@flextudio/scenario 0.1.0

package/node_modules/fast-uri/test/parse.test.js

@@ -0,0 +1,323 @@
+'use strict'
+
+const test = require('tape')
+const fastURI = require('..')
+
+test('URI parse', (t) => {
+  let components
+
+  // scheme
+  components = fastURI.parse('uri:')
+  t.equal(components.error, undefined, 'scheme errors')
+  t.equal(components.scheme, 'uri', 'scheme')
+  // t.equal(components.authority, undefined, "authority");
+  t.equal(components.userinfo, undefined, 'userinfo')
+  t.equal(components.host, undefined, 'host')
+  t.equal(components.port, undefined, 'port')
+  t.equal(components.path, '', 'path')
+  t.equal(components.query, undefined, 'query')
+  t.equal(components.fragment, undefined, 'fragment')
+
+  // userinfo
+  components = fastURI.parse('//@')
+  t.equal(components.error, undefined, 'userinfo errors')
+  t.equal(components.scheme, undefined, 'scheme')
+  // t.equal(components.authority, "@", "authority");
+  t.equal(components.userinfo, '', 'userinfo')
+  t.equal(components.host, '', 'host')
+  t.equal(components.port, undefined, 'port')
+  t.equal(components.path, '', 'path')
+  t.equal(components.query, undefined, 'query')
+  t.equal(components.fragment, undefined, 'fragment')
+
+  // host
+  components = fastURI.parse('//')
+  t.equal(components.error, undefined, 'host errors')
+  t.equal(components.scheme, undefined, 'scheme')
+  // t.equal(components.authority, "", "authority");
+  t.equal(components.userinfo, undefined, 'userinfo')
+  t.equal(components.host, '', 'host')
+  t.equal(components.port, undefined, 'port')
+  t.equal(components.path, '', 'path')
+  t.equal(components.query, undefined, 'query')
+  t.equal(components.fragment, undefined, 'fragment')
+
+  // port
+  components = fastURI.parse('//:')
+  t.equal(components.error, undefined, 'port errors')
+  t.equal(components.scheme, undefined, 'scheme')
+  // t.equal(components.authority, ":", "authority");
+  t.equal(components.userinfo, undefined, 'userinfo')
+  t.equal(components.host, '', 'host')
+  t.equal(components.port, '', 'port')
+  t.equal(components.path, '', 'path')
+  t.equal(components.query, undefined, 'query')
+  t.equal(components.fragment, undefined, 'fragment')
+
+  // path
+  components = fastURI.parse('')
+  t.equal(components.error, undefined, 'path errors')
+  t.equal(components.scheme, undefined, 'scheme')
+  // t.equal(components.authority, undefined, "authority");
+  t.equal(components.userinfo, undefined, 'userinfo')
+  t.equal(components.host, undefined, 'host')
+  t.equal(components.port, undefined, 'port')
+  t.equal(components.path, '', 'path')
+  t.equal(components.query, undefined, 'query')
+  t.equal(components.fragment, undefined, 'fragment')
+
+  // query
+  components = fastURI.parse('?')
