init

2026-09-14 13:45:17 +08:00
commit 1eef16a332
18 changed files with 3964 additions and 0 deletions
@@ -0,0 +1,113 @@
+// tests/utils.test.js
+// 测试 utils.js 中的纯函数：isDomainMatch（URL 路径匹配）和 escapeHtml（HTML 转义）
+// 运行：node --test tests/utils.test.js
+
+const { describe, it } = require("node:test");
+const assert = require("node:assert/strict");
+const { isDomainMatch, escapeHtml } = require("../utils.js");
+
+describe("isDomainMatch - 纯 hostname 匹配", () => {
+  it("精确域名匹配", () => {
+    assert.equal(isDomainMatch("https://example.com/login", "example.com"), true);
+    assert.equal(isDomainMatch("https://example.com/", "example.com"), true);
+    assert.equal(isDomainMatch("https://other.com/", "example.com"), false);
+  });
+
+  it("子域名通配符 *.example.com", () => {
+    assert.equal(isDomainMatch("https://oa.example.com/", "*.example.com"), true);
+    assert.equal(isDomainMatch("https://a.b.example.com/", "*.example.com"), true);
+    assert.equal(isDomainMatch("https://example.com/", "*.example.com"), true); // 根域也匹配
+    assert.equal(isDomainMatch("https://notexample.com/", "*.example.com"), false);
+  });
+
+  it("任意位置通配符", () => {
+    assert.equal(isDomainMatch("https://api.dev.example.com/", "api.*.example.com"), true);
+    assert.equal(isDomainMatch("https://api.prod.example.com/", "api.*.example.com"), true);
+    assert.equal(isDomainMatch("https://web.dev.example.com/", "api.*.example.com"), false);
+  });
+
+  it("端口和协议不影响匹配", () => {
+    assert.equal(isDomainMatch("http://example.com:8080/path", "example.com"), true);
+    assert.equal(isDomainMatch("https://example.com:443/", "example.com"), true);
+  });
+
+  it("非法 URL 返回 false", () => {
+    assert.equal(isDomainMatch("not-a-url", "example.com"), false);
+    assert.equal(isDomainMatch("", "example.com"), false);
+    assert.equal(isDomainMatch("https://example.com/", ""), false);
+  });
+});
+
+describe("isDomainMatch - hostname + path 匹配", () => {
+  it("精确路径匹配", () => {
+    assert.equal(isDomainMatch("https://oa.com/login", "oa.com/login"), true);
+    assert.equal(isDomainMatch("https://oa.com/admin/login", "oa.com/login"), false);
+    assert.equal(isDomainMatch("https://oa.com/", "oa.com/login"), false);
+  });
+
+  it("路径前缀通配 login/*", () => {
+    assert.equal(isDomainMatch("https://oa.com/login", "oa.com/login/*"), true);
+    assert.equal(isDomainMatch("https://oa.com/login/step2", "oa.com/login/*"), true);
+    assert.equal(isDomainMatch("https://oa.com/login/sub/deep", "oa.com/login/*"), true);
+    assert.equal(isDomainMatch("https://oa.com/logins", "oa.com/login/*"), false);
+    assert.equal(isDomainMatch("https://oa.com/admin", "oa.com/login/*"), false);
+  });
+
+  it("路径全通配 *", () => {
+    assert.equal(isDomainMatch("https://oa.com/anything", "oa.com/*"), true);
+    assert.equal(isDomainMatch("https://oa.com/", "oa.com/*"), true);
+  });
+
+  it("仅 hostname + 空路径匹配该域名所有页面", () => {
+    assert.equal(isDomainMatch("https://oa.com/any/path", "oa.com/"), true);
+    assert.equal(isDomainMatch("https://oa.com/", "oa.com/"), true);
+  });
+
+  it("路径内任意位置通配", () => {
+    assert.equal(isDomainMatch("https://site.com/a/123/b", "site.com/a/*/b"), true);
+    assert.equal(isDomainMatch("https://site.com/a/xyz/b", "site.com/a/*/b"), true);
+    assert.equal(isDomainMatch("https://site.com/a/123/c", "site.com/a/*/b"), false);
+  });
+
+  it("path 匹配与子域名通配组合", () => {
+    assert.equal(isDomainMatch("https://api.dev.com/login", "*.dev.com/login"), true);
+    assert.equal(isDomainMatch("https://web.dev.com/admin", "*.dev.com/login"), false);
+    assert.equal(isDomainMatch("https://api.dev.com/login/step2", "*.dev.com/login/*"), true);
+  });
+
+  it("带 query 和 hash 的 URL 不影响 path 匹配", () => {
+    assert.equal(isDomainMatch("https://oa.com/login?next=/home", "oa.com/login"), true);
+    assert.equal(isDomainMatch("https://oa.com/login#section", "oa.com/login"), true);
+  });
+});
+
+describe("escapeHtml", () => {
+  it("转义 5 个特殊字符", () => {
+    assert.equal(escapeHtml("<"), "&lt;");
+    assert.equal(escapeHtml(">"), "&gt;");
+    assert.equal(escapeHtml('"'), "&quot;");
+    assert.equal(escapeHtml("'"), "&#39;");
+    assert.equal(escapeHtml("&"), "&amp;");
+  });
+
+  it("组合转义", () => {
+    assert.equal(
+      escapeHtml('<a href="x" onclick="alert(\'hi\')">text & more</a>'),
+      "&lt;a href=&quot;x&quot; onclick=&quot;alert(&#39;hi&#39;)&quot;&gt;text &amp; more&lt;/a&gt;"
+    );
+  });
+
+  it("null 和 undefined 返回空串", () => {
+    assert.equal(escapeHtml(null), "");
+    assert.equal(escapeHtml(undefined), "");
+  });
+
+  it("数字会被转成字符串", () => {
+    assert.equal(escapeHtml(123), "123");
+  });
+
+  it("普通文本不变", () => {
+    assert.equal(escapeHtml("hello world"), "hello world");
+    assert.equal(escapeHtml("中文测试123"), "中文测试123");
+  });
+});