npm - @vitest/browser - Versions diffs - 3.2.4 → 3.2.5 - Mend

@vitest/browser 3.2.4 → 3.2.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (7) hide show

package/dist/client/__vitest__/index.html CHANGED Viewed

@@ -23,8 +23,8 @@
       })();
     </script>
     <!-- !LOAD_METADATA! -->
-    <script type="module" src="./assets/index-D_ryMEPs.js"></script>
-    <link rel="stylesheet" href="./assets/index-X8b7Z_4p.css">
+    <script type="module" src="./assets/index-B2adRzgr.js"></script>
+    <link rel="stylesheet" href="./assets/index-B0yz5e_c.css">
   </head>
   <body>
     <div id="app"></div>

package/dist/index.js CHANGED Viewed

@@ -13,13 +13,13 @@ import { fileURLToPath } from 'node:url';
 import crypto from 'node:crypto';
 import { mkdir, rm, readFile as readFile$1 } from 'node:fs/promises';
 import { parseErrorStacktrace, parseStacktrace } from '@vitest/utils/source-map';
-import { P as PlaywrightBrowserProvider, W as WebdriverBrowserProvider } from './webdriver-KA1WiV0q.js';
+import { P as PlaywrightBrowserProvider, W as WebdriverBrowserProvider } from './webdriver-BStCVush.js';
 import { resolve as resolve$1, basename as basename$1, dirname as dirname$1, normalize as normalize$1 } from 'node:path';
 import { WebSocketServer } from 'ws';
 import * as nodeos from 'node:os';
 import { performance } from 'node:perf_hooks';
-var version = "3.2.4";
+var version = "3.2.5";
 const _DRIVE_LETTER_START_RE = /^[A-Za-z]:\//;
 function normalizeWindowsPath(input = "") {
@@ -836,7 +836,7 @@ var BrowserPlugin = (parentServer, base = "/") => {
 					viteConfig.esbuild.legalComments = "inline";
 				}
 				const defaultPort = parentServer.vitest._browserLastPort++;
-				const api = resolveApiServerConfig(viteConfig.test?.browser || {}, defaultPort);
+				const api = resolveApiServerConfig(viteConfig.test?.browser || {}, defaultPort, parentServer.vitest.config.api, parentServer.vitest.logger);
 				viteConfig.server = {
 					...viteConfig.server,
 					port: defaultPort,
@@ -1143,6 +1143,19 @@ const tripleClick = async (context, selector, options = {}) => {
 	}
 };
+const _startV8Coverage = async (context) => {
+	const session = await context.__ensureCDPHandler();
+	await session.send("Profiler.enable");
+	await session.send("Profiler.startPreciseCoverage", {
+		callCount: true,
+		detailed: true
+	});
+};
+const _takeV8Coverage = async (context) => {
+	const session = await context.__ensureCDPHandler();
+	return session.send("Profiler.takePreciseCoverage");
+};
 const dragAndDrop = async (context, source, target, options_) => {
 	if (context.provider instanceof PlaywrightBrowserProvider) {
 		const frame = await context.frame();
@@ -1654,9 +1667,14 @@ function assertFileAccess(path, project) {
 		throw new Error(`Access denied to "${path}". See Vite config documentation for "server.fs": https://vitejs.dev/config/server-options.html#server-fs-strict.`);
 	}
 }
+function assertWrite(path, project) {
+	if (!project.config.browser.api.allowWrite || !project.vitest.config.api.allowWrite) {
+		throw new Error(`Cannot modify file "${path}". File writing is disabled because server is exposed to the internet, see https://vitest.dev/config/browser/api.`);
+	}
+}
 const readFile = async ({ project }, path, options = {}) => {
 	const filepath = resolve$1(project.config.root, path);
-	assertFileAccess(filepath, project);
+	assertFileAccess(slash(filepath), project);
 	// never return a Buffer
 	if (typeof options === "object" && !options.encoding) {
 		options.encoding = "utf-8";
@@ -1664,8 +1682,9 @@ const readFile = async ({ project }, path, options = {}) => {
 	return promises.readFile(filepath, options);
 };
 const writeFile = async ({ project }, path, data, options) => {
+	assertWrite(path, project);
 	const filepath = resolve$1(project.config.root, path);
-	assertFileAccess(filepath, project);
+	assertFileAccess(slash(filepath), project);
 	const dir = dirname$1(filepath);
 	if (!fs.existsSync(dir)) {
 		await promises.mkdir(dir, { recursive: true });
@@ -1673,13 +1692,14 @@ const writeFile = async ({ project }, path, data, options) => {
 	await promises.writeFile(filepath, data, options);