+  t.equal(components.error, undefined, 'query errors')
+  t.equal(components.scheme, undefined, 'scheme')
+  // t.equal(components.authority, undefined, "authority");
+  t.equal(components.userinfo, undefined, 'userinfo')
+  t.equal(components.host, undefined, 'host')
+  t.equal(components.port, undefined, 'port')
+  t.equal(components.path, '', 'path')
+  t.equal(components.query, '', 'query')
+  t.equal(components.fragment, undefined, 'fragment')
+
+  // fragment
+  components = fastURI.parse('#')
+  t.equal(components.error, undefined, 'fragment errors')
+  t.equal(components.scheme, undefined, 'scheme')
+  // t.equal(components.authority, undefined, "authority");
+  t.equal(components.userinfo, undefined, 'userinfo')
+  t.equal(components.host, undefined, 'host')
+  t.equal(components.port, undefined, 'port')
+  t.equal(components.path, '', 'path')
+  t.equal(components.query, undefined, 'query')
+  t.equal(components.fragment, '', 'fragment')
+
+  // fragment with character tabulation
+  components = fastURI.parse('#\t')
+  t.equal(components.error, undefined, 'path errors')
+  t.equal(components.scheme, undefined, 'scheme')
+  // t.equal(components.authority, undefined, "authority");
+  t.equal(components.userinfo, undefined, 'userinfo')
+  t.equal(components.host, undefined, 'host')
+  t.equal(components.port, undefined, 'port')
+  t.equal(components.path, '', 'path')
+  t.equal(components.query, undefined, 'query')
+  t.equal(components.fragment, '%09', 'fragment')
+
+  // fragment with line feed
+  components = fastURI.parse('#\n')
+  t.equal(components.error, undefined, 'path errors')
+  t.equal(components.scheme, undefined, 'scheme')
+  // t.equal(components.authority, undefined, "authority");
+  t.equal(components.userinfo, undefined, 'userinfo')
+  t.equal(components.host, undefined, 'host')
+  t.equal(components.port, undefined, 'port')
+  t.equal(components.path, '', 'path')
+  t.equal(components.query, undefined, 'query')
+  t.equal(components.fragment, '%0A', 'fragment')
+
+  // fragment with line tabulation
+  components = fastURI.parse('#\v')
+  t.equal(components.error, undefined, 'path errors')
+  t.equal(components.scheme, undefined, 'scheme')
+  // t.equal(components.authority, undefined, "authority");
+  t.equal(components.userinfo, undefined, 'userinfo')
+  t.equal(components.host, undefined, 'host')
+  t.equal(components.port, undefined, 'port')
+  t.equal(components.path, '', 'path')
+  t.equal(components.query, undefined, 'query')
+  t.equal(components.fragment, '%0B', 'fragment')
+
+  // fragment with form feed
+  components = fastURI.parse('#\f')
+  t.equal(components.error, undefined, 'path errors')
+  t.equal(components.scheme, undefined, 'scheme')
+  // t.equal(components.authority, undefined, "authority");
+  t.equal(components.userinfo, undefined, 'userinfo')
+  t.equal(components.host, undefined, 'host')
+  t.equal(components.port, undefined, 'port')
+  t.equal(components.path, '', 'path')
+  t.equal(components.query, undefined, 'query')
+  t.equal(components.fragment, '%0C', 'fragment')
+
+  // fragment with carriage return
+  components = fastURI.parse('#\r')
+  t.equal(components.error, undefined, 'path errors')
+  t.equal(components.scheme, undefined, 'scheme')
+  // t.equal(components.authority, undefined, "authority");
+  t.equal(components.userinfo, undefined, 'userinfo')
+  t.equal(components.host, undefined, 'host')
+  t.equal(components.port, undefined, 'port')
+  t.equal(components.path, '', 'path')
+  t.equal(components.query, undefined, 'query')
+  t.equal(components.fragment, '%0D', 'fragment')
+
+  // malformed percent-encoded fragment must not throw
+  components = fastURI.parse('http://example.com/#%E0%A4A')
+  t.equal(components.error, 'URI malformed', 'malformed fragment errors')
+  t.equal(components.fragment, '%E0%A4A', 'malformed fragment is preserved')
+
+  // all
+  components = fastURI.parse('uri://user:pass@example.com:123/one/two.three?q1=a1&q2=a2#body')
