@blamejs/blamejs-shop 0.5.12 → 0.5.13

package/lib/vendor/blamejs/test/layer-0-primitives/parsers-standalone.test.js

@@ -283,6 +283,76 @@ async function testMultipartRepeatedFieldShapeUnchanged() {
   check("multipart: single field stays scalar", result.fields.title === "solo");
 }
 
+// The standalone parser must honor the documented `storage: "memory"` knob
+// (serverless / read-only FS): the file part is buffered in RAM (files[].buffer)
+// with no tmp path, instead of silently falling back to disk mode.
+async function testMultipartStorageMemoryBuffersInRam() {
+  var boundary = "----blamejstest" + Date.now();
+  var body = _multipartBody(boundary, [
+    { name: "upload", filename: "mem.txt", contentType: "text/plain", value: "in-memory-bytes" },
+  ]);
+  var req = _streamReq({
+    headers: {
+      "content-type":   "multipart/form-data; boundary=" + boundary,
+      "content-length": String(Buffer.byteLength(body)),
+    },
+    body: body,
+  });
+  var result = await b.parsers.multipart(req, { storage: "memory", maxBytes: b.constants.BYTES.mib(1) });
+  check("parsers.multipart storage:memory buffers the file in RAM",
+        result.files.length === 1 && Buffer.isBuffer(result.files[0].buffer) &&
+        result.files[0].buffer.toString() === "in-memory-bytes");
+  check("parsers.multipart storage:memory writes no tmp path",
+        result.files[0].path === undefined || result.files[0].path === null);
+}
+
+// A bad `storage` value is an operator-config error → throw a TypeError at the
+// call (mirrors b.middleware.bodyParser), not a silent disk-mode fallback.
+async function testMultipartStorageRejectsBadValue() {
+  var boundary = "----blamejstest" + Date.now();
+  var body = _multipartBody(boundary, [{ name: "f", value: "x" }]);
+  var req = _streamReq({
+    headers: {
+      "content-type":   "multipart/form-data; boundary=" + boundary,
+      "content-length": String(Buffer.byteLength(body)),
+    },
+    body: body,
+  });
+  var threw = null;
+  try { await b.parsers.multipart(req, { storage: "ram" }); } catch (e) { threw = e; }
+  check("parsers.multipart rejects an invalid storage value with a TypeError",
+        threw instanceof TypeError);
+}
+
+// The documented `filenameCharsets` knob must pass through: a
+// filename*=ISO-8859-1'' part is refused by default (utf-8 only, legacy
+// filename= wins) and decoded only when the operator opts iso-8859-1 in.
+async function testMultipartFilenameCharsetsOptIn() {
+  var boundary = "----blamejstest" + Date.now();
+  var body =
+    "--" + boundary + "\r\n" +
+    "Content-Disposition: form-data; name=\"doc\"; " +
+      "filename=\"fallback.txt\"; filename*=ISO-8859-1''r%E9sum%E9.txt\r\n" +
+    "Content-Type: text/plain\r\n\r\n" +
+    "hello\r\n" +
+    "--" + boundary + "--\r\n";
+  function _mk() {
+    return _streamReq({
+      headers: {
+        "content-type":   "multipart/form-data; boundary=" + boundary,
+        "content-length": String(Buffer.byteLength(body)),
+      },
+      body: body,
+    });
+  }
+  var def = await b.parsers.multipart(_mk(), { storage: "memory" });
+  check("parsers.multipart default refuses iso-8859-1 filename* (legacy filename= wins)",
+        def.files[0].filename === "fallback.txt");
+  var optIn = await b.parsers.multipart(_mk(), { storage: "memory", filenameCharsets: ["utf-8", "iso-8859-1"] });
+  check("parsers.multipart filenameCharsets opt-in decodes iso-8859-1 to résumé.txt",
+        optIn.files[0].filename === "résumé.txt");
+}
+
 async function run() {
   await testJsonParsesValidObject();
   await testJsonRefusesOverMaxBytes();
@@ -297,6 +367,9 @@ async function run() {
   testContentTypeIgnoresPoisonedParam();
   await testMultipartRefusesPoisonedFieldName();
   await testMultipartRepeatedFieldShapeUnchanged();
+  await testMultipartStorageMemoryBuffersInRam();
+  await testMultipartStorageRejectsBadValue();
+  await testMultipartFilenameCharsetsOptIn();
   console.log("OK — parsers-standalone tests");
 }