File size: 2,892 Bytes
fc93158 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 | import path from "node:path";
import { describe, expect, it } from "vitest";
import {
hasAvatarUriScheme,
isAvatarDataUrl,
isAvatarHttpUrl,
isAvatarImageDataUrl,
isPathWithinRoot,
isSupportedLocalAvatarExtension,
isWindowsAbsolutePath,
isWorkspaceRelativeAvatarPath,
looksLikeAvatarPath,
resolveAvatarMime,
} from "./avatar-policy.js";
describe("avatar policy", () => {
it("classifies avatar URI and path helpers directly", () => {
expect(isAvatarDataUrl("data:text/plain,hello")).toBe(true);
expect(isAvatarImageDataUrl("data:image/png;base64,AAAA")).toBe(true);
expect(isAvatarImageDataUrl("data:text/plain,hello")).toBe(false);
expect(isAvatarHttpUrl("https://example.com/avatar.png")).toBe(true);
expect(isAvatarHttpUrl("ftp://example.com/avatar.png")).toBe(false);
expect(hasAvatarUriScheme("slack://avatar")).toBe(true);
expect(isWindowsAbsolutePath("C:\\\\avatars\\\\openclaw.png")).toBe(true);
});
it("accepts workspace-relative avatar paths and rejects URI schemes", () => {
expect(isWorkspaceRelativeAvatarPath("avatars/openclaw.png")).toBe(true);
expect(isWorkspaceRelativeAvatarPath("C:\\\\avatars\\\\openclaw.png")).toBe(true);
expect(isWorkspaceRelativeAvatarPath("https://example.com/avatar.png")).toBe(false);
expect(isWorkspaceRelativeAvatarPath("data:image/png;base64,AAAA")).toBe(false);
expect(isWorkspaceRelativeAvatarPath("~/avatar.png")).toBe(false);
expect(isWorkspaceRelativeAvatarPath("slack://avatar")).toBe(false);
expect(isWorkspaceRelativeAvatarPath("")).toBe(false);
});
it("checks path containment safely", () => {
const root = path.resolve("/tmp/root");
expect(isPathWithinRoot(root, root)).toBe(true);
expect(isPathWithinRoot(root, path.resolve("/tmp/root/avatars/a.png"))).toBe(true);
expect(isPathWithinRoot(root, path.resolve("/tmp/root/../outside.png"))).toBe(false);
expect(isPathWithinRoot(root, path.resolve("/tmp/root-sibling/avatar.png"))).toBe(false);
});
it("detects avatar-like path strings", () => {
expect(looksLikeAvatarPath("avatars/openclaw.svg")).toBe(true);
expect(looksLikeAvatarPath("openclaw.webp")).toBe(true);
expect(looksLikeAvatarPath("avatar.ico")).toBe(true);
expect(looksLikeAvatarPath("A")).toBe(false);
});
it("supports expected local file extensions", () => {
expect(isSupportedLocalAvatarExtension("avatar.png")).toBe(true);
expect(isSupportedLocalAvatarExtension("avatar.svg")).toBe(true);
expect(isSupportedLocalAvatarExtension("avatar.ico")).toBe(false);
});
it("resolves mime type from extension", () => {
expect(resolveAvatarMime("a.svg")).toBe("image/svg+xml");
expect(resolveAvatarMime("a.tiff")).toBe("image/tiff");
expect(resolveAvatarMime("A.PNG")).toBe("image/png");
expect(resolveAvatarMime("a.bin")).toBe("application/octet-stream");
});
});
|