+  t.equal(components.error, undefined, 'all errors')
+  t.equal(components.scheme, 'uri', 'scheme')
+  // t.equal(components.authority, "user:pass@example.com:123", "authority");
+  t.equal(components.userinfo, 'user:pass', 'userinfo')
+  t.equal(components.host, 'example.com', 'host')
+  t.equal(components.port, 123, 'port')
+  t.equal(components.path, '/one/two.three', 'path')
+  t.equal(components.query, 'q1=a1&q2=a2', 'query')
+  t.equal(components.fragment, 'body', 'fragment')
+
+  // IPv4address
+  components = fastURI.parse('//10.10.10.10')
+  t.equal(components.error, undefined, 'IPv4address errors')
+  t.equal(components.scheme, undefined, 'scheme')
+  t.equal(components.userinfo, undefined, 'userinfo')
+  t.equal(components.host, '10.10.10.10', 'host')
+  t.equal(components.port, undefined, 'port')
+  t.equal(components.path, '', 'path')
+  t.equal(components.query, undefined, 'query')
+  t.equal(components.fragment, undefined, 'fragment')
+
+  // IPv4address with unformated 0 stay as-is
+  components = fastURI.parse('//10.10.000.10') // not valid as per https://datatracker.ietf.org/doc/html/rfc5954#section-4.1
+  t.equal(components.error, undefined, 'IPv4address errors')
+  t.equal(components.scheme, undefined, 'scheme')
+  t.equal(components.userinfo, undefined, 'userinfo')
+  t.equal(components.host, '10.10.000.10', 'host')
+  t.equal(components.port, undefined, 'port')
+  t.equal(components.path, '', 'path')
+  t.equal(components.query, undefined, 'query')
+  t.equal(components.fragment, undefined, 'fragment')
+  components = fastURI.parse('//01.01.01.01') // not valid in URIs: https://datatracker.ietf.org/doc/html/rfc3986#section-7.4
+  t.equal(components.error, undefined, 'IPv4address errors')
+  t.equal(components.scheme, undefined, 'scheme')
+  t.equal(components.userinfo, undefined, 'userinfo')
+  t.equal(components.host, '01.01.01.01', 'host')
+  t.equal(components.port, undefined, 'port')
+  t.equal(components.path, '', 'path')
+  t.equal(components.query, undefined, 'query')
+  t.equal(components.fragment, undefined, 'fragment')
+
+  // IPv6address
+  components = fastURI.parse('//[2001:db8::7]')
+  t.equal(components.error, undefined, 'IPv4address errors')
+  t.equal(components.scheme, undefined, 'scheme')
+  t.equal(components.userinfo, undefined, 'userinfo')
+  t.equal(components.host, '2001:db8::7', 'host')
+  t.equal(components.port, undefined, 'port')
+  t.equal(components.path, '', 'path')
+  t.equal(components.query, undefined, 'query')
+  t.equal(components.fragment, undefined, 'fragment')
+
+  // invalid IPv6
+  components = fastURI.parse('//[2001:dbZ::7]')
+  t.equal(components.host, '[2001:dbz::7]')
+
+  // mixed IPv4address & IPv6address
+  components = fastURI.parse('//[::ffff:129.144.52.38]')
+  t.equal(components.error, undefined, 'IPv4address errors')
+  t.equal(components.scheme, undefined, 'scheme')
+  t.equal(components.userinfo, undefined, 'userinfo')
+  t.equal(components.host, '::ffff:129.144.52.38', 'host')
+  t.equal(components.port, undefined, 'port')
+  t.equal(components.path, '', 'path')
+  t.equal(components.query, undefined, 'query')
+  t.equal(components.fragment, undefined, 'fragment')
+
+  // mixed IPv4address & reg-name, example from terion-name (https://github.com/garycourt/uri-js/issues/4)
+  components = fastURI.parse('uri://10.10.10.10.example.com/en/process')
+  t.equal(components.error, undefined, 'mixed errors')
+  t.equal(components.scheme, 'uri', 'scheme')
+  t.equal(components.userinfo, undefined, 'userinfo')
+  t.equal(components.host, '10.10.10.10.example.com', 'host')
+  t.equal(components.port, undefined, 'port')
+  t.equal(components.path, '/en/process', 'path')
+  t.equal(components.query, undefined, 'query')
+  t.equal(components.fragment, undefined, 'fragment')
+
+  // IPv6address, example from bkw (https://github.com/garycourt/uri-js/pull/16)
+  components = fastURI.parse('//[2606:2800:220:1:248:1893:25c8:1946]/test')
