mirror of
https://github.com/denoland/deno.git
synced 2024-12-27 01:29:14 -05:00
5504acea67
This replaces `--allow-net` for import permissions and makes the security sandbox stricter by also checking permissions for statically analyzable imports. By default, this has a value of `--allow-import=deno.land:443,jsr.io:443,esm.sh:443,raw.githubusercontent.com:443,gist.githubusercontent.com:443`, but that can be overridden by providing a different set of hosts. Additionally, when no value is provided, import permissions are inferred from the CLI arguments so the following works because `fresh.deno.dev:443` will be added to the list of allowed imports: ```ts deno run -A -r https://fresh.deno.dev ``` --------- Co-authored-by: David Sherret <dsherret@gmail.com>
111 lines
3.2 KiB
Rust
111 lines
3.2 KiB
Rust
// Copyright 2018-2024 the Deno authors. All rights reserved. MIT license.
|
|
|
|
use test_util::TestContext;
|
|
use test_util::TestContextBuilder;
|
|
|
|
// This test only runs on linux, because it hardcodes the XDG_CACHE_HOME env var
|
|
// which is only used on linux.
|
|
#[cfg(target_os = "linux")]
|
|
#[test]
|
|
fn xdg_cache_home_dir() {
|
|
let context = TestContext::with_http_server();
|
|
let deno_dir = context.temp_dir();
|
|
let xdg_cache_home = deno_dir.path().join("cache");
|
|
context
|
|
.new_command()
|
|
.env_remove("HOME")
|
|
.env_remove("DENO_DIR")
|
|
.env_clear()
|
|
.env("XDG_CACHE_HOME", &xdg_cache_home)
|
|
.args(
|
|
"cache --allow-import --reload --no-check http://localhost:4548/subdir/redirects/a.ts",
|
|
)
|
|
.run()
|
|
.skip_output_check()
|
|
.assert_exit_code(0);
|
|
assert!(xdg_cache_home.read_dir().count() > 0);
|
|
}
|
|
|
|
// TODO(2.0): reenable
|
|
#[ignore]
|
|
#[test]
|
|
fn cache_matching_package_json_dep_should_not_install_all() {
|
|
let context = TestContextBuilder::for_npm().use_temp_cwd().build();
|
|
let temp_dir = context.temp_dir();
|
|
temp_dir.write(
|
|
"package.json",
|
|
r#"{ "dependencies": { "@types/node": "18.8.2", "@denotest/esm-basic": "*" } }"#,
|
|
);
|
|
let output = context
|
|
.new_command()
|
|
.args("cache npm:@types/node@18.8.2")
|
|
.run();
|
|
output.assert_matches_text(concat!(
|
|
"Download http://localhost:4260/@types/node\n",
|
|
"Download http://localhost:4260/@types/node/node-18.8.2.tgz\n",
|
|
"Initialize @types/node@18.8.2\n",
|
|
));
|
|
}
|
|
|
|
// Regression test for https://github.com/denoland/deno/issues/17299
|
|
#[test]
|
|
fn cache_put_overwrite() {
|
|
let test_context = TestContextBuilder::new().use_temp_cwd().build();
|
|
let temp_dir = test_context.temp_dir();
|
|
|
|
let part_one = r#"
|
|
const req = new Request('http://localhost/abc');
|
|
const res1 = new Response('res1');
|
|
const res2 = new Response('res2');
|
|
|
|
const cache = await caches.open('test');
|
|
|
|
await cache.put(req, res1);
|
|
await cache.put(req, res2);
|
|
|
|
const res = await cache.match(req).then((res) => res?.text());
|
|
console.log(res);
|
|
"#;
|
|
|
|
let part_two = r#"
|
|
const req = new Request("http://localhost/abc");
|
|
const res1 = new Response("res1");
|
|
const res2 = new Response("res2");
|
|
|
|
const cache = await caches.open("test");
|
|
|
|
// Swap the order of put() calls.
|
|
await cache.put(req, res2);
|
|
await cache.put(req, res1);
|
|
|
|
const res = await cache.match(req).then((res) => res?.text());
|
|
console.log(res);
|
|
"#;
|
|
|
|
temp_dir.write("cache_put.js", part_one);
|
|
|
|
let run_command =
|
|
test_context.new_command().args_vec(["run", "cache_put.js"]);
|
|
|
|
let output = run_command.run();
|
|
output.assert_matches_text("res2\n");
|
|
output.assert_exit_code(0);
|
|
|
|
// The wait will surface the bug as we check last written time
|
|
// when we overwrite a response.
|
|
std::thread::sleep(std::time::Duration::from_secs(1));
|
|
|
|
temp_dir.write("cache_put.js", part_two);
|
|
let output = run_command.run();
|
|
output.assert_matches_text("res1\n");
|
|
output.assert_exit_code(0);
|
|
}
|
|
|
|
#[test]
|
|
fn loads_type_graph() {
|
|
let output = TestContext::default()
|
|
.new_command()
|
|
.args("cache --reload -L debug run/type_directives_js_main.js")
|
|
.run();
|
|
output.assert_matches_text("[WILDCARD] - FileFetcher::fetch_no_follow_with_options - specifier: file:///[WILDCARD]/subdir/type_reference.d.ts[WILDCARD]");
|
|
}
|