botium-core 1.13.0 → 1.13.3

package/test/security/allowUnsafe.spec.js

@@ -30,322 +30,328 @@ const emptyMsg = {}
 const functionConnector = ({ queueBotSays }) => {
   return {
     UserSays (msg) {
-      const botMsg = { sender: 'bot', sourceData: msg.sourceData, messageText: `Response of ${msg.messageText}` }
+      const botMsg = {
+        sender: 'bot',
+        sourceData: msg.sourceData,
+        messageText: `Response of ${msg.messageText}`
+      }
       queueBotSays(botMsg)
     }
   }
 }
 
-describe('hook utils', function () {
-  it('should accept string hook in safe mode', async function () {
-    HookUtils.getHook({
-      [Capabilities.SECURITY_ALLOW_UNSAFE]: false
-    }, '1+1')
-  })
-  it('should accept javascript hook in safe mode', async function () {
-    HookUtils.getHook({
-      [Capabilities.SECURITY_ALLOW_UNSAFE]: false
-    }, () => null)
-  })
-  it('should not accept file hook in safe mode', async function () {
-    try {
+describe('security.allowUnsafe', function () {
+  describe('hook utils', function () {
+    it('should accept string hook in safe mode', async function () {
       HookUtils.getHook({
         [Capabilities.SECURITY_ALLOW_UNSAFE]: false
+      }, '1+1')
+    })
+    it('should accept javascript hook in safe mode', async function () {
+      HookUtils.getHook({
+        [Capabilities.SECURITY_ALLOW_UNSAFE]: false
+      }, () => null)
+    })
+    it('should not accept file hook in safe mode', async function () {
+      try {
+        HookUtils.getHook({
+          [Capabilities.SECURITY_ALLOW_UNSAFE]: false
+        }, 'test/security/resources/hook-as-file.js')
+        assert.fail('should have failed')
+      } catch (err) {
+        assert.isTrue(err instanceof BotiumError)
+        assert.exists(err.context)
+        assert.equal(err.context.message, 'Security Error. Using unsafe custom hook with require is not allowed')
+        assert.equal(err.context.source, 'HookUtils.js')
+        assert.equal(err.context.type, 'security')
+        assert.equal(err.context.subtype, 'allow unsafe')
+        assert.exists(err.context.cause)
+        assert.equal(err.context.cause.hookData, 'test/security/resources/hook-as-file.js')
+      }
+    })
+    it('should accept file hook in unsafe mode', async function () {
+      HookUtils.getHook({
+        [Capabilities.SECURITY_ALLOW_UNSAFE]: true
       }, 'test/security/resources/hook-as-file.js')
-      assert.fail('should have failed')
-    } catch (err) {
-      assert.isTrue(err instanceof BotiumError)
-      assert.exists(err.context)
-      assert.equal(err.context.message, 'Security Error. Using unsafe custom hook with require is not allowed')
-      assert.equal(err.context.source, 'HookUtils.js')
-      assert.equal(err.context.type, 'security')
-      assert.equal(err.context.subtype, 'allow unsafe')
-      assert.exists(err.context.cause)
-      assert.equal(err.context.cause.hookData, 'test/security/resources/hook-as-file.js')
-    }
-  })
-  it('should accept file hook in unsafe mode', async function () {
-    HookUtils.getHook({
-      [Capabilities.SECURITY_ALLOW_UNSAFE]: true
-    }, 'test/security/resources/hook-as-file.js')
-  })
-  it('should accept require hook in unsafe mode', async function () {
-    HookUtils.getHook({
-      [Capabilities.SECURITY_ALLOW_UNSAFE]: true
-    }, 'hook-as-file')
+    })
+    it('should accept require hook in unsafe mode', async function () {
+      HookUtils.getHook({
+        [Capabilities.SECURITY_ALLOW_UNSAFE]: true
+      }, 'hook-as-file')
+    })
   })
-})
 