+  t.equal(components.error, undefined, 'IPv6address errors')
+  t.equal(components.scheme, undefined, 'scheme')
+  t.equal(components.userinfo, undefined, 'userinfo')
+  t.equal(components.host, '2606:2800:220:1:248:1893:25c8:1946', 'host')
+  t.equal(components.port, undefined, 'port')
+  t.equal(components.path, '/test', 'path')
+  t.equal(components.query, undefined, 'query')
+  t.equal(components.fragment, undefined, 'fragment')
+
+  // IPv6address, example from RFC 5952
+  components = fastURI.parse('//[2001:db8::1]:80')
+  t.equal(components.error, undefined, 'IPv6address errors')
+  t.equal(components.scheme, undefined, 'scheme')
+  t.equal(components.userinfo, undefined, 'userinfo')
+  t.equal(components.host, '2001:db8::1', 'host')
+  t.equal(components.port, 80, 'port')
+  t.equal(components.path, '', 'path')
+  t.equal(components.query, undefined, 'query')
+  t.equal(components.fragment, undefined, 'fragment')
+
+  // IPv6address with zone identifier, RFC 6874
+  components = fastURI.parse('//[fe80::a%25en1]')
+  t.equal(components.error, undefined, 'IPv4address errors')
+  t.equal(components.scheme, undefined, 'scheme')
+  t.equal(components.userinfo, undefined, 'userinfo')
+  t.equal(components.host, 'fe80::a%en1', 'host')
+  t.equal(components.port, undefined, 'port')
+  t.equal(components.path, '', 'path')
+  t.equal(components.query, undefined, 'query')
+  t.equal(components.fragment, undefined, 'fragment')
+
+  // IPv6address with an unescaped interface specifier, example from pekkanikander (https://github.com/garycourt/uri-js/pull/22)
+  components = fastURI.parse('//[2001:db8::7%en0]')
+  t.equal(components.error, undefined, 'IPv6address interface errors')
+  t.equal(components.scheme, undefined, 'scheme')
+  t.equal(components.userinfo, undefined, 'userinfo')
+  t.equal(components.host, '2001:db8::7%en0', 'host')
+  t.equal(components.port, undefined, 'port')
+  t.equal(components.path, '', 'path')
+  t.equal(components.query, undefined, 'query')
+  t.equal(components.fragment, undefined, 'fragment')
+
+  // UUID V1
+  components = fastURI.parse('urn:uuid:b571b0bc-4713-11ec-81d3-0242ac130003')
+  t.equal(components.error, undefined, 'errors')
+  t.equal(components.scheme, 'urn', 'scheme')
+  // t.equal(components.authority, undefined, "authority");
+  t.equal(components.userinfo, undefined, 'userinfo')
+  t.equal(components.host, undefined, 'host')
+  t.equal(components.port, undefined, 'port')
+  t.equal(components.path, undefined, 'path')
+  t.equal(components.query, undefined, 'query')
+  t.equal(components.fragment, undefined, 'fragment')
+  t.equal(components.nid, 'uuid', 'nid')
+  t.equal(components.nss, undefined, 'nss')
+  t.equal(components.uuid, 'b571b0bc-4713-11ec-81d3-0242ac130003', 'uuid')
+
+  // UUID v4
+  components = fastURI.parse('urn:uuid:97a32222-89b7-420e-8507-4360723e2c2a')
+  t.equal(components.uuid, '97a32222-89b7-420e-8507-4360723e2c2a', 'uuid')
+
+  components = fastURI.parse('urn:uuid:notauuid-7dec-11d0-a765-00a0c91e6bf6')
+  t.notSame(components.error, undefined, 'errors')
+
+  components = fastURI.parse('urn:foo:a123,456')
+  t.equal(components.error, undefined, 'errors')
+  t.equal(components.scheme, 'urn', 'scheme')
+  // t.equal(components.authority, undefined, "authority");
+  t.equal(components.userinfo, undefined, 'userinfo')
+  t.equal(components.host, undefined, 'host')
+  t.equal(components.port, undefined, 'port')
+  t.equal(components.path, undefined, 'path')
+  t.equal(components.query, undefined, 'query')
+  t.equal(components.fragment, undefined, 'fragment')
+  t.equal(components.nid, 'foo', 'nid')
+  t.equal(components.nss, 'a123,456', 'nss')
+
+  components = fastURI.parse('//[2606:2800:220:1:248:1893:25c8:1946:43209]')
+  t.equal(components.host, '[2606:2800:220:1:248:1893:25c8:1946:43209]')
+
+  components = fastURI.parse('urn:foo:|\\24fpl')
+  t.equal(components.error, 'URN can not be parsed.')
