@fedify/fedify 2.0.0-pr.435.1667 → 2.0.0-pr.445.1694
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/{actor-C3gJhZJj.cjs → actor-CwZ2m5rG.cjs} +7263 -2440
- package/dist/{actor-DMgu-ZjT.d.cts → actor-D6K058Tb.d.cts} +1 -1
- package/dist/{actor-Cpal85xW.js → actor-D8gCwLzv.js} +1 -1
- package/dist/{actor-CnVfp1Hp.js → actor-DoMcqXsW.js} +7263 -2440
- package/dist/{actor-C22bXuuC.d.ts → actor-T6RyhRgk.d.ts} +1 -1
- package/dist/{assert_rejects-7UF4R_Qs.js → assert_rejects-DiIiJbZn.js} +1 -1
- package/dist/{assert_throws-53_pKeP3.js → assert_throws-BOO88avQ.js} +1 -1
- package/dist/{authdocloader-DWnwkjvZ.js → authdocloader-Cv_qEn1G.js} +3 -3
- package/dist/{authdocloader-Df2BFefL.js → authdocloader-DYTNpaMA.js} +3 -3
- package/dist/{authdocloader-DPCGwidE.cjs → authdocloader-bsmVF6eO.cjs} +3 -3
- package/dist/{builder-CMxichO9.js → builder-1_skw-d2.js} +10 -4
- package/dist/{client-BqyuOGiQ.js → client-D5CBsPrc.js} +1 -1
- package/dist/compat/mod.d.cts +7 -7
- package/dist/compat/mod.d.ts +7 -7
- package/dist/compat/transformers.test.js +18 -17
- package/dist/{context-CDSZdQHD.d.ts → context-DBKpNBnc.d.ts} +66 -12
- package/dist/{context-Dq8aCtMH.d.cts → context-DiqjMRef.d.cts} +66 -12
- package/dist/{docloader-B1O1Z5OK.cjs → docloader-CYnQRIXv.cjs} +2 -2
- package/dist/{docloader-xJVzq9O0.js → docloader-Czl3xV10.js} +2 -2
- package/dist/{esm-BBznxjVc.js → esm-Dl5T1RNE.js} +1 -1
- package/dist/federation/builder.test.js +10 -10
- package/dist/federation/collection.test.js +8 -8
- package/dist/federation/handler.test.js +26 -145
- package/dist/federation/idempotency.test.d.ts +3 -0
- package/dist/federation/idempotency.test.js +202 -0
- package/dist/federation/inbox.test.js +6 -6
- package/dist/federation/keycache.test.js +4 -4
- package/dist/federation/kv.test.js +8 -8
- package/dist/federation/middleware.test.js +238 -44
- package/dist/federation/mod.cjs +10 -10
- package/dist/federation/mod.d.cts +7 -7
- package/dist/federation/mod.d.ts +7 -7
- package/dist/federation/mod.js +10 -10
- package/dist/federation/mq.test.js +10 -10
- package/dist/federation/negotiation.test.d.ts +3 -0
- package/dist/federation/negotiation.test.js +28 -0
- package/dist/federation/retry.test.js +5 -5
- package/dist/federation/router.test.js +8 -8
- package/dist/federation/send.test.js +15 -15
- package/dist/fixtures/media.example.com/avatars/test-avatar.jpg.json +6 -0
- package/dist/{http-Hw9HJp9i.cjs → http-CAusBl_3.cjs} +3 -3
- package/dist/{http-CovAm6we.js → http-C_Qc2neP.js} +3 -3
- package/dist/{http-y7khnX5Q.js → http-CuS-d4U0.js} +2 -2
- package/dist/{http-BS6766zs.d.cts → http-D-e6AFwR.d.cts} +1 -1
- package/dist/{http-DqSNLFNY.d.ts → http-D6Uj2x2y.d.ts} +1 -1
- package/dist/{inbox-DpcYOzs8.js → inbox-IETv_Qez.js} +24 -7
- package/dist/{key-BRmlopJL.js → key-BNJQQm3h.js} +2 -2
- package/dist/{key-lapZwBwG.js → key-C_ruQbbl.js} +4 -4
- package/dist/key-DIMJMxf4.cjs +10 -0
- package/dist/{key-DORX19Bl.js → key-DnqhSgAv.js} +2 -2
- package/dist/{key-jf6dIIF-.js → key-DpFjiItf.js} +3 -3
- package/dist/{key-CzF9SAEI.cjs → key-DuXv64tg.cjs} +2 -2
- package/dist/{keycache-AH1uj1j-.js → keycache-CSBkusP8.js} +1 -1
- package/dist/{keys-B3fzLXBG.js → keys-D3_MDK7n.js} +1 -1
- package/dist/{ld-D3cq9xO1.js → ld-Isot0tiW.js} +2 -2
- package/dist/{lookup-BrhURkmj.js → lookup-CbtuFbtg.js} +21 -12
- package/dist/{lookup-7u217Q3H.cjs → lookup-D6dro5Au.cjs} +1 -1
- package/dist/{lookup-CfU0DgLr.js → lookup-Dhm78GlK.js} +1 -1
- package/dist/middleware-BpR6186a.js +26 -0
- package/dist/{middleware-DXWUGrBQ.js → middleware-BuHr2fzh.js} +73 -81
- package/dist/middleware-DDMxdtWM.cjs +17 -0
- package/dist/{middleware-BDN7YoYJ.js → middleware-DQYscW90.js} +47 -142
- package/dist/{middleware-Gsxukxs5.cjs → middleware-Dgmdgrvb.cjs} +73 -81
- package/dist/middleware-T-knSMwl.js +17 -0
- package/dist/{mod-Drmz72EK.d.ts → mod-BhUKmBJD.d.ts} +2 -2
- package/dist/{mod-BhMnAkFX.d.cts → mod-Bpb5QLaZ.d.cts} +2 -2
- package/dist/{mod-TFoH2Ql8.d.ts → mod-CerN_Sza.d.ts} +1 -1
- package/dist/{mod-Dc_-mf8s.d.cts → mod-Cj1tHXBR.d.cts} +1 -1
- package/dist/{mod-evzlRVZq.d.cts → mod-CxkWO3Mg.d.cts} +19 -1
- package/dist/{mod-RI3-KvUI.d.ts → mod-D_y2y32N.d.ts} +2 -2
- package/dist/{mod-BClfg3ej.d.cts → mod-Djzcw2ry.d.cts} +2 -2
