mirror of
https://github.com/hanzoai/forge.git
synced 2026-10-30 15:00:39 +00:00
zeekayandHanzo Dev
9a07b4d089
2978 files. The fork is 2026-07-15 (rebrand: gitea.dev -> github.com/hanzoai/git), so 2026 is the year, and "Copyright 2026 Hanzo AI, Inc." was already the form used by the handful of files that had ours. Shape is now: // Copyright 2026 Hanzo AI, Inc. All rights reserved. // Copyright 2015 The Gogs Authors. All rights reserved. // Copyright 2019 The Gitea Authors. All rights reserved. // SPDX-License-Identifier: MIT Ours on top, theirs retained verbatim. Retained because MIT requires it, and separately because they are true — those authors did write that code. Not renamed to "The Git Authors": Git is a different project under a different license, and putting its name here would attribute this code to people who have nothing to do with it. Adding our line is the fix; overwriting theirs would have been both a licence violation and a false statement. gofmt still reports import-order drift in some of these files. It predates this change (verified against a stash) and is left alone rather than burying a one-line-per-file legal change under 3000 files of unrelated reordering. Build clean. Co-authored-by: Hanzo Dev <[email protected]>
133 lines
4.5 KiB
Go
133 lines
4.5 KiB
Go
// Copyright 2026 Hanzo AI, Inc. All rights reserved.
|
|
// Copyright 2020 The Gitea Authors. All rights reserved.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package integration
|
|
|
|
import (
|
|
"fmt"
|
|
"net/http"
|
|
"strings"
|
|
"testing"
|
|
|
|
"github.com/hanzoai/git/modules/setting"
|
|
"github.com/hanzoai/git/modules/test"
|
|
"github.com/hanzoai/git/modules/web"
|
|
"github.com/hanzoai/git/services/context"
|
|
"github.com/hanzoai/git/tests"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
)
|
|
|
|
func TestView(t *testing.T) {
|
|
defer tests.PrepareTestEnv(t)()
|
|
t.Run("RenderFileSVGIsInImgTag", testRenderFileSVGIsInImgTag)
|
|
t.Run("CommitListActions", testCommitListActions)
|
|
t.Run("SecurityHeadersDefaults", testSecurityHeadersDefaults)
|
|
t.Run("SiteManifest", testSiteManifest)
|
|
t.Run("CurrentURL", testViewPageCurrentURL)
|
|
}
|
|
|
|
func testRenderFileSVGIsInImgTag(t *testing.T) {
|
|
session := loginUser(t, "user2")
|
|
|
|
req := NewRequest(t, "GET", "/user2/repo2/src/branch/master/line.svg")
|
|
resp := session.MakeRequest(t, req, http.StatusOK)
|
|
|
|
doc := NewHTMLParser(t, resp.Body)
|
|
src, exists := doc.doc.Find(".file-view img").Attr("src")
|
|
assert.True(t, exists, "The SVG image should be in an <img> tag so that scripts in the SVG are not run")
|
|
assert.Equal(t, "/user2/repo2/raw/branch/master/line.svg", src)
|
|
}
|
|
|
|
func testCommitListActions(t *testing.T) {
|
|
session := loginUser(t, "user2")
|
|
|
|
t.Run("WikiRevisionList", func(t *testing.T) {
|
|
defer tests.PrintCurrentTest(t)()
|
|
|
|
req := NewRequest(t, "GET", "/user2/repo1/wiki/Home?action=_revision")
|
|
resp := session.MakeRequest(t, req, http.StatusOK)
|
|
htmlDoc := NewHTMLParser(t, resp.Body)
|
|
AssertHTMLElement(t, htmlDoc, ".commit-list .copy-commit-id", true)
|
|