+  t.end()
+})

package/node_modules/fast-uri/test/resolve.test.js

@@ -0,0 +1,87 @@
+'use strict'
+
+const test = require('tape')
+const fastURI = require('..')
+
+test('URI Resolving', (t) => {
+  // normal examples from RFC 3986
+  const base = 'uri://a/b/c/d;p?q'
+  t.equal(fastURI.resolve(base, 'g:h'), 'g:h', 'g:h')
+  t.equal(fastURI.resolve(base, 'g:h'), 'g:h', 'g:h')
+  t.equal(fastURI.resolve(base, 'g'), 'uri://a/b/c/g', 'g')
+  t.equal(fastURI.resolve(base, './g'), 'uri://a/b/c/g', './g')
+  t.equal(fastURI.resolve(base, 'g/'), 'uri://a/b/c/g/', 'g/')
+  t.equal(fastURI.resolve(base, '/g'), 'uri://a/g', '/g')
+  t.equal(fastURI.resolve(base, '//g'), 'uri://g', '//g')
+  t.equal(fastURI.resolve(base, '?y'), 'uri://a/b/c/d;p?y', '?y')
+  t.equal(fastURI.resolve(base, 'g?y'), 'uri://a/b/c/g?y', 'g?y')
+  t.equal(fastURI.resolve(base, '#s'), 'uri://a/b/c/d;p?q#s', '#s')
+  t.equal(fastURI.resolve(base, 'g#s'), 'uri://a/b/c/g#s', 'g#s')
+  t.equal(fastURI.resolve(base, 'g?y#s'), 'uri://a/b/c/g?y#s', 'g?y#s')
+  t.equal(fastURI.resolve(base, ';x'), 'uri://a/b/c/;x', ';x')
+  t.equal(fastURI.resolve(base, 'g;x'), 'uri://a/b/c/g;x', 'g;x')
+  t.equal(fastURI.resolve(base, 'g;x?y#s'), 'uri://a/b/c/g;x?y#s', 'g;x?y#s')
+  t.equal(fastURI.resolve(base, ''), 'uri://a/b/c/d;p?q', '')
+  t.equal(fastURI.resolve(base, '.'), 'uri://a/b/c/', '.')
+  t.equal(fastURI.resolve(base, './'), 'uri://a/b/c/', './')
+  t.equal(fastURI.resolve(base, '..'), 'uri://a/b/', '..')
+  t.equal(fastURI.resolve(base, '../'), 'uri://a/b/', '../')
+  t.equal(fastURI.resolve(base, '../g'), 'uri://a/b/g', '../g')
+  t.equal(fastURI.resolve(base, '../..'), 'uri://a/', '../..')
