aaronrene / knowtation public
url-fetch-safe.test.mjs
25 lines 949 B
Raw
sha256:87f84653ce4706be8c65b0c4494ed6fb891213cca82db2b1824772cddc41a752 feat(auth): durable MCP OAuth refresh via shared strong sto… Agent minor 57 days ago
1 /**
2 * URL fetch guardrails for import.
3 */
4 import { describe, it } from 'node:test';
5 import assert from 'node:assert/strict';
6 import { isPrivateOrBlockedIp, fetchUrlForImport } from '../lib/url-fetch-safe.mjs';
7
8 describe('url-fetch-safe', () => {
9 it('isPrivateOrBlockedIp marks loopback and RFC1918', () => {
10 assert.equal(isPrivateOrBlockedIp('127.0.0.1'), true);
11 assert.equal(isPrivateOrBlockedIp('10.0.0.1'), true);
12 assert.equal(isPrivateOrBlockedIp('192.168.1.1'), true);
13 assert.equal(isPrivateOrBlockedIp('::1'), true);
14 assert.equal(isPrivateOrBlockedIp('fe80::1'), true);
15 assert.equal(isPrivateOrBlockedIp('fd00::1'), true);
16 });
17
18 it('rejects http scheme', async () => {
19 await assert.rejects(() => fetchUrlForImport('http://example.com/'), /Only https/);
20 });
21
22 it('rejects localhost hostname', async () => {
23 await assert.rejects(() => fetchUrlForImport('https://localhost/foo'), /localhost/);
24 });
25 });
File History 5 commits
sha256:87f84653ce4706be8c65b0c4494ed6fb891213cca82db2b1824772cddc41a752 feat(auth): durable MCP OAuth refresh via shared strong sto… Agent minor 57 days ago
sha256:873e30b7fafe601346295f8f4289f388f21d8f715f28584d5481899ba2b714fc Merge pull request #249 from aaronrene/muse-mirror Agent 74 days ago
sha256:d8c648b20a4d53b2673c5c082ee7edfa7b2fc9b11080832da1f38807b6bf940b fix(7C-L1b): route hosted delegation proposals through cani… Human minor ⚠ 76 days ago
sha256:2827ba9e7632a4b141c50caf1e8f7d77abbc3515be20e7465f2bccb0ac4edf91 fix: repair endpoint now sets has_active_subscription when … Human minor ⚠ 96 days ago
sha256:6a102aafafdfe7e70a24f4e59740200f0ee713ce7915f1b53e9d4ba5ee8b4410 Initial Muse snapshot Human 128 days ago