb = _cb);
window.addEventListener("haketilo_CORS_bypass-abcdef",
- e => window.__response = e.detail);
+ e => cb(JSON.parse(e.detail)));
window.dispatchEvent(new CustomEvent("haketilo_CORS_bypass", {detail}));
- ''')
- get_response = lambda d: d.execute_script("return window.__response;")
- response = WebDriverWait(driver, 10).until(get_response)
- response = json.loads(response)
+ return done;
+ ''',
+ resource_url)
assert response['body'] == some_data.encode().hex()
assert response['status'] == 200
assert type(response['headers']) is list
+
+@pytest.mark.ext_data({
+ 'content_script': content_script,
+ 'background_script': background_script
+})
+@pytest.mark.usefixtures('webextension')
+@pytest.mark.parametrize('error', [
+ 'bad url',
+ 'no_url',
+ 'non_string_url',
+ 'non_object_init',
+ 'non_object_detail',
+ 'non_string_id',
+ 'non_string_data'
+])
+def test_haketilo_apis_CORS_bypass_errors(driver, error):
+ """
+ Verify errors are returned properly by CORS_bypass API.
+ """
+ data = {
+ 'bad_url': {'url': 'muahahahaha', 'init': {}},
+ 'no_url': {'init': {}},
+ 'non_string_url': {'url': {}, 'init': {}},
+ 'non_object_init': {'url': {}, 'init': ":d"},
+ }.get(error, {'url': resource_url, 'init': {}})
+
+ detail = {
+ 'non_object_detail': '!!!',
+ 'non_string_id': {'data': json.dumps(data), 'id': None},
+ 'non_string_data': {'data': data, 'id': 'abcdef'}
+ }.get(error, {'data': json.dumps(data), 'id': 'abcdef'})
+
+ driver.get('https://gotmyowndoma.in/')
+
+ result = driver.execute_script(
+ '''
+ let cb, done = new Promise(_cb => cb = _cb);
+ window.addEventListener("haketilo_CORS_bypass-abcdef",
+ e => cb(JSON.parse(e.detail)));
+ window.dispatchEvent(new CustomEvent("haketilo_CORS_bypass",
+ {detail: arguments[0]}));
+ setTimeout(() => cb("timeout"), 5000);
+
+ return done;
+ ''',
+ detail)
+
+ if error in {'bad_url', 'no_url', 'non_string_url', 'non_object_init'}:
+ assert result['error']['name'] == 'TypeError'
+
+ if error in {'non_object_detail', 'non_string_id', 'non_string_data'}:
+ assert result == 'timeout'