+  t.equal(fastURI.resolve(base, '../../'), 'uri://a/', '../../')
+  t.equal(fastURI.resolve(base, '../../g'), 'uri://a/g', '../../g')
+
+  // abnormal examples from RFC 3986
+  t.equal(fastURI.resolve(base, '../../../g'), 'uri://a/g', '../../../g')
+  t.equal(fastURI.resolve(base, '../../../../g'), 'uri://a/g', '../../../../g')
+
+  t.equal(fastURI.resolve(base, '/./g'), 'uri://a/g', '/./g')
+  t.equal(fastURI.resolve(base, '/../g'), 'uri://a/g', '/../g')
+  t.equal(fastURI.resolve(base, 'g.'), 'uri://a/b/c/g.', 'g.')
+  t.equal(fastURI.resolve(base, '.g'), 'uri://a/b/c/.g', '.g')
+  t.equal(fastURI.resolve(base, 'g..'), 'uri://a/b/c/g..', 'g..')
+  t.equal(fastURI.resolve(base, '..g'), 'uri://a/b/c/..g', '..g')
+
+  t.equal(fastURI.resolve(base, './../g'), 'uri://a/b/g', './../g')
+  t.equal(fastURI.resolve(base, './g/.'), 'uri://a/b/c/g/', './g/.')
+  t.equal(fastURI.resolve(base, 'g/./h'), 'uri://a/b/c/g/h', 'g/./h')
+  t.equal(fastURI.resolve(base, 'g/../h'), 'uri://a/b/c/h', 'g/../h')
+  t.equal(fastURI.resolve(base, 'g;x=1/./y'), 'uri://a/b/c/g;x=1/y', 'g;x=1/./y')
+  t.equal(fastURI.resolve(base, 'g;x=1/../y'), 'uri://a/b/c/y', 'g;x=1/../y')
+
+  t.equal(fastURI.resolve(base, 'g?y/./x'), 'uri://a/b/c/g?y/./x', 'g?y/./x')
+  t.equal(fastURI.resolve(base, 'g?y/../x'), 'uri://a/b/c/g?y/../x', 'g?y/../x')
+  t.equal(fastURI.resolve(base, 'g#s/./x'), 'uri://a/b/c/g#s/./x', 'g#s/./x')
+  t.equal(fastURI.resolve(base, 'g#s/../x'), 'uri://a/b/c/g#s/../x', 'g#s/../x')
+
+  t.equal(fastURI.resolve(base, 'uri:g'), 'uri:g', 'uri:g')
+  t.equal(fastURI.resolve(base, 'uri:g', {}), 'uri:g', 'uri:g')
+  t.equal(fastURI.resolve(base, 'uri:g', { tolerant: undefined }), 'uri:g', 'uri:g')
+  t.equal(fastURI.resolve(base, 'uri:g', { tolerant: false }), 'uri:g', 'uri:g')
+  t.equal(fastURI.resolve(base, 'uri:g', { tolerant: true }), 'uri://a/b/c/g', 'uri:g')
+
+  // examples by PAEz
+  // example was provided to avoid infinite loop within regex
+  // this is not the case anymore
+  // t.equal(URI.resolve('//www.g.com/', '/adf\ngf'), '//www.g.com/adf%0Agf', '/adf\\ngf')
+  // t.equal(URI.resolve('//www.g.com/error\n/bleh/bleh', '..'), '//www.g.com/error%0A/', '//www.g.com/error\\n/bleh/bleh')
+  t.end()
+})
+
+test('URN Resolving', (t) => {
+  // example from epoberezkin
+  t.equal(fastURI.resolve('', 'urn:some:ip:prop'), 'urn:some:ip:prop', 'urn:some:ip:prop')
+  t.equal(fastURI.resolve('#', 'urn:some:ip:prop'), 'urn:some:ip:prop', 'urn:some:ip:prop')
+  t.equal(fastURI.resolve('urn:some:ip:prop', 'urn:some:ip:prop'), 'urn:some:ip:prop', 'urn:some:ip:prop')
+  t.equal(fastURI.resolve('urn:some:other:prop', 'urn:some:ip:prop'), 'urn:some:ip:prop', 'urn:some:ip:prop')
+  t.end()
+})
+
+test('URI Resolving tolerates malformed fragments', (t) => {
+  t.equal(
+    fastURI.resolve('http://base.com/', 'http://example.com/#%E0%A4A'),
+    'http://example.com/#%E0%A4A',
+    'malformed fragment does not throw during resolve'
+  )
+  t.end()
+})

package/node_modules/fast-uri/test/rfc-3986.test.js

@@ -0,0 +1,90 @@
+'use strict'
+
+const test = require('tape')
+const fastURI = require('..')