- package/dist/{mod-Cxt4Kpf6.d.ts → mod-DlU8ISoa.d.ts} +19 -1
- package/dist/mod.cjs +10 -10
- package/dist/mod.d.cts +10 -10
- package/dist/mod.d.ts +10 -10
- package/dist/mod.js +10 -10
- package/dist/negotiation-5NPJL6zp.js +71 -0
- package/dist/nodeinfo/client.test.js +10 -10
- package/dist/nodeinfo/handler.test.js +23 -22
- package/dist/nodeinfo/mod.cjs +2 -2
- package/dist/nodeinfo/mod.js +2 -2
- package/dist/nodeinfo/types.test.js +8 -8
- package/dist/{owner-B-7Ptt_m.d.cts → owner-BN_tO3cY.d.cts} +2 -2
- package/dist/{owner-NFlQJyvM.js → owner-ChSL4aJ7.js} +2 -2
- package/dist/{owner-CQPnQVtf.d.ts → owner-hd9lvQcP.d.ts} +2 -2
- package/dist/{proof-Be1oOYEh.js → proof-BiSCuwyA.js} +3 -3
- package/dist/{proof-Gip91fK7.cjs → proof-ONNmhInb.cjs} +3 -3
- package/dist/{proof-ar9xgPWi.js → proof-x3IBewan.js} +2 -2
- package/dist/runtime/authdocloader.test.js +14 -14
- package/dist/runtime/docloader.test.js +9 -9
- package/dist/runtime/key.test.js +10 -10
- package/dist/runtime/langstr.test.js +8 -8
- package/dist/runtime/link.test.js +3 -3
- package/dist/runtime/mod.cjs +6 -6
- package/dist/runtime/mod.d.cts +3 -3
- package/dist/runtime/mod.d.ts +3 -3
- package/dist/runtime/mod.js +6 -6
- package/dist/runtime/multibase/multibase.test.js +8 -8
- package/dist/runtime/url.test.js +5 -5
- package/dist/{send-DkwkMFjJ.js → send-D5fjmUEj.js} +2 -2
- package/dist/sig/http.test.js +13 -13
- package/dist/sig/key.test.js +11 -11
- package/dist/sig/ld.test.js +10 -10
- package/dist/sig/mod.cjs +6 -6
- package/dist/sig/mod.d.cts +5 -5
- package/dist/sig/mod.d.ts +5 -5
- package/dist/sig/mod.js +6 -6
- package/dist/sig/owner.test.js +12 -12
- package/dist/sig/proof.test.js +12 -12
- package/dist/testing/docloader.test.js +8 -8
- package/dist/testing/mod.d.ts +272 -0
- package/dist/testing/mod.js +3 -3
- package/dist/{testing-BMBhkcz9.js → testing-tWr1VQxx.js} +2 -2
- package/dist/{type-FCer_9yh.js → type-DaUr3Il7.js} +6944 -2121
- package/dist/{types-CZ_qo9KW.cjs → types-D2Nyz0tR.cjs} +1 -1
- package/dist/{types-CNWeAz8v.js → types-DQuSDtDg.js} +1 -1
- package/dist/vocab/actor.test.js +10 -10
- package/dist/vocab/lookup.test.js +259 -9
- package/dist/vocab/mod.cjs +4 -4
- package/dist/vocab/mod.d.cts +3 -3
- package/dist/vocab/mod.d.ts +3 -3
- package/dist/vocab/mod.js +4 -4
- package/dist/vocab/type.test.js +3 -3
- package/dist/vocab/vocab.test.js +402 -13
- package/dist/{vocab-SOE1ifCr.d.ts → vocab-BI0Ak5lL.d.ts} +290 -0
- package/dist/{vocab-9MjZjuZb.cjs → vocab-Dd4VMrr0.cjs} +23 -14
- package/dist/{vocab-DJTYMqyU.d.cts → vocab-Dw1-yVGg.d.cts} +290 -0
- package/dist/{vocab-gpwUU9fc.js → vocab-w--qk7HF.js} +23 -14
- package/dist/webfinger/handler.test.js +23 -22
- package/dist/webfinger/lookup.test.js +9 -9
- package/dist/webfinger/mod.cjs +2 -2
- package/dist/webfinger/mod.js +2 -2
- package/dist/x/cfworkers.test.js +8 -8
- package/dist/x/hono.d.cts +6 -6
- package/dist/x/hono.d.ts +6 -6
- package/dist/x/sveltekit.d.cts +6 -6
- package/dist/x/sveltekit.d.ts +6 -6
- package/package.json +1 -1
- package/dist/key-CV3FT32G.cjs +0 -10
- package/dist/middleware-CV-OPMlZ.js +0 -17
- package/dist/middleware-DGqnaAbp.cjs +0 -17
- package/dist/middleware-cCdfTTMv.js +0 -25
- /package/dist/{assert_is_error-B035L3om.js → assert_is_error-BPGph1Jx.js} +0 -0
- /package/dist/{assert_not_equals-C80BG-_5.js → assert_not_equals-f3m3epl3.js} +0 -0
- /package/dist/{denokv-jZ0Z2h0M.js → denokv-Bv33Xxea.js} +0 -0
- /package/dist/{retry-CfF8Gn4d.js → retry-D4GJ670a.js} +0 -0
- /package/dist/{std__assert-DWivtrGR.js → std__assert-X-_kMxKM.js} +0 -0
@@ -3,7 +3,7 @@
|
|
3
3
|
const { URLPattern } = require("urlpattern-polyfill");
|
4
4
|
|
5
5
|
const require_chunk = require('./chunk-DqRYRqnO.cjs');
|
6
|
-
const require_docloader = require('./docloader-
|
6
|
+
const require_docloader = require('./docloader-CYnQRIXv.cjs');
|
7
7
|
const __logtape_logtape = require_chunk.__toESM(require("@logtape/logtape"));
|
8
8
|
|
9
9
|
//#region src/nodeinfo/client.ts
|
@@ -2,7 +2,7 @@
|
|
2
2
|
import { Temporal } from "@js-temporal/polyfill";
|
3
3
|
import { URLPattern } from "urlpattern-polyfill";
|
4
4
|
|
5
|
-
import { getUserAgent } from "./docloader-
|
5
|
+
import { getUserAgent } from "./docloader-Czl3xV10.js";
|
6
6
|