-describe('scripting memory', function () {
-  it('should not throw security error for using inline function', async function () {
-    const driver = new BotDriver(myCapsSimpleRest)
-    const compiler = driver.BuildCompiler()
-    const container = await driver.Build()
-    await container.Start()
-
-    try {
-      compiler.ReadScript(path.resolve(__dirname, 'convos'), 'withscriptingmemoryfunction.convo.txt')
-      await compiler.convos[0].Run(container)
-      assert.fail('should have failed')
-    } catch (err) {
-      assert.isFalse(err.message.indexOf('Security Error. Using unsafe scripting memory function $func is not allowed') >= 0)
-    }
-    await container.Clean()
+  describe('scripting memory', function () {
+    it('should not throw security error for using inline function', async function () {
+      const driver = new BotDriver(myCapsSimpleRest)
+      const compiler = driver.BuildCompiler()
+      const container = await driver.Build()
+      await container.Start()
+
+      try {
+        compiler.ReadScript(path.resolve(__dirname, 'convos'), 'withscriptingmemoryfunction.convo.txt')
+        await compiler.convos[0].Run(container)
+        assert.fail('should have failed')
+      } catch (err) {
+        assert.isFalse(err.message.indexOf('Security Error. Using unsafe scripting memory function $func is not allowed') >= 0)
+      }
+      await container.Clean()
+    })
   })
-})
 
-describe('simple rest, scripting memory', function () {
-  it('should use variables succesful', async function () {
-    const myCaps = _getSimpleRestCaps(
-      {
-        [Capabilities.SIMPLEREST_BODY_TEMPLATE]: {
-          FUNCTION_WITHOUT_PARAM: '{{fnc.year}}'
+  describe('simple rest, scripting memory', function () {
+    it('should use variables succesful', async function () {
+      const myCaps = _getSimpleRestCaps(
+        {
+          [Capabilities.SIMPLEREST_BODY_TEMPLATE]: {
+            FUNCTION_WITHOUT_PARAM: '{{fnc.year}}'
+          }
         }
-      }
-    )
-    const driver = new BotDriver(myCaps)
-    const container = await driver.Build()
-    await container.Start()
+      )
+      const driver = new BotDriver(myCaps)
+      const container = await driver.Build()
+      await container.Start()
 
-    await container.pluginInstance._buildRequest(emptyMsg)
+      await container.pluginInstance._buildRequest(emptyMsg)
 
-    await container.Clean()
-  })
+      await container.Clean()
+    })
 
-  it('should use env variables succesful', async function () {
-    const driver = new BotDriver(_getSimpleRestCaps(
-      {
-        [Capabilities.SIMPLEREST_BODY_TEMPLATE]: {
-          SAMPLE_ENV: '{{#fnc.env}}SAMPLE_ENV{{/fnc.env}}'
+    it('should use env variables succesful', async function () {
+      const driver = new BotDriver(_getSimpleRestCaps(
+        {
+          [Capabilities.SIMPLEREST_BODY_TEMPLATE]: {
+            SAMPLE_ENV: '{{#fnc.env}}SAMPLE_ENV{{/fnc.env}}'
+          }
         }
-      }
-    ))
-    const container = await driver.Build()
-    await container.Start()
+      ))
+      const container = await driver.Build()
+      await container.Start()
 
-    await container.pluginInstance._buildRequest(emptyMsg)
+      await container.pluginInstance._buildRequest(emptyMsg)
 
-    await container.Clean()
+      await container.Clean()
+    })
   })
-})
 
-describe('simple rest, hooks', function () {
-  it('should create and use simplerest with javascript hook', async function () {
-    const driver = new BotDriver(_getSimpleRestCaps(
-      {
-        [Capabilities.SIMPLEREST_REQUEST_HOOK]: '1+1'
-      }
-    ))
+  describe('simple rest, hooks', function () {
+    it('should create and use simplerest with javascript hook', async function () {
+      const driver = new BotDriver(_getSimpleRestCaps(
+        {
+          [Capabilities.SIMPLEREST_REQUEST_HOOK]: '1+1'
+        }
+      ))
 
