Jasper
44 lines
1.3 KiB
TypeScript
44 lines
1.3 KiB
TypeScript
import { beforeEach, describe, expect, it, vi } from 'vitest';
|
|
|
|
describe('preload file access boundary', () => {
|
|
beforeEach(() => {
|
|
vi.resetModules();
|
|
});
|
|
|
|
it('exposes only narrow file operations without renderer-supplied paths', async () => {
|
|
const exposed: Record<string, unknown> = {};
|
|
const invoke = vi.fn();
|
|
vi.doMock('electron', () => ({
|
|
default: {},
|
|
contextBridge: {
|
|
exposeInMainWorld: (name: string, api: unknown) => {
|
|
exposed[name] = api;
|
|
},
|
|
},
|
|
ipcRenderer: {
|
|
emit: vi.fn(),
|
|
invoke,
|
|
off: vi.fn(),
|
|
on: vi.fn(),
|
|
removeListener: vi.fn(),
|
|
send: vi.fn(),
|
|
sendSync: vi.fn(),
|
|
},
|
|
webUtils: { getPathForFile: vi.fn() },
|
|
}));
|
|
|
|
await import('./preload');
|
|
|
|
const electron = exposed.electron as Record<string, (...args: unknown[]) => unknown>;
|
|
expect(electron).not.toHaveProperty('readFile');
|
|
|
|
electron.selectRecipeFile('/etc/passwd');
|
|
electron.readGoosehints('../secret');
|
|
electron.writeGoosehints('project guidance', '../secret');
|
|
|
|
expect(invoke).toHaveBeenNthCalledWith(1, 'select-recipe-file');
|
|
expect(invoke).toHaveBeenNthCalledWith(2, 'read-goosehints');
|
|
expect(invoke).toHaveBeenNthCalledWith(3, 'write-goosehints', 'project guidance');
|
|
});
|
|
});
|