AssertHTMLElement(t, htmlDoc, `.commit-list .view-single-diff`, false)
|
|
AssertHTMLElement(t, htmlDoc, `.commit-list .view-commit-path`, false)
|
|
})
|
|
|
|
t.Run("RepoCommitList", func(t *testing.T) {
|
|
defer tests.PrintCurrentTest(t)()
|
|
|
|
req := NewRequest(t, "GET", "/user2/repo1/commits/branch/master")
|
|
resp := session.MakeRequest(t, req, http.StatusOK)
|
|
htmlDoc := NewHTMLParser(t, resp.Body)
|
|
|
|
AssertHTMLElement(t, htmlDoc, `.commit-list .copy-commit-id`, true)
|
|
AssertHTMLElement(t, htmlDoc, `.commit-list .view-single-diff`, false)
|
|
AssertHTMLElement(t, htmlDoc, `.commit-list .view-commit-path`, true)
|
|
})
|
|
|
|
t.Run("RepoFileHistory", func(t *testing.T) {
|
|
defer tests.PrintCurrentTest(t)()
|
|
|
|
req := NewRequest(t, "GET", "/user2/repo1/commits/branch/master/README.md")
|
|
resp := session.MakeRequest(t, req, http.StatusOK)
|
|
htmlDoc := NewHTMLParser(t, resp.Body)
|
|
|
|
AssertHTMLElement(t, htmlDoc, `.commit-list .copy-commit-id`, true)
|
|
AssertHTMLElement(t, htmlDoc, `.commit-list .view-single-diff`, true)
|
|
AssertHTMLElement(t, htmlDoc, `.commit-list .view-commit-path`, true)
|
|
})
|
|
}
|
|
|
|
func testSecurityHeadersDefaults(t *testing.T) {
|
|
assertSecurityHeaders := func(t *testing.T, uri string) {
|
|
req := NewRequest(t, "GET", uri)
|
|
resp := MakeRequest(t, req, http.StatusOK)
|
|
assert.Equal(t, "nosniff", resp.Header().Get("X-Content-Type-Options"))
|
|
assert.Equal(t, "SAMEORIGIN", resp.Header().Get("X-Frame-Options"))
|
|
}
|
|
assertSecurityHeaders(t, "/")
|
|
assertSecurityHeaders(t, "/v1/version")
|
|
assertSecurityHeaders(t, "/assets/img/favicon.png")
|
|
}
|
|
|
|
func testSiteManifest(t *testing.T) {
|
|
req := NewRequest(t, "GET", "/")
|
|
resp := MakeRequest(t, req, http.StatusOK)
|
|
assert.Contains(t, resp.Body.String(), `<link rel="manifest" href="/assets/site-manifest.json">`)
|
|
|
|
req = NewRequest(t, "GET", "/assets/site-manifest.json")
|
|
resp = MakeRequest(t, req, http.StatusOK)
|
|
assert.Equal(t, "application/manifest+json", resp.Header().Get("Content-Type"))
|
|
|
|
assetBase := strings.TrimSuffix(setting.AppURL, "/")
|
|
expectedJSON := fmt.Sprintf(`{
|
|
"name": %q,
|
|
"short_name": %q,
|
|
"start_url": %q,
|
|
"icons": [
|
|
{"src": %q, "type": "image/png", "sizes": "512x512"},
|
|
{"src": %q, "type": "image/svg+xml", "sizes": "512x512"}
|
|
]
|
|
}`,
|
|
setting.AppName,
|
|
setting.AppName,
|
|
setting.AppURL,
|
|
assetBase+"/assets/img/logo.png",
|
|
assetBase+"/assets/img/logo.svg",
|
|
)
|
|
assert.JSONEq(t, expectedJSON, resp.Body.String())
|
|
}
|
|
|
|
func testViewPageCurrentURL(t *testing.T) {
|
|
defer test.MockVariableValue(&setting.AppSubURL, "/subpath")()
|
|
var currentURL string
|
|
web.RouteMock(web.MockAfterMiddlewares, func(ctx *context.Context) {
|
|
// Some custom template users need this template variable to construct links in their templates
|
|
currentURL, _ = ctx.Data["CurrentURL"].(string)
|
|
})
|
|
defer web.RouteMockReset()
|
|
MakeRequest(t, NewRequest(t, "GET", "/any-page?k=v"), http.StatusNotFound)
|
|
assert.Equal(t, "/subpath/any-page?k=v", currentURL)
|
|
}
|