 };
 const removeFile = async ({ project }, path) => {
+	assertWrite(path, project);
 	const filepath = resolve$1(project.config.root, path);
-	assertFileAccess(filepath, project);
+	assertFileAccess(slash(filepath), project);
 	await promises.rm(filepath);
 };
 const _fileInfo = async ({ project }, path, encoding) => {
 	const filepath = resolve$1(project.config.root, path);
-	assertFileAccess(filepath, project);
+	assertFileAccess(slash(filepath), project);
 	const content = await promises.readFile(filepath, encoding || "base64");
 	return {
 		content,
@@ -2537,6 +2557,8 @@ var builtinCommands = {
 	removeFile,
 	writeFile,
 	__vitest_fileInfo: _fileInfo,
+	__vitest_startV8Coverage: _startV8Coverage,
+	__vitest_takeV8Coverage: _takeV8Coverage,
 	__vitest_upload: upload,
 	__vitest_click: click,
 	__vitest_dblClick: dblClick,
@@ -3056,10 +3078,21 @@ function setupBrowserRpc(globalServer, defaultMockerRegistry) {
 		vitest.state.catchError(err, "RPC Error");
 	}
 	function checkFileAccess(path) {
-		if (!isFileServingAllowed(path, vite)) {
+		if (!isFileServingAllowed(slash(path), vite)) {
 			throw new Error(`Access denied to "${path}". See Vite config documentation for "server.fs": https://vitejs.dev/config/server-options.html#server-fs-strict.`);
 		}
 	}
+	function canWrite(project) {
+		return project.config.browser.api.allowWrite && project.vitest.config.browser.api.allowWrite && project.config.api.allowWrite && project.vitest.config.api.allowWrite;
+	}
+	function isCdpAllowed(project) {
+		return project.config.api.allowExec && project.config.browser.api.allowExec && project.vitest.config.api.allowExec && project.vitest.config.browser.api.allowExec && project.config.api.allowWrite && project.config.browser.api.allowWrite && project.vitest.config.api.allowWrite && project.vitest.config.browser.api.allowWrite;
+	}
+	function assertCdpAllowed(project) {
+		if (!isCdpAllowed(project)) {
+			throw new Error(`Cannot use CDP because browser API write or exec operations are disabled. See https://vitest.dev/config/browser/api.`);
+		}
+	}
 	function setupClient(project, rpcId, ws) {
 		const mockResolver = new ServerMockResolver(globalServer.vite, { moduleDirectories: project.config.server?.deps?.moduleDirectories });
 		const mocker = project.browser?.provider.mocker;
@@ -3123,11 +3156,19 @@ function setupBrowserRpc(globalServer, defaultMockerRegistry) {
 			},
 			async saveSnapshotFile(id, content) {
 				checkFileAccess(id);
+				if (!canWrite(project)) {
+					vitest.logger.error(`[vitest] Cannot save snapshot file "${id}". File writing is disabled because server is exposed to the internet, see https://vitest.dev/config/browser/api.`);
+					return;
+				}
 				await promises.mkdir(dirname(id), { recursive: true });
 				return promises.writeFile(id, content, "utf-8");
 			},
 			async removeSnapshotFile(id) {
 				checkFileAccess(id);
+				if (!canWrite(project)) {
+					vitest.logger.error(`[vitest] Cannot remove snapshot file "${id}". File writing is disabled because server is exposed to the internet, see https://vitest.dev/config/browser/api.`);
+					return;
+				}
 				if (!existsSync(id)) {
 					throw new Error(`Snapshot file "${id}" does not exist.`);
 				}
@@ -3178,7 +3219,8 @@ function setupBrowserRpc(globalServer, defaultMockerRegistry) {
 					project,
 					provider,
 					contextId: sessionId,
-					sessionId
+					sessionId,
+					__ensureCDPHandler: () => globalServer.ensureCDPHandler(sessionId, rpcId)
 				}, provider.getCommandsContext(sessionId));
 				return await commands[command](context, ...payload);
 			},
@@ -3240,10 +3282,12 @@ function setupBrowserRpc(globalServer, defaultMockerRegistry) {
 				return mocker.delete(sessionId, id);
 			},
 			async sendCdpEvent(sessionId, event, payload) {
+				assertCdpAllowed(project);
 				const cdp = await globalServer.ensureCDPHandler(sessionId, rpcId);
 				return cdp.send(event, payload);
 			},
 			async trackCdpEvent(sessionId, type, event, listenerId) {
+				assertCdpAllowed(project);
 				const cdp = await globalServer.ensureCDPHandler(sessionId, rpcId);
 				cdp[type](event, listenerId);
 			}

