Source-reviewed hardening changes and regression tests. UNBUILT / UNTESTED: not a deployable release. Go formatting, compilation, automated regression tests, full frontend validation and staging acceptance remain required. See docs/hardening/VALIDATION.md. Main remains the original clean snapshot; no upstream Git history imported.
39 lines
1.4 KiB
JavaScript
39 lines
1.4 KiB
JavaScript
// Modified in the independent hardening fork; see docs/hardening/README.md.
|
|
import assert from "node:assert/strict"
|
|
import test from "node:test"
|
|
import ts from "typescript"
|
|
import { readFile } from "node:fs/promises"
|
|
import vm from "node:vm"
|
|
|
|
async function loadCloseNavigation() {
|
|
const source = await readFile(new URL("./close-navigation.ts", import.meta.url), "utf8")
|
|
const compiled = ts.transpileModule(source, {
|
|
compilerOptions: {
|
|
target: ts.ScriptTarget.ES2017,
|
|
module: ts.ModuleKind.CommonJS,
|
|
},
|
|
fileName: "close-navigation.ts",
|
|
})
|
|
const sandbox = {
|
|
URLSearchParams,
|
|
exports: {},
|
|
module: { exports: {} },
|
|
}
|
|
sandbox.exports = sandbox.module.exports
|
|
vm.runInNewContext(compiled.outputText, sandbox)
|
|
return sandbox.module.exports
|
|
}
|
|
|
|
test("standalone close navigates to the non-bootstrapping closed page", async () => {
|
|
const { getStandaloneClosedUrl } = await loadCloseNavigation()
|
|
|
|
assert.equal(getStandaloneClosedUrl(), "/support/chat/closed")
|
|
})
|
|
|
|
test("dismiss and return retain the entry channel without accepting a redirect destination", async () => {
|
|
const { getStandaloneClosedUrl, getStandaloneChatUrl } = await loadCloseNavigation()
|
|
const search = "?channelId=help&externalId=visitor&returnUrl=https%3A%2F%2Fexample.org"
|
|
assert.equal(getStandaloneClosedUrl(search), `/support/chat/closed${search}`)
|
|
assert.equal(getStandaloneChatUrl(search), `/support/chat${search}`)
|
|
})
|