mirror of
https://github.com/hanzoai/next.js.git
synced 2026-09-24 17:00:51 +00:00
Sebastian "Sebbie" SilbermannandGitHub
93cf074e38
`url.parse` is deprecated in favor of WHATWG URLs. Almost all tests don't actually test integration with `url.parse`. The remaining places test integration with the Next.js request handler which does accept `url.parse` values. We may deprecate that specific signature in favor of accepting WHATWG URLs instead.
83 lines
2.6 KiB
TypeScript
83 lines
2.6 KiB
TypeScript
import { join } from 'path'
|
|
import webdriver from 'next-webdriver'
|
|
import { createNext, FileRef } from 'e2e-utils'
|
|
import { NextInstance } from 'e2e-utils'
|
|
import { fetchViaHTTP, renderViaHTTP } from 'next-test-utils'
|
|
|
|
describe.each([[''], ['/docs']])(
|
|
'misc basic dev tests, basePath: %p',
|
|
(basePath: string) => {
|
|
let next: NextInstance
|
|
|
|
beforeAll(async () => {
|
|
next = await createNext({
|
|
files: {
|
|
pages: new FileRef(join(__dirname, 'misc/pages')),
|
|
public: new FileRef(join(__dirname, 'misc/public')),
|
|
},
|
|
nextConfig: {
|
|
basePath,
|
|
},
|
|
})
|
|
})
|
|
afterAll(() => next.destroy())
|
|
|
|
it('should set process.env.NODE_ENV in development', async () => {
|
|
const browser = await webdriver(next.url, basePath + '/process-env')
|
|
const nodeEnv = await browser.elementByCss('#node-env').text()
|
|
expect(nodeEnv).toBe('development')
|
|
await browser.close()
|
|
})
|
|
|
|
it('should allow access to public files', async () => {
|
|
const data = await renderViaHTTP(next.url, basePath + '/data/data.txt')
|
|
expect(data).toBe('data')
|
|
|
|
const legacy = await renderViaHTTP(
|
|
next.url,
|
|
basePath + '/static/legacy.txt'
|
|
)
|
|
expect(legacy).toMatch(`new static folder`)
|
|
})
|
|
|
|
describe('With Security Related Issues', () => {
|
|
it('should not allow accessing files outside .next/static and .next/server directory', async () => {
|
|
const pathsToCheck = [
|
|
basePath + '/_next/static/../BUILD_ID',
|
|
basePath + '/_next/static/../routes-manifest.json',
|
|
]
|
|
for (const path of pathsToCheck) {
|
|
const res = await fetchViaHTTP(next.url, path)
|
|
const text = await res.text()
|
|
try {
|
|
expect(res.status).toBe(404)
|
|
expect(text).toMatch(/This page could not be found/)
|
|
} catch (err) {
|
|
throw new Error(`Path ${path} accessible from the browser`)
|
|
}
|
|
}
|
|
})
|
|
|
|
it('should handle encoded / value for trailing slash correctly', async () => {
|
|
const res = await fetchViaHTTP(
|
|
next.url,
|
|
basePath + '/%2fexample.com/',
|
|
undefined,
|
|
{
|
|
redirect: 'manual',
|
|
}
|
|
)
|
|
|
|
const { pathname, hostname } = new URL(
|
|
res.headers.get('location') || ''
|
|
)
|
|
expect(res.status).toBe(308)
|
|
expect(pathname).toBe(basePath + '/%2fexample.com')
|
|
expect(hostname).not.toBe('example.com')
|
|
const text = await res.text()
|
|
expect(text).toEqual(basePath + '/%2fexample.com')
|
|
})
|
|
})
|
|
}
|
|
)
|