package/dist/providers.js CHANGED Viewed

@@ -1,4 +1,4 @@
-import { W as WebdriverBrowserProvider, P as PlaywrightBrowserProvider } from './webdriver-KA1WiV0q.js';
+import { W as WebdriverBrowserProvider, P as PlaywrightBrowserProvider } from './webdriver-BStCVush.js';
 import '@vitest/mocker/node';
 import 'tinyrainbow';
 import 'vitest/node';

package/dist/{webdriver-KA1WiV0q.js → webdriver-BStCVush.js} RENAMED Viewed

@@ -298,19 +298,10 @@ class PlaywrightBrowserProvider {
 		const page = this.getPage(sessionid);
 		const cdp = await page.context().newCDPSession(page);
 		return {
-			async send(method, params) {
-				const result = await cdp.send(method, params);
-				return result;
-			},
-			on(event, listener) {
-				cdp.on(event, listener);
-			},
-			off(event, listener) {
-				cdp.off(event, listener);
-			},
-			once(event, listener) {
-				cdp.once(event, listener);
-			}
+			send: cdp.send.bind(cdp),
+			on: cdp.on.bind(cdp),
+			off: cdp.off.bind(cdp),
+			once: cdp.once.bind(cdp)
 		};
 	}
 	async close() {

package/package.json CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "name": "@vitest/browser",
   "type": "module",
-  "version": "3.2.4",
+  "version": "3.2.5",
   "description": "Browser running for Vitest",
   "license": "MIT",
   "funding": "https://opencollective.com/vitest",
@@ -66,7 +66,7 @@
   "peerDependencies": {
     "playwright": "*",
     "webdriverio": "^7.0.0 || ^8.0.0 || ^9.0.0",
-    "vitest": "3.2.4"
+    "vitest": "3.2.5"
   },
   "peerDependenciesMeta": {
     "playwright": {
@@ -86,8 +86,8 @@
     "sirv": "^3.0.1",
     "tinyrainbow": "^2.0.0",
     "ws": "^8.18.2",
-    "@vitest/mocker": "3.2.4",
-    "@vitest/utils": "3.2.4"
+    "@vitest/mocker": "3.2.5",
+    "@vitest/utils": "3.2.5"
   },
   "devDependencies": {
     "@types/ws": "^8.18.1",
@@ -103,10 +103,10 @@
     "playwright-core": "^1.53.0",
     "safaridriver": "^1.0.0",
     "webdriverio": "^9.15.0",
-    "@vitest/ui": "3.2.4",
-    "@vitest/ws-client": "3.2.4",
-    "vitest": "3.2.4",
-    "@vitest/runner": "3.2.4"
+    "@vitest/runner": "3.2.5",
+    "@vitest/ui": "3.2.5",
+    "@vitest/ws-client": "3.2.5",
+    "vitest": "3.2.5"
   },
   "scripts": {
     "build": "rimraf dist && pnpm build:node && pnpm build:client",