release: prepare 0629001 portal updates

2026-06-29 22:20:04 +08:00
parent 18ea4f82fd
commit a40e340a41
84 changed files with 17516 additions and 2475 deletions
@@ -0,0 +1,34 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+import { validateWechatShareSignatureUrl } from './wechat-share.mjs';
+
+test('validateWechatShareSignatureUrl accepts public H5 page urls without login state', () => {
+  assert.equal(
+    validateWechatShareSignatureUrl('https://m.tkmind.cn/u/john/pages/demo#section', {
+      publicBaseUrl: 'https://m.tkmind.cn',
+      requestHost: '127.0.0.1:8081',
+    }),
+    'https://m.tkmind.cn/u/john/pages/demo',
+  );
+});
+
+test('validateWechatShareSignatureUrl accepts current request host for local verification', () => {
+  assert.equal(
+    validateWechatShareSignatureUrl('http://127.0.0.1:8081/MindSpace/user-1/public/demo.html', {
+      publicBaseUrl: 'https://m.tkmind.cn',
+      requestHost: '127.0.0.1:8081',
+    }),
+    'http://127.0.0.1:8081/MindSpace/user-1/public/demo.html',
+  );
+});
+
+test('validateWechatShareSignatureUrl rejects foreign hosts', () => {
+  assert.throws(
+    () =>
+      validateWechatShareSignatureUrl('https://evil.example/u/john/pages/demo', {
+        publicBaseUrl: 'https://m.tkmind.cn',
+        requestHost: '127.0.0.1:8081',
+      }),
+    (error) => error.code === 'host_not_allowed',
+  );
+});