import { getLogger } from "@logtape/logtape";
|
7
7
|
|
8
8
|
//#region src/nodeinfo/client.ts
|
package/dist/vocab/actor.test.js
CHANGED
@@ -3,19 +3,19 @@
|
|
3
3
|
import { URLPattern } from "urlpattern-polyfill";
|
4
4
|
globalThis.addEventListener = () => {};
|
5
5
|
|
6
|
-
import { Application, Group, Organization, Person, Service, __export } from "../type-
|
6
|
+
import { Application, Group, Organization, Person, Service, __export } from "../type-DaUr3Il7.js";
|
7
7
|
import { assertEquals } from "../assert_equals-DSbWqCm3.js";
|
8
8
|
import { assert } from "../assert-MZs1qjMx.js";
|
9
9
|
import "../assert_instance_of-DHz7EHNU.js";
|
10
|
-
import "../lookup-
|
11
|
-
import { getActorClassByTypeName, getActorHandle, getActorTypeName, isActor, normalizeActorHandle } from "../actor-
|
12
|
-
import { test } from "../testing-
|
13
|
-
import { assertStrictEquals } from "../std__assert-
|
14
|
-
import { assertFalse, assertRejects } from "../assert_rejects-
|
15
|
-
import "../assert_is_error-
|
16
|
-
import "../assert_not_equals-
|
17
|
-
import { assertThrows } from "../assert_throws-
|
18
|
-
import { esm_default } from "../esm-
|
10
|
+
import "../lookup-CbtuFbtg.js";
|
11
|
+
import { getActorClassByTypeName, getActorHandle, getActorTypeName, isActor, normalizeActorHandle } from "../actor-D8gCwLzv.js";
|
12
|
+
import { test } from "../testing-tWr1VQxx.js";
|
13
|
+
import { assertStrictEquals } from "../std__assert-X-_kMxKM.js";
|
14
|
+
import { assertFalse, assertRejects } from "../assert_rejects-DiIiJbZn.js";
|
15
|
+
import "../assert_is_error-BPGph1Jx.js";
|
16
|
+
import "../assert_not_equals-f3m3epl3.js";
|
17
|
+
import { assertThrows } from "../assert_throws-BOO88avQ.js";
|
18
|
+
import { esm_default } from "../esm-Dl5T1RNE.js";
|
19
19
|
|
20
20
|
//#region ../../node_modules/.pnpm/fast-check@3.23.2/node_modules/fast-check/lib/esm/check/precondition/PreconditionFailure.js
|
21
21
|
var PreconditionFailure = class PreconditionFailure extends Error {
|
@@ -3,18 +3,18 @@
|
|
3
3
|
import { URLPattern } from "urlpattern-polyfill";
|
4
4
|
globalThis.addEventListener = () => {};
|
5
5
|
|
6
|
-
import { Collection, Note, Object as Object$1, Person } from "../type-
|
6
|
+
import { Collection, Note, Object as Object$1, Person } from "../type-DaUr3Il7.js";
|
7
7
|
import { assertEquals } from "../assert_equals-DSbWqCm3.js";
|
8
8
|
import "../assert-MZs1qjMx.js";
|
9
9
|
import { assertInstanceOf } from "../assert_instance_of-DHz7EHNU.js";
|
10
|
-
import { lookupObject, traverseCollection } from "../lookup-
|
11
|
-
import { mockDocumentLoader, test } from "../testing-
|
12
|
-
import "../std__assert-
|
13
|
-
import "../assert_rejects-
|
14
|
-
import "../assert_is_error-
|
15
|
-
import "../assert_not_equals-
|
16
|
-
import "../assert_throws-
|
17
|
-
import { esm_default } from "../esm-
|
10
|
+
import { lookupObject, traverseCollection } from "../lookup-CbtuFbtg.js";
|
11
|
+
import { mockDocumentLoader, test } from "../testing-tWr1VQxx.js";
|
12
|
+
import "../std__assert-X-_kMxKM.js";
|
13
|
+
import { assertRejects } from "../assert_rejects-DiIiJbZn.js";
|
14
|
+
import "../assert_is_error-BPGph1Jx.js";
|
15
|
+
import "../assert_not_equals-f3m3epl3.js";
|
16
|
+
import "../assert_throws-BOO88avQ.js";
|
17
|
+
import { esm_default } from "../esm-Dl5T1RNE.js";
|
18
18
|
|
19
19
|
//#region src/vocab/lookup.test.ts
|
20
20
|
test("lookupObject()", {
|
@@ -202,5 +202,255 @@ test("traverseCollection()", {
|
|
202
202
|
new Note({ content: "This is a third simple note" })
|
203
203
|
]);
|
204
204
|
});
|
205
|
+
test("FEP-fe34: lookupObject() cross-origin security", {
|
206
|
+
sanitizeResources: false,
|
207
|
+
sanitizeOps: false
|
208
|
+
}, async (t) => {
|
209
|
+
await t.step("crossOrigin: ignore (default) - returns null for cross-origin objects", async () => {
|
210
|
+
const crossOriginDocumentLoader = async (url) => {
|
211
|
+
if (url === "https://example.com/note") return {
|
212
|
+
documentUrl: url,
|
213
|
+
contextUrl: null,
|
214
|
+
document: {
|
215
|
+
"@context": "https://www.w3.org/ns/activitystreams",
|
216
|
+
type: "Note",
|
217
|
+
id: "https://malicious.com/fake-note",
|
218
|
+
content: "This is a spoofed note from a different origin"