+
+test('RFC 3986', (t) => {
+  t.strictEqual(fastURI.serialize({ scheme: 'http', host: 'example.com', path: '/', secure: true }),
+    'http://example.com/', 'http://example.com/')
+  t.strictEqual(fastURI.serialize({ scheme: 'http', host: 'example.com', path: '/foo', secure: true }),
+    'http://example.com/foo', 'http://example.com/foo')
+
+  // A.  If the input buffer begins with a prefix of "../" or "./",
+  //     then remove that prefix from the input buffer; otherwise,
+
+  t.strictEqual(fastURI.serialize({ scheme: 'http', host: 'example.com', path: '../', secure: true }),
+    'http://example.com/', 'http://example.com/')
+  t.strictEqual(fastURI.serialize({ scheme: 'http', host: 'example.com', path: './', secure: true }),
+    'http://example.com/', 'http://example.com/')
+
+  t.strictEqual(fastURI.serialize({ scheme: 'http', host: 'example.com', path: '../../', secure: true }),
+    'http://example.com/', 'http://example.com/')
+  t.strictEqual(fastURI.serialize({ scheme: 'http', host: 'example.com', path: '././', secure: true }),
+    'http://example.com/', 'http://example.com/')
+
+  t.strictEqual(fastURI.serialize({ scheme: 'http', host: 'example.com', path: './../', secure: true }),
+    'http://example.com/', 'http://example.com/')
+  t.strictEqual(fastURI.serialize({ scheme: 'http', host: 'example.com', path: '.././', secure: true }),
+    'http://example.com/', 'http://example.com/')
+
+  t.strictEqual(fastURI.serialize({ scheme: 'http', host: 'example.com', path: '../foo', secure: true }),
+    'http://example.com/foo', 'http://example.com/foo')
+  t.strictEqual(fastURI.serialize({ scheme: 'http', host: 'example.com', path: './foo', secure: true }),
+    'http://example.com/foo', 'http://example.com/foo')
+
+  t.strictEqual(fastURI.serialize({ scheme: 'http', host: 'example.com', path: '../../foo', secure: true }),
+    'http://example.com/foo', 'http://example.com/foo')
+  t.strictEqual(fastURI.serialize({ scheme: 'http', host: 'example.com', path: '././foo', secure: true }),
+    'http://example.com/foo', 'http://example.com/foo')
+
+  t.strictEqual(fastURI.serialize({ scheme: 'http', host: 'example.com', path: './../foo', secure: true }),
+    'http://example.com/foo', 'http://example.com/foo')
+  t.strictEqual(fastURI.serialize({ scheme: 'http', host: 'example.com', path: '.././foo', secure: true }),
+    'http://example.com/foo', 'http://example.com/foo')
+
+  // B.  if the input buffer begins with a prefix of "/./" or "/.",
+  //     where "." is a complete path segment, then replace that
+  //     prefix with "/" in the input buffer; otherwise,
+
+  t.strictEqual(fastURI.serialize({ scheme: 'http', host: 'example.com', path: '/./', secure: true }),
+    'http://example.com/', 'http://example.com/')
+  t.strictEqual(fastURI.serialize({ scheme: 'http', host: 'example.com', path: '/.', secure: true }),
+    'http://example.com/', 'http://example.com/')
+  t.strictEqual(fastURI.serialize({ scheme: 'http', host: 'example.com', path: '/./foo', secure: true }),
+    'http://example.com/foo', 'http://example.com/foo')
+  t.strictEqual(fastURI.serialize({ scheme: 'http', host: 'example.com', path: '/.././foo', secure: true }),
