






















@@ -173,12 +173,11 @@ describe("ssrf pinning", () => {
173173{ address: "93.184.216.34", family: 4 },
174174]) as unknown as LookupFn;
175175176-await expect(
177-resolvePinnedHostnameWithPolicy("assets.example.com", {
178-lookupFn: lookup,
179-policy: { hostnameAllowlist: ["*.example.com"] },
180-}),
181-).resolves.toMatchObject({ hostname: "assets.example.com" });
176+const allowed = await resolvePinnedHostnameWithPolicy("assets.example.com", {
177+lookupFn: lookup,
178+policy: { hostnameAllowlist: ["*.example.com"] },
179+});
180+expect(allowed.hostname).toBe("assets.example.com");
182181183182await expect(
184183resolvePinnedHostnameWithPolicy("example.com", {
@@ -242,30 +241,24 @@ describe("ssrf pinning", () => {
242241{ address: "2001:db8:1234::5efe:127.0.0.1", family: 6 },
243242]) as unknown as LookupFn;
244243245-await expect(
246-resolvePinnedHostnameWithPolicy("2001:db8:1234::5efe:127.0.0.1", {
247-lookupFn: lookup,
248-policy: { allowPrivateNetwork: true },
249-}),
250-).resolves.toMatchObject({
251-hostname: "2001:db8:1234::5efe:127.0.0.1",
252-addresses: ["2001:db8:1234::5efe:127.0.0.1"],
244+const pinned = await resolvePinnedHostnameWithPolicy("2001:db8:1234::5efe:127.0.0.1", {
245+lookupFn: lookup,
246+policy: { allowPrivateNetwork: true },
253247});
248+expect(pinned.hostname).toBe("2001:db8:1234::5efe:127.0.0.1");
249+expect(pinned.addresses).toEqual(["2001:db8:1234::5efe:127.0.0.1"]);
254250expect(lookup).toHaveBeenCalledTimes(1);
255251});
256252257253it("accepts dangerouslyAllowPrivateNetwork as an allowPrivateNetwork alias", async () => {
258254const lookup = vi.fn(async () => [{ address: "127.0.0.1", family: 4 }]) as unknown as LookupFn;
259255260-await expect(
261-resolvePinnedHostnameWithPolicy("localhost", {
262-lookupFn: lookup,
263-policy: { dangerouslyAllowPrivateNetwork: true },
264-}),
265-).resolves.toMatchObject({
266-hostname: "localhost",
267-addresses: ["127.0.0.1"],
256+const pinned = await resolvePinnedHostnameWithPolicy("localhost", {
257+lookupFn: lookup,
258+policy: { dangerouslyAllowPrivateNetwork: true },
268259});
260+expect(pinned.hostname).toBe("localhost");
261+expect(pinned.addresses).toEqual(["127.0.0.1"]);
269262expect(lookup).toHaveBeenCalledTimes(1);
270263});
271264});
此内容由惯性聚合(RSS阅读器)自动聚合整理,仅供阅读参考。 原文来自 — 版权归原作者所有。