|
219
|
+
}
|
220
|
+
};
|
221
|
+
throw new Error(`Unexpected URL: ${url}`);
|
222
|
+
};
|
223
|
+
const result = await lookupObject("https://example.com/note", {
|
224
|
+
documentLoader: crossOriginDocumentLoader,
|
225
|
+
contextLoader: mockDocumentLoader
|
226
|
+
});
|
227
|
+
assertEquals(result, null);
|
228
|
+
});
|
229
|
+
await t.step("crossOrigin: throw - throws error for cross-origin objects", async () => {
|
230
|
+
const crossOriginDocumentLoader = async (url) => {
|
231
|
+
if (url === "https://example.com/note") return {
|
232
|
+
documentUrl: url,
|
233
|
+
contextUrl: null,
|
234
|
+
document: {
|
235
|
+
"@context": "https://www.w3.org/ns/activitystreams",
|
236
|
+
type: "Note",
|
237
|
+
id: "https://malicious.com/fake-note",
|
238
|
+
content: "This is a spoofed note from a different origin"
|
239
|
+
}
|
240
|
+
};
|
241
|
+
throw new Error(`Unexpected URL: ${url}`);
|
242
|
+
};
|
243
|
+
await assertRejects(() => lookupObject("https://example.com/note", {
|
244
|
+
documentLoader: crossOriginDocumentLoader,
|
245
|
+
contextLoader: mockDocumentLoader,
|
246
|
+
crossOrigin: "throw"
|
247
|
+
}), Error, "The object's @id (https://malicious.com/fake-note) has a different origin than the document URL (https://example.com/note)");
|
248
|
+
});
|
249
|
+
await t.step("crossOrigin: trust - allows cross-origin objects", async () => {
|
250
|
+
const crossOriginDocumentLoader = async (url) => {
|
251
|
+
if (url === "https://example.com/note") return {
|
252
|
+
documentUrl: url,
|
253
|
+
contextUrl: null,
|
254
|
+
document: {
|
255
|
+
"@context": "https://www.w3.org/ns/activitystreams",
|
256
|
+
type: "Note",
|
257
|
+
id: "https://malicious.com/fake-note",
|
258
|
+
content: "This is a spoofed note from a different origin"
|
259
|
+
}
|
260
|
+
};
|
261
|
+
throw new Error(`Unexpected URL: ${url}`);
|
262
|
+
};
|
263
|
+
const result = await lookupObject("https://example.com/note", {
|
264
|
+
documentLoader: crossOriginDocumentLoader,
|
265
|
+
contextLoader: mockDocumentLoader,
|
266
|
+
crossOrigin: "trust"
|
267
|
+
});
|
268
|
+
assertInstanceOf(result, Note);
|
269
|
+
assertEquals(result.id, new URL("https://malicious.com/fake-note"));
|
270
|
+
assertEquals(result.content, "This is a spoofed note from a different origin");
|
271
|
+
});
|
272
|
+
await t.step("same-origin objects are always trusted", async () => {
|
273
|
+
const sameOriginDocumentLoader = async (url) => {
|
274
|
+
if (url === "https://example.com/note") return {
|
275
|
+
documentUrl: url,
|
276
|
+
contextUrl: null,
|
277
|
+
document: {
|
278
|
+
"@context": "https://www.w3.org/ns/activitystreams",
|
279
|
+
type: "Note",
|
280
|
+
id: "https://example.com/note",
|
281
|
+
content: "This is a legitimate note from the same origin"
|
282
|
+
}
|
283
|
+
};
|
284
|
+
throw new Error(`Unexpected URL: ${url}`);
|
285
|
+
};
|
286
|
+
const result = await lookupObject("https://example.com/note", {
|
287
|
+
documentLoader: sameOriginDocumentLoader,
|
288
|
+
contextLoader: mockDocumentLoader
|
289
|
+
});
|
290
|
+
assertInstanceOf(result, Note);
|
291
|
+
assertEquals(result.id, new URL("https://example.com/note"));
|
292
|
+
assertEquals(result.content, "This is a legitimate note from the same origin");
|
293
|
+
});
|
294
|
+
await t.step("objects without @id are trusted", async () => {
|
295
|
+
const noIdDocumentLoader = async (url) => {
|
296
|
+
if (url === "https://example.com/note") return {
|
297
|
+
documentUrl: url,
|
298
|
+
contextUrl: null,
|
299
|
+
document: {
|
300
|
+
"@context": "https://www.w3.org/ns/activitystreams",
|
301
|
+
type: "Note",
|
302
|
+
content: "This is a note without an ID"
|
303
|
+
}
|
304
|
+
};
|
305
|
+
throw new Error(`Unexpected URL: ${url}`);
|
306
|
+
};
|
307
|
+
const result = await lookupObject("https://example.com/note", {
|
308
|
+
documentLoader: noIdDocumentLoader,
|
309
|
+
contextLoader: mockDocumentLoader
|
310
|
+
});
|
311
|
+
assertInstanceOf(result, Note);
|
312
|
+
assertEquals(result.id, null);
|
313
|
+
assertEquals(result.content, "This is a note without an ID");
|
314
|
+
});
|
315
|
+
await t.step("WebFinger lookup with cross-origin actor URL", async () => {
|
316
|
+
esm_default.spyGlobal();
|
317
|
+
