1
0
Fork 0
mirror of https://github.com/denoland/deno.git synced 2024-12-20 22:34:46 -05:00
denoland-deno/tests/integration/cache_tests.rs
Bartek Iwańczuk 5504acea67
feat: add --allow-import flag (#25469)
This replaces `--allow-net` for import permissions and makes the
security sandbox stricter by also checking permissions for statically
analyzable imports.

By default, this has a value of
`--allow-import=deno.land:443,jsr.io:443,esm.sh:443,raw.githubusercontent.com:443,gist.githubusercontent.com:443`,
but that can be overridden by providing a different set of hosts.

Additionally, when no value is provided, import permissions are inferred
from the CLI arguments so the following works because
`fresh.deno.dev:443` will be added to the list of allowed imports:

```ts
deno run -A -r https://fresh.deno.dev
```

---------

Co-authored-by: David Sherret <dsherret@gmail.com>
2024-09-26 01:50:54 +00:00

111 lines
3.2 KiB
Rust

// Copyright 2018-2024 the Deno authors. All rights reserved. MIT license.
use test_util::TestContext;
use test_util::TestContextBuilder;
// This test only runs on linux, because it hardcodes the XDG_CACHE_HOME env var
// which is only used on linux.
#[cfg(target_os = "linux")]
#[test]
fn xdg_cache_home_dir() {
let context = TestContext::with_http_server();
let deno_dir = context.temp_dir();
let xdg_cache_home = deno_dir.path().join("cache");
context
.new_command()
.env_remove("HOME")
.env_remove("DENO_DIR")
.env_clear()
.env("XDG_CACHE_HOME", &xdg_cache_home)
.args(
"cache --allow-import --reload --no-check http://localhost:4548/subdir/redirects/a.ts",
)
.run()
.skip_output_check()
.assert_exit_code(0);
assert!(xdg_cache_home.read_dir().count() > 0);
}
// TODO(2.0): reenable
#[ignore]
#[test]
fn cache_matching_package_json_dep_should_not_install_all() {
let context = TestContextBuilder::for_npm().use_temp_cwd().build();
let temp_dir = context.temp_dir();
temp_dir.write(
"package.json",
r#"{ "dependencies": { "@types/node": "18.8.2", "@denotest/esm-basic": "*" } }"#,
);
let output = context
.new_command()
.args("cache npm:@types/node@18.8.2")
.run();
output.assert_matches_text(concat!(
"Download http://localhost:4260/@types/node\n",
"Download http://localhost:4260/@types/node/node-18.8.2.tgz\n",
"Initialize @types/node@18.8.2\n",
));
}
// Regression test for https://github.com/denoland/deno/issues/17299
#[test]
fn cache_put_overwrite() {
let test_context = TestContextBuilder::new().use_temp_cwd().build();
let temp_dir = test_context.temp_dir();
let part_one = r#"
const req = new Request('http://localhost/abc');
const res1 = new Response('res1');
const res2 = new Response('res2');
const cache = await caches.open('test');
await cache.put(req, res1);
await cache.put(req, res2);
const res = await cache.match(req).then((res) => res?.text());
console.log(res);
"#;
let part_two = r#"
const req = new Request("http://localhost/abc");
const res1 = new Response("res1");
const res2 = new Response("res2");
const cache = await caches.open("test");
// Swap the order of put() calls.
await cache.put(req, res2);
await cache.put(req, res1);
const res = await cache.match(req).then((res) => res?.text());
console.log(res);
"#;
temp_dir.write("cache_put.js", part_one);
let run_command =
test_context.new_command().args_vec(["run", "cache_put.js"]);
let output = run_command.run();
output.assert_matches_text("res2\n");
output.assert_exit_code(0);
// The wait will surface the bug as we check last written time
// when we overwrite a response.
std::thread::sleep(std::time::Duration::from_secs(1));
temp_dir.write("cache_put.js", part_two);
let output = run_command.run();
output.assert_matches_text("res1\n");
output.assert_exit_code(0);
}
#[test]
fn loads_type_graph() {
let output = TestContext::default()
.new_command()
.args("cache --reload -L debug run/type_directives_js_main.js")
.run();
output.assert_matches_text("[WILDCARD] - FileFetcher::fetch_no_follow_with_options - specifier: file:///[WILDCARD]/subdir/type_reference.d.ts[WILDCARD]");
}