+    'http://example.com/foo', 'http://example.com/foo')
+
+  // C.  if the input buffer begins with a prefix of "/../" or "/..",
+  //     where ".." is a complete path segment, then replace that
+  //     prefix with "/" in the input buffer and remove the last
+  //     segment and its preceding "/" (if any) from the output
+  //     buffer; otherwise,
+
+  t.strictEqual(fastURI.serialize({ scheme: 'http', host: 'example.com', path: '/../', secure: true }),
+    'http://example.com/', 'http://example.com/')
+  t.strictEqual(fastURI.serialize({ scheme: 'http', host: 'example.com', path: '/..', secure: true }),
+    'http://example.com/', 'http://example.com/')
+  t.strictEqual(fastURI.serialize({ scheme: 'http', host: 'example.com', path: '/../foo', secure: true }),
+    'http://example.com/foo', 'http://example.com/foo')
+  t.strictEqual(fastURI.serialize({ scheme: 'http', host: 'example.com', path: '/foo/..', secure: true }),
+    'http://example.com/', 'http://example.com/')
+  t.strictEqual(fastURI.serialize({ scheme: 'http', host: 'example.com', path: '/foo/bar/..', secure: true }),
+    'http://example.com/foo/', 'http://example.com/foo/')
+  t.strictEqual(fastURI.serialize({ scheme: 'http', host: 'example.com', path: '/foo/../bar/..', secure: true }),
+    'http://example.com/', 'http://example.com/')
+
+  // D.  if the input buffer consists only of "." or "..", then remove
+  //     that from the input buffer; otherwise,
+
+  t.strictEqual(fastURI.serialize({ scheme: 'http', host: 'example.com', path: '/.', secure: true }),
+    'http://example.com/', 'http://example.com/')
+  t.strictEqual(fastURI.serialize({ scheme: 'http', host: 'example.com', path: '/..', secure: true }),
+    'http://example.com/', 'http://example.com/')
+  t.strictEqual(fastURI.serialize({ scheme: 'http', host: 'example.com', path: '.', secure: true }),
+    'http://example.com/', 'http://example.com/')
+  t.strictEqual(fastURI.serialize({ scheme: 'http', host: 'example.com', path: '..', secure: true }),
+    'http://example.com/', 'http://example.com/')
+
+  t.end()
+})

package/node_modules/fast-uri/test/security-normalization.test.js

@@ -0,0 +1,39 @@
+'use strict'
+
+const test = require('tape')
+const fastURI = require('..')
+
+test('parse preserves reserved path escapes as data', (t) => {
+  const components = fastURI.parse('http://example.com/a%2Fb/public/%2e%2e/admin')
+
+  t.equal(components.path, '/a%2Fb/public/%2E%2E/admin')
+  t.end()
+})
+
+test('normalize preserves percent-encoded path separators and dot segments', (t) => {
+  t.equal(
+    fastURI.normalize('http://example.com/public/%2e%2e/admin'),
+    'http://example.com/public/%2E%2E/admin'
+  )
+
+  t.equal(
+    fastURI.normalize('http://example.com/a%2Fb'),
+    'http://example.com/a%2Fb'
+  )
+
+  t.end()
+})
+
+test('equal does not treat reserved path escapes as live path syntax', (t) => {
+  t.equal(
+    fastURI.equal('http://example.com/public/%2e%2e/admin', 'http://example.com/admin', {}),
+    false
+  )
+
+  t.equal(
+    fastURI.equal('http://example.com/a%2Fb', 'http://example.com/a/b', {}),
+    false
+  )
+
+  t.end()
+})