15 lines
1011 B
TypeScript
15 lines
1011 B
TypeScript
import { expect, test } from "@playwright/test";
|
|
|
|
test("M13-03C exposes only structured allowlisted host calls", async ({ page }) => {
|
|
await page.goto("/");
|
|
const result = await page.evaluate(() => new Promise<Record<string, any>>((resolve, reject) => {
|
|
const worker = new Worker("/src/workers/script-host-call-test.worker.ts", { type: "module" });
|
|
worker.onmessage = (event: MessageEvent<Record<string, any>>) => { worker.terminate(); resolve(event.data); };
|
|
worker.onerror = (event) => { worker.terminate(); reject(new Error(event.message)); };
|
|
worker.postMessage({});
|
|
}));
|
|
expect(result.accepted.map((item: any) => item.call)).toEqual(["READ_MAIN", "READ_ASSET", "WRITE_MAIN", "WRITE_ASSET", "SUBMIT_SERVER_JOB"]);
|
|
expect(result.accepted.every((item: any) => item.execution === "DISABLED")).toBe(true);
|
|
expect(result.blocked).toEqual({ unknown: "SCRIPT_POLICY_DENIED", permission: "SCRIPT_POLICY_DENIED", fields: "SCRIPT_MANIFEST_INVALID", path: "SCRIPT_MANIFEST_INVALID" });
|
|
});
|