esm_default.get("begin:https://example.com/.well-known/webfinger", {
|
318
|
+
subject: "acct:user@example.com",
|
319
|
+
links: [{
|
320
|
+
rel: "self",
|
321
|
+
href: "https://different-origin.com/actor",
|
322
|
+
type: "application/activity+json"
|
323
|
+
}]
|
324
|
+
});
|
325
|
+
const webfingerDocumentLoader = async (url) => {
|
326
|
+
if (url === "https://different-origin.com/actor") return {
|
327
|
+
documentUrl: url,
|
328
|
+
contextUrl: null,
|
329
|
+
document: {
|
330
|
+
"@context": "https://www.w3.org/ns/activitystreams",
|
331
|
+
type: "Person",
|
332
|
+
id: "https://malicious.com/fake-actor",
|
333
|
+
name: "Fake Actor"
|
334
|
+
}
|
335
|
+
};
|
336
|
+
throw new Error(`Unexpected URL: ${url}`);
|
337
|
+
};
|
338
|
+
const result1 = await lookupObject("@user@example.com", {
|
339
|
+
documentLoader: webfingerDocumentLoader,
|
340
|
+
contextLoader: mockDocumentLoader
|
341
|
+
});
|
342
|
+
assertEquals(result1, null);
|
343
|
+
await assertRejects(() => lookupObject("@user@example.com", {
|
344
|
+
documentLoader: webfingerDocumentLoader,
|
345
|
+
contextLoader: mockDocumentLoader,
|
346
|
+
crossOrigin: "throw"
|
347
|
+
}), Error, "The object's @id (https://malicious.com/fake-actor) has a different origin than the document URL (https://different-origin.com/actor)");
|
348
|
+
const result2 = await lookupObject("@user@example.com", {
|
349
|
+
documentLoader: webfingerDocumentLoader,
|
350
|
+
contextLoader: mockDocumentLoader,
|
351
|
+
crossOrigin: "trust"
|
352
|
+
});
|
353
|
+
assertInstanceOf(result2, Person);
|
354
|
+
assertEquals(result2.id, new URL("https://malicious.com/fake-actor"));
|
355
|
+
esm_default.removeRoutes();
|
356
|
+
esm_default.hardReset();
|
357
|
+
});
|
358
|
+
await t.step("subdomain same-origin check", async () => {
|
359
|
+
const subdomainDocumentLoader = async (url) => {
|
360
|
+
if (url === "https://api.example.com/note") return {
|
361
|
+
documentUrl: url,
|
362
|
+
contextUrl: null,
|
363
|
+
document: {
|
364
|
+
"@context": "https://www.w3.org/ns/activitystreams",
|
365
|
+
type: "Note",
|
366
|
+
id: "https://www.example.com/note",
|
367
|
+
content: "Cross-subdomain note"
|
368
|
+
}
|
369
|
+
};
|
370
|
+
throw new Error(`Unexpected URL: ${url}`);
|
371
|
+
};
|
372
|
+
const result = await lookupObject("https://api.example.com/note", {
|
373
|
+
documentLoader: subdomainDocumentLoader,
|
374
|
+
contextLoader: mockDocumentLoader
|
375
|
+
});
|
376
|
+
assertEquals(result, null);
|
377
|
+
});
|
378
|
+
await t.step("different port same-origin check", async () => {
|
379
|
+
const differentPortDocumentLoader = async (url) => {
|
380
|
+
if (url === "https://example.com:8080/note") return {
|
381
|
+
documentUrl: url,
|
382
|
+
contextUrl: null,
|
383
|
+
document: {
|
384
|
+
"@context": "https://www.w3.org/ns/activitystreams",
|
385
|
+
type: "Note",
|
386
|
+
id: "https://example.com:9090/note",
|
387
|
+
content: "Cross-port note"
|
388
|
+
}
|
389
|
+
};
|
390
|
+
throw new Error(`Unexpected URL: ${url}`);
|
391
|
+
};
|
392
|
+
const result = await lookupObject("https://example.com:8080/note", {
|
393
|
+
documentLoader: differentPortDocumentLoader,
|
394
|
+
contextLoader: mockDocumentLoader
|
395
|
+
});
|
396
|
+
assertEquals(result, null);
|
397
|
+
});
|
398
|
+
await t.step("protocol difference same-origin check", async () => {
|
399
|
+
const differentProtocolDocumentLoader = async (url) => {
|
400
|
+
if (url === "https://example.com/note") return {
|
401
|
+
documentUrl: url,
|
402
|
+
contextUrl: null,
|
403
|
+
document: {
|
404
|
+
"@context": "https://www.w3.org/ns/activitystreams",
|
405
|
+
type: "Note",
|
406
|
+
id: "http://example.com/note",
|
407
|
+
content: "Cross-protocol note"
|
408
|
+
}
|
409
|
+
};
|
410
|
+
throw new Error(`Unexpected URL: ${url}`);
|
411
|
+
};
|
412
|
+
const result = await lookupObject("https://example.com/note", {
|
413
|
+
documentLoader: differentProtocolDocumentLoader,
|
414
|
+
contextLoader: mockDocumentLoader
|
415
|
+
});
|
416
|
+
assertEquals(result, null);
|
417
|
+
});
|
418
|
+
await t.step("error handling with crossOrigin throw option", async () => {
|
419
|
+
const errorDocumentLoader = async (_url) => {
|
420
|
+
throw new Error("Network error");