-    const compiler = driver.BuildCompiler()
-    const container = await driver.Build()
-    await container.Start()
+      const compiler = driver.BuildCompiler()
+      const container = await driver.Build()
+      await container.Start()
 
-    compiler.ReadScript(path.resolve(__dirname, 'convos'), 'dummy.convo.txt')
-  })
-  it('should create and use simplerest with function hooks', async function () {
-    const driver = new BotDriver(_getSimpleRestCaps(
-      {
-        [Capabilities.SIMPLEREST_REQUEST_HOOK]: () => 2
-      }
-    ))
+      compiler.ReadScript(path.resolve(__dirname, 'convos'), 'dummy.convo.txt')
+    })
+    it('should create and use simplerest with function hooks', async function () {
+      const driver = new BotDriver(_getSimpleRestCaps(
+        {
+          [Capabilities.SIMPLEREST_REQUEST_HOOK]: () => 2
+        }
+      ))
 
-    const compiler = driver.BuildCompiler()
-    const container = await driver.Build()
-    await container.Start()
+      const compiler = driver.BuildCompiler()
+      const container = await driver.Build()
+      await container.Start()
 
-    compiler.ReadScript(path.resolve(__dirname, 'convos'), 'dummy.convo.txt')
+      compiler.ReadScript(path.resolve(__dirname, 'convos'), 'dummy.convo.txt')
+    })
   })
-})
 
-describe('precompilers', function () {
-  it('should not throw security error for inline script type', async function () {
-    const driver = new BotDriver(_getSimpleRestCaps(
-      {
-        [Capabilities.PRECOMPILERS]: {
-          NAME: 'SCRIPT',
-          SCRIPT: '1+1'
+  describe('precompilers', function () {
+    it('should not throw security error for inline script type', async function () {
+      const driver = new BotDriver(_getSimpleRestCaps(
+        {
+          [Capabilities.PRECOMPILERS]: {
+            NAME: 'SCRIPT',
+            SCRIPT: '1+1'
+          }
         }
-      }
-    ))
-
-    const compiler = driver.BuildCompiler()
-    const container = await driver.Build()
-    const fileName = 'dummy.convo.txt'
-    compiler.ReadScript(path.resolve(__dirname, 'convos'), fileName)
-    assert.equal(compiler.convos.length, 1)
-    await container.Clean()
+      ))
+
+      const compiler = driver.BuildCompiler()
+      const container = await driver.Build()
+      const fileName = 'dummy.convo.txt'
+      compiler.ReadScript(path.resolve(__dirname, 'convos'), fileName)
+      assert.equal(compiler.convos.length, 1)
+      await container.Clean()
+    })
   })
-})
 
-describe('base container, hooks', function () {
-  it('should not throw security error for using inline hook', async function () {
-    const driver = new BotDriver(_getSimpleRestCaps(
-      { [Capabilities.CUSTOMHOOK_ONUSERSAYS]: '1+1' }
-    ))
-    await driver.Build()
+  describe('base container, hooks', function () {
+    it('should not throw security error for using inline hook', async function () {
+      const driver = new BotDriver(_getSimpleRestCaps(
+        { [Capabilities.CUSTOMHOOK_ONUSERSAYS]: '1+1' }
+      ))
+      await driver.Build()
+    })
   })
-})
 
-describe('logic hook, asserter', function () {
-  it('should load asserter from file', async function () {
-    const driver = new BotDriver(_getSimpleRestCaps(
-      {
-        [Capabilities.ASSERTERS]: [
-          {
-            ref: 'as-file'
-          }
-        ]
-      }
-    ))
+  describe('logic hook, asserter', function () {
+    it('should load asserter from file', async function () {
+      const driver = new BotDriver(_getSimpleRestCaps(
+        {
+          [Capabilities.ASSERTERS]: [
+            {
+              ref: 'as-file'
+            }
+          ]
+        }
+      ))
 
