132 lines
3.1 KiB
JavaScript
132 lines
3.1 KiB
JavaScript
const { processStringSync, encodeJSBinding } = require("../src/index.cjs")
|
|
|
|
const processJS = (js, context) => {
|
|
return processStringSync(encodeJSBinding(js), context)
|
|
}
|
|
|
|
describe("Test the JavaScript helper", () => {
|
|
it("should execute a simple expression", () => {
|
|
const output = processJS(`return 1 + 2`)
|
|
expect(output).toBe(3)
|
|
})
|
|
|
|
it("should be able to use primitive bindings", () => {
|
|
const output = processJS(`return $("foo")`, {
|
|
foo: "bar",
|
|
})
|
|
expect(output).toBe("bar")
|
|
})
|
|
|
|
it("should be able to use an object binding", () => {
|
|
const output = processJS(`return $("foo").bar`, {
|
|
foo: {
|
|
bar: "baz",
|
|
},
|
|
})
|
|
expect(output).toBe("baz")
|
|
})
|
|
|
|
it("should be able to use a complex object binding", () => {
|
|
const output = processJS(`return $("foo").bar[0].baz`, {
|
|
foo: {
|
|
bar: [
|
|
{
|
|
baz: "shazbat",
|
|
},
|
|
],
|
|
},
|
|
})
|
|
expect(output).toBe("shazbat")
|
|
})
|
|
|
|
it("should be able to use a deep binding", () => {
|
|
const output = processJS(`return $("foo.bar.baz")`, {
|
|
foo: {
|
|
bar: {
|
|
baz: "shazbat",
|
|
},
|
|
},
|
|
})
|
|
expect(output).toBe("shazbat")
|
|
})
|
|
|
|
it("should be able to return an object", () => {
|
|
const output = processJS(`return $("foo")`, {
|
|
foo: {
|
|
bar: {
|
|
baz: "shazbat",
|
|
},
|
|
},
|
|
})
|
|
expect(output.bar.baz).toBe("shazbat")
|
|
})
|
|
|
|
it("should be able to return an array", () => {
|
|
const output = processJS(`return $("foo")`, {
|
|
foo: ["a", "b", "c"],
|
|
})
|
|
expect(output[2]).toBe("c")
|
|
})
|
|
|
|
it("should be able to return null", () => {
|
|
const output = processJS(`return $("foo")`, {
|
|
foo: null,
|
|
})
|
|
expect(output).toBe(null)
|
|
})
|
|
|
|
it("should be able to return undefined", () => {
|
|
const output = processJS(`return $("foo")`, {
|
|
foo: undefined,
|
|
})
|
|
expect(output).toBe(undefined)
|
|
})
|
|
|
|
it("should be able to return 0", () => {
|
|
const output = processJS(`return $("foo")`, {
|
|
foo: 0,
|
|
})
|
|
expect(output).toBe(0)
|
|
})
|
|
|
|
it("should be able to return an empty string", () => {
|
|
const output = processJS(`return $("foo")`, {
|
|
foo: "",
|
|
})
|
|
expect(output).toBe("")
|
|
})
|
|
|
|
it("should be able to use a deep array binding", () => {
|
|
const output = processJS(`return $("foo.0.bar")`, {
|
|
foo: [
|
|
{
|
|
bar: "baz",
|
|
},
|
|
],
|
|
})
|
|
expect(output).toBe("baz")
|
|
})
|
|
|
|
it("should handle errors", () => {
|
|
const output = processJS(`throw "Error"`)
|
|
expect(output).toBe("Error while executing JS")
|
|
})
|
|
|
|
it("should timeout after one second", () => {
|
|
const output = processJS(`while (true) {}`)
|
|
expect(output).toBe("Error while executing JS")
|
|
})
|
|
|
|
it("should prevent access to the process global", () => {
|
|
const output = processJS(`return process`)
|
|
expect(output).toBe("Error while executing JS")
|
|
})
|
|
|
|
it("should prevent sandbox escape", () => {
|
|
const output = processJS(
|
|
`return this.constructor.constructor("return process")()`
|
|
)
|
|
expect(output).toBe("Error while executing JS")
|
|
})
|
|
})
|