|
421
|
+
};
|
422
|
+
const result = await lookupObject("https://example.com/note", {
|
423
|
+
documentLoader: errorDocumentLoader,
|
424
|
+
contextLoader: mockDocumentLoader,
|
425
|
+
crossOrigin: "throw"
|
426
|
+
});
|
427
|
+
assertEquals(result, null);
|
428
|
+
});
|
429
|
+
await t.step("malformed JSON handling with cross-origin policy", async () => {
|
430
|
+
const malformedJsonDocumentLoader = async (url) => {
|
431
|
+
if (url === "https://example.com/note") return {
|
432
|
+
documentUrl: url,
|
433
|
+
contextUrl: null,
|
434
|
+
document: "invalid json"
|
435
|
+
};
|
436
|
+
throw new Error(`Unexpected URL: ${url}`);
|
437
|
+
};
|
438
|
+
assertEquals(await lookupObject("https://example.com/note", {
|
439
|
+
documentLoader: malformedJsonDocumentLoader,
|
440
|
+
contextLoader: mockDocumentLoader,
|
441
|
+
crossOrigin: "ignore"
|
442
|
+
}), null);
|
443
|
+
assertEquals(await lookupObject("https://example.com/note", {
|
444
|
+
documentLoader: malformedJsonDocumentLoader,
|
445
|
+
contextLoader: mockDocumentLoader,
|
446
|
+
crossOrigin: "throw"
|
447
|
+
}), null);
|
448
|
+
assertEquals(await lookupObject("https://example.com/note", {
|
449
|
+
documentLoader: malformedJsonDocumentLoader,
|
450
|
+
contextLoader: mockDocumentLoader,
|
451
|
+
crossOrigin: "trust"
|
452
|
+
}), null);
|
453
|
+
});
|
454
|
+
});
|
205
455
|
|
206
456
|
//#endregion
|
package/dist/vocab/mod.cjs
CHANGED
@@ -2,10 +2,10 @@
|
|
2
2
|
const { Temporal } = require("@js-temporal/polyfill");
|
3
3
|
const { URLPattern } = require("urlpattern-polyfill");
|
4
4
|
|
5
|
-
require('../docloader-
|
6
|
-
const require_actor = require('../actor-
|
7
|
-
require('../lookup-
|
8
|
-
const require_vocab = require('../vocab-
|
5
|
+
require('../docloader-CYnQRIXv.cjs');
|
6
|
+
const require_actor = require('../actor-CwZ2m5rG.cjs');
|
7
|
+
require('../lookup-D6dro5Au.cjs');
|
8
|
+
const require_vocab = require('../vocab-Dd4VMrr0.cjs');
|
9
9
|
|
10
10
|
exports.Accept = require_actor.Accept;
|
11
11
|
exports.Activity = require_actor.Activity;
|
package/dist/vocab/mod.d.cts
CHANGED
@@ -1,6 +1,6 @@
|
|
1
1
|
import "../kv-63Cil1MD.cjs";
|
2
2
|
import "../docloader-D-MrRyHl.cjs";
|
3
|
-
import { Accept, Activity, Add, Announce, Application, Arrive, Article, Audio, Block, ChatMessage, Collection, CollectionPage, Create, CryptographicKey, DataIntegrityProof, Delete, DidService, Dislike, Document, Emoji, EmojiReact, Endpoints, Event, Export, Flag, Follow, Group, Hashtag, Ignore, Image, IntransitiveActivity, Invite, Join, Leave, Like, Link, Listen, Mention, Move, Multikey, Note, Object as Object$1, Offer, OrderedCollection, OrderedCollectionPage, Organization, Page, Person, Place, Profile, PropertyValue, Question, Read, Reject, Relationship, Remove, Service, Source, TentativeAccept, TentativeReject, Tombstone, Travel, Undo, Update, Video, View } from "../vocab-
|
4
|
-
import { Actor, ActorTypeName, GetActorHandleOptions, NormalizeActorHandleOptions, Recipient, getActorClassByTypeName, getActorHandle, getActorTypeName, isActor, normalizeActorHandle } from "../actor-
|
5
|
-
import { FediverseHandle, LookupObjectOptions, PUBLIC_COLLECTION, TraverseCollectionOptions, getTypeId, isFediverseHandle, lookupObject, parseFediverseHandle, toAcctUrl, traverseCollection } from "../mod-
|
3
|
+
import { Accept, Activity, Add, Announce, Application, Arrive, Article, Audio, Block, ChatMessage, Collection, CollectionPage, Create, CryptographicKey, DataIntegrityProof, Delete, DidService, Dislike, Document, Emoji, EmojiReact, Endpoints, Event, Export, Flag, Follow, Group, Hashtag, Ignore, Image, IntransitiveActivity, Invite, Join, Leave, Like, Link, Listen, Mention, Move, Multikey, Note, Object as Object$1, Offer, OrderedCollection, OrderedCollectionPage, Organization, Page, Person, Place, Profile, PropertyValue, Question, Read, Reject, Relationship, Remove, Service, Source, TentativeAccept, TentativeReject, Tombstone, Travel, Undo, Update, Video, View } from "../vocab-Dw1-yVGg.cjs";
|
4
|
+
import { Actor, ActorTypeName, GetActorHandleOptions, NormalizeActorHandleOptions, Recipient, getActorClassByTypeName, getActorHandle, getActorTypeName, isActor, normalizeActorHandle } from "../actor-D6K058Tb.cjs";
|
5
|
+
import { FediverseHandle, LookupObjectOptions, PUBLIC_COLLECTION, TraverseCollectionOptions, getTypeId, isFediverseHandle, lookupObject, parseFediverseHandle, toAcctUrl, traverseCollection } from "../mod-CxkWO3Mg.cjs";
|
6
6
|
export { Accept, Activity, Actor, ActorTypeName, Add, Announce, Application, Arrive, Article, Audio, Block, ChatMessage, Collection, CollectionPage, Create, CryptographicKey, DataIntegrityProof, Delete, DidService, Dislike, Document, Emoji, EmojiReact, Endpoints, Event, Export, FediverseHandle, Flag, Follow, GetActorHandleOptions, Group, Hashtag, Ignore, Image, IntransitiveActivity, Invite, Join, Leave, Like, Link, Listen, LookupObjectOptions, Mention, Move, Multikey, NormalizeActorHandleOptions, Note, Object$1 as Object, Offer, OrderedCollection, OrderedCollectionPage, Organization, PUBLIC_COLLECTION, Page, Person, Place, Profile, PropertyValue, Question, Read, Recipient, Reject, Relationship, Remove, Service, Source, TentativeAccept, TentativeReject, Tombstone, Travel, TraverseCollectionOptions, Undo, Update, Video, View, getActorClassByTypeName, getActorHandle, getActorTypeName, getTypeId, isActor, isFediverseHandle, lookupObject, normalizeActorHandle, parseFediverseHandle, toAcctUrl, traverseCollection };
|
package/dist/vocab/mod.d.ts
CHANGED
@@ -2,7 +2,7 @@ import { Temporal } from "@js-temporal/polyfill";
|
|
2
2
|
import { URLPattern } from "urlpattern-polyfill";
|
3
3
|
import "../kv-C7sopW2E.js";
|
4
4
|
import "../docloader-CxWcuWqQ.js";
|
5
|
-
import { Accept, Activity, Add, Announce, Application, Arrive, Article, Audio, Block, ChatMessage, Collection, CollectionPage, Create, CryptographicKey, DataIntegrityProof, Delete, DidService, Dislike, Document, Emoji, EmojiReact, Endpoints, Event, Export, Flag, Follow, Group, Hashtag, Ignore, Image, IntransitiveActivity, Invite, Join, Leave, Like, Link, Listen, Mention, Move, Multikey, Note, Object as Object$1, Offer, OrderedCollection, OrderedCollectionPage, Organization, Page, Person, Place, Profile, PropertyValue, Question, Read, Reject, Relationship, Remove, Service, Source, TentativeAccept, TentativeReject, Tombstone, Travel, Undo, Update, Video, View } from "../vocab-
|
6
|
-
import { Actor, ActorTypeName, GetActorHandleOptions, NormalizeActorHandleOptions, Recipient, getActorClassByTypeName, getActorHandle, getActorTypeName, isActor, normalizeActorHandle } from "../actor-
|
7
|
-
import { FediverseHandle, LookupObjectOptions, PUBLIC_COLLECTION, TraverseCollectionOptions, getTypeId, isFediverseHandle, lookupObject, parseFediverseHandle, toAcctUrl, traverseCollection } from "../mod-
|
5
|
+
import { Accept, Activity, Add, Announce, Application, Arrive, Article, Audio, Block, ChatMessage, Collection, CollectionPage, Create, CryptographicKey, DataIntegrityProof, Delete, DidService, Dislike, Document, Emoji, EmojiReact, Endpoints, Event, Export, Flag, Follow, Group, Hashtag, Ignore, Image, IntransitiveActivity, Invite, Join, Leave, Like, Link, Listen, Mention, Move, Multikey, Note, Object as Object$1, Offer, OrderedCollection, OrderedCollectionPage, Organization, Page, Person, Place, Profile, PropertyValue, Question, Read, Reject, Relationship, Remove, Service, Source, TentativeAccept, TentativeReject, Tombstone, Travel, Undo, Update, Video, View } from "../vocab-BI0Ak5lL.js";
|
6
|
+
import { Actor, ActorTypeName, GetActorHandleOptions, NormalizeActorHandleOptions, Recipient, getActorClassByTypeName, getActorHandle, getActorTypeName, isActor, normalizeActorHandle } from "../actor-T6RyhRgk.js";
|
7
|
+
import { FediverseHandle, LookupObjectOptions, PUBLIC_COLLECTION, TraverseCollectionOptions, getTypeId, isFediverseHandle, lookupObject, parseFediverseHandle, toAcctUrl, traverseCollection } from "../mod-DlU8ISoa.js";
|
8
8
|
export { Accept, Activity, Actor, ActorTypeName, Add, Announce, Application, Arrive, Article, Audio, Block, ChatMessage, Collection, CollectionPage, Create, CryptographicKey, DataIntegrityProof, Delete, DidService, Dislike, Document, Emoji, EmojiReact, Endpoints, Event, Export, FediverseHandle, Flag, Follow, GetActorHandleOptions, Group, Hashtag, Ignore, Image, IntransitiveActivity, Invite, Join, Leave, Like, Link, Listen, LookupObjectOptions, Mention, Move, Multikey, NormalizeActorHandleOptions, Note, Object$1 as Object, Offer, OrderedCollection, OrderedCollectionPage, Organization, PUBLIC_COLLECTION, Page, Person, Place, Profile, PropertyValue, Question, Read, Recipient, Reject, Relationship, Remove, Service, Source, TentativeAccept, TentativeReject, Tombstone, Travel, TraverseCollectionOptions, Undo, Update, Video, View, getActorClassByTypeName, getActorHandle, getActorTypeName, getTypeId, isActor, isFediverseHandle, lookupObject, normalizeActorHandle, parseFediverseHandle, toAcctUrl, traverseCollection };
|
package/dist/vocab/mod.js
CHANGED
@@ -2,9 +2,9 @@
|
|
2
2
|
import { Temporal } from "@js-temporal/polyfill";
|
3
3
|
import { URLPattern } from "urlpattern-polyfill";
|
4
4
|
|
5
|
-
import "../docloader-
|
6
|
-
import { Accept, Activity, Add, Announce, Application, Arrive, Article, Audio, Block, ChatMessage, Collection, CollectionPage, Create, CryptographicKey, DataIntegrityProof, Delete, DidService, Dislike, Document, Emoji, EmojiReact, Endpoints, Event, Export, Flag, Follow, Group, Hashtag, Ignore, Image, IntransitiveActivity, Invite, Join, Leave, Like, Link, Listen, Mention, Move, Multikey, Note, Object as Object$1, Offer, OrderedCollection, OrderedCollectionPage, Organization, Page, Person, Place, Profile, PropertyValue, Question, Read, Reject, Relationship, Remove, Service, Source, TentativeAccept, TentativeReject, Tombstone, Travel, Undo, Update, Video, View, getActorClassByTypeName, getActorHandle, getActorTypeName, getTypeId, isActor, normalizeActorHandle } from "../actor-
|
7
|
-
import "../lookup-
|
8
|
-
import { PUBLIC_COLLECTION, isFediverseHandle, lookupObject, parseFediverseHandle, toAcctUrl, traverseCollection } from "../vocab-
|
5
|
+
import "../docloader-Czl3xV10.js";
|
6
|
+
import { Accept, Activity, Add, Announce, Application, Arrive, Article, Audio, Block, ChatMessage, Collection, CollectionPage, Create, CryptographicKey, DataIntegrityProof, Delete, DidService, Dislike, Document, Emoji, EmojiReact, Endpoints, Event, Export, Flag, Follow, Group, Hashtag, Ignore, Image, IntransitiveActivity, Invite, Join, Leave, Like, Link, Listen, Mention, Move, Multikey, Note, Object as Object$1, Offer, OrderedCollection, OrderedCollectionPage, Organization, Page, Person, Place, Profile, PropertyValue, Question, Read, Reject, Relationship, Remove, Service, Source, TentativeAccept, TentativeReject, Tombstone, Travel, Undo, Update, Video, View, getActorClassByTypeName, getActorHandle, getActorTypeName, getTypeId, isActor, normalizeActorHandle } from "../actor-DoMcqXsW.js";
|
7
|
+
import "../lookup-Dhm78GlK.js";
|
8
|
+
import { PUBLIC_COLLECTION, isFediverseHandle, lookupObject, parseFediverseHandle, toAcctUrl, traverseCollection } from "../vocab-w--qk7HF.js";
|
9
9
|
|
10
10
|
export { Accept, Activity, Add, Announce, Application, Arrive, Article, Audio, Block, ChatMessage, Collection, CollectionPage, Create, CryptographicKey, DataIntegrityProof, Delete, DidService, Dislike, Document, Emoji, EmojiReact, Endpoints, Event, Export, Flag, Follow, Group, Hashtag, Ignore, Image, IntransitiveActivity, Invite, Join, Leave, Like, Link, Listen, Mention, Move, Multikey, Note, Object$1 as Object, Offer, OrderedCollection, OrderedCollectionPage, Organization, PUBLIC_COLLECTION, Page, Person, Place, Profile, PropertyValue, Question, Read, Reject, Relationship, Remove, Service, Source, TentativeAccept, TentativeReject, Tombstone, Travel, Undo, Update, Video, View, getActorClassByTypeName, getActorHandle, getActorTypeName, getTypeId, isActor, isFediverseHandle, lookupObject, normalizeActorHandle, parseFediverseHandle, toAcctUrl, traverseCollection };
|
package/dist/vocab/type.test.js
CHANGED
@@ -3,10 +3,10 @@
|
|
3
3
|
import { URLPattern } from "urlpattern-polyfill";
|
4
4
|
globalThis.addEventListener = () => {};
|
5
5
|
|
6
|
-
import { Person, getTypeId } from "../type-
|
6
|
+
import { Person, getTypeId } from "../type-DaUr3Il7.js";
|
7
7
|
import { assertEquals } from "../assert_equals-DSbWqCm3.js";
|
8
|
-
import "../lookup-
|
9
|
-
import { test } from "../testing-
|
8
|
+
import "../lookup-CbtuFbtg.js";
|
9
|
+
import { test } from "../testing-tWr1VQxx.js";
|
10
10
|
|
11
11
|
//#region src/vocab/type.test.ts
|
12
12
|
test("getTypeId()", () => {
|