-    driver.BuildCompiler()
-  })
-  it('should not throw security error for logic hook with inline src', async function () {
-    const driver = new BotDriver(_getSimpleRestCaps(
-      {
-        [Capabilities.LOGIC_HOOKS]: [
-          {
-            ref: 'MY-LOGICHOOK-NAME',
-            src: {
-              onMeStart: '1+1'
-            },
-            global: false,
-            args: {
-              'my-arg-1': 'something'
+      driver.BuildCompiler()
+    })
+    it('should not throw security error for logic hook with inline src', async function () {
+      const driver = new BotDriver(_getSimpleRestCaps(
+        {
+          [Capabilities.LOGIC_HOOKS]: [
+            {
+              ref: 'MY-LOGICHOOK-NAME',
+              src: {
+                onMeStart: '1+1'
+              },
+              global: false,
+              args: {
+                'my-arg-1': 'something'
+              }
             }
-          }
-        ]
-      }
-    ))
+          ]
+        }
+      ))
 
-    driver.BuildCompiler()
-  })
-  it('should not throw security error for global logic hook with inline src', async function () {
-    const driver = new BotDriver(_getSimpleRestCaps(
-      {
-        [Capabilities.LOGIC_HOOKS]: [
-          {
-            ref: 'MY-LOGICHOOK-NAME',
-            src: {
-              onMeStart: '1+1'
-            },
-            global: true,
-            args: {
-              'my-arg-1': 'something'
+      driver.BuildCompiler()
+    })
+    it('should not throw security error for global logic hook with inline src', async function () {
+      const driver = new BotDriver(_getSimpleRestCaps(
+        {
+          [Capabilities.LOGIC_HOOKS]: [
+            {
+              ref: 'MY-LOGICHOOK-NAME',
+              src: {
+                onMeStart: '1+1'
+              },
+              global: true,
+              args: {
+                'my-arg-1': 'something'
+              }
             }
-          }
-        ]
-      }
-    ))
-    driver.BuildCompiler()
+          ]
+        }
+      ))
+      driver.BuildCompiler()
+    })
   })
-})
 
-describe('connectors', function () {
-  it('should create simplerest', async function () {
-    const driver = new BotDriver(myCapsSimpleRest)
-    await driver.Build()
-  })
+  describe('connectors', function () {
+    it('should create simplerest', async function () {
+      const driver = new BotDriver(myCapsSimpleRest)
+      await driver.Build()
+    })
 
-  it('should create any connector from file/dir with added botium-connector prefix', async function () {
-    const driver = new BotDriver({
-      [Capabilities.CONTAINERMODE]: 'as-file',
-      [Capabilities.SECURITY_ALLOW_UNSAFE]: false
+    it('should create any connector from file/dir with added botium-connector prefix', async function () {
+      const driver = new BotDriver({
+        [Capabilities.CONTAINERMODE]: 'as-file',
+        [Capabilities.SECURITY_ALLOW_UNSAFE]: false
+      })
+      await driver.Build()
     })
-    await driver.Build()
-  })
 
-  it('should create any connector from file/dir, if its starts with botium-connector prefix', async function () {
-    const driver = new BotDriver({
-      [Capabilities.CONTAINERMODE]: 'botium-connector-as-file',
-      [Capabilities.SECURITY_ALLOW_UNSAFE]: false
+    it('should create any connector from file/dir, if its starts with botium-connector prefix', async function () {
+      const driver = new BotDriver({
+        [Capabilities.CONTAINERMODE]: 'botium-connector-as-file',
+        [Capabilities.SECURITY_ALLOW_UNSAFE]: false
+      })
+      await driver.Build()
     })
-    await driver.Build()
-  })
 
-  it('should create any function connectors', async function () {
-    const myCapