@fedify/vocab 2.1.29 → 2.1.31

package/dist-tests/actor.test.mjs

@@ -1,7 +1,7 @@
 import "@js-temporal/polyfill";
 globalThis.addEventListener = () => {};
-import { T as __exportAll, _ as Person, g as Organization, i as Application, u as Group, x as Service } from "./vocab-B3y8bfAx.mjs";
-import { n as version, r as esm_default, t as name } from "./deno-tjMY3c_k.mjs";
+import { T as __exportAll, _ as Person, g as Organization, i as Application, u as Group, x as Service } from "./vocab-De7fFc2M.mjs";
+import { n as version, r as esm_default, t as name } from "./deno-B6BABxfi.mjs";
 import { t as getTypeId } from "./type-Cf-vxmre.mjs";
 import { test } from "@fedify/fixture";
 import { deepStrictEqual, ok, rejects, strictEqual, throws } from "node:assert/strict";

package/dist-tests/{deno-tjMY3c_k.mjs → deno-B6BABxfi.mjs}

@@ -1,6 +1,6 @@
 import "@js-temporal/polyfill";
 globalThis.addEventListener = () => {};
-import { E as __toESM, w as __commonJSMin } from "./vocab-B3y8bfAx.mjs";
+import { E as __toESM, w as __commonJSMin } from "./vocab-De7fFc2M.mjs";
 //#region ../../node_modules/.pnpm/glob-to-regexp@0.4.1/node_modules/glob-to-regexp/index.js
 var require_glob_to_regexp = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	module.exports = function(glob, opts) {
@@ -1204,6 +1204,6 @@ var esm_default = new class FetchMock {
 //#endregion
 //#region deno.json
 var name = "@fedify/vocab";
-var version = "2.1.29";
+var version = "2.1.31";
 //#endregion
 export { version as n, esm_default as r, name as t };

package/dist-tests/lookup.test.mjs

@@ -1,7 +1,7 @@
 import { Temporal } from "@js-temporal/polyfill";
 globalThis.addEventListener = () => {};
-import { _ as Person, a as Collection, m as Object$1, p as Note } from "./vocab-B3y8bfAx.mjs";
-import { n as version, r as esm_default, t as name } from "./deno-tjMY3c_k.mjs";
+import { _ as Person, a as Collection, m as Object$1, p as Note } from "./vocab-De7fFc2M.mjs";
+import { n as version, r as esm_default, t as name } from "./deno-B6BABxfi.mjs";
 import { t as getTypeId } from "./type-Cf-vxmre.mjs";
 import { t as assertInstanceOf } from "./utils-CE8Dk5hm.mjs";
 import { createTestTracerProvider, mockDocumentLoader, test } from "@fedify/fixture";
@@ -220,6 +220,7 @@ async function* traverseCollection(collection, options = {}) {
 }
 //#endregion
 //#region src/lookup.test.ts
+const allowPrivateAddress = { allowPrivateAddress: true };
 test("lookupObject()", {
 	sanitizeResources: false,
 	sanitizeOps: false
@@ -247,7 +248,8 @@ test("lookupObject()", {
 	});
 	const options = {
 		documentLoader: mockDocumentLoader,
-		contextLoader: mockDocumentLoader
+		contextLoader: mockDocumentLoader,
+		...allowPrivateAddress
 	};
 	await t.step("actor", async () => {
 		const person = await lookupObject("@johndoe@example.com", options);
@@ -538,15 +540,18 @@ test("FEP-fe34: lookupObject() cross-origin security", {
 			throw new Error(`Unexpected URL: ${url}`);
 		};
 		deepStrictEqual(await lookupObject("@user@example.com", {
+			...allowPrivateAddress,
 			documentLoader: webfingerDocumentLoader,
 			contextLoader: mockDocumentLoader
 		}), null);
 		await rejects(() => lookupObject("@user@example.com", {
+			...allowPrivateAddress,
 			documentLoader: webfingerDocumentLoader,
 			contextLoader: mockDocumentLoader,
 			crossOrigin: "throw"
 		}), Error, "The object's @id (https://malicious.com/fake-actor) has a different origin than the document URL (https://different-origin.com/actor)");
 		const result2 = await lookupObject("@user@example.com", {
+			...allowPrivateAddress,
 			documentLoader: webfingerDocumentLoader,
 			contextLoader: mockDocumentLoader,
 			crossOrigin: "trust"
@@ -617,11 +622,20 @@ test("FEP-fe34: lookupObject() cross-origin security", {
 		const errorDocumentLoader = async (_url) => {
 			throw new Error("Network error");
 		};
-		deepStrictEqual(await lookupObject("https://example.com/note", {
-			documentLoader: errorDocumentLoader,
-			contextLoader: mockDocumentLoader,
-			crossOrigin: "throw"
-		}), null);
+		esm_default.spyGlobal();
+		esm_default.get("begin:https://example.com/.well-known/webfinger", 404);
+		let result;
+		try {
+			result = await lookupObject("https://example.com/note", {
+				...allowPrivateAddress,
+				documentLoader: errorDocumentLoader,
+				contextLoader: mockDocumentLoader,
+				crossOrigin: "throw"
+			});
+		} finally {
+			esm_default.hardReset();
+		}
+		deepStrictEqual(result, null);
 	});
 	await t.step("malformed JSON handling with cross-origin policy", async () => {
 		const malformedJsonDocumentLoader = async (url) => {

package/dist-tests/type.test.mjs

@@ -1,6 +1,6 @@
 import "@js-temporal/polyfill";
 globalThis.addEventListener = () => {};
-import { _ as Person } from "./vocab-B3y8bfAx.mjs";
+import { _ as Person } from "./vocab-De7fFc2M.mjs";
 import { t as getTypeId } from "./type-Cf-vxmre.mjs";
 import { test } from "@fedify/fixture";
 import { deepStrictEqual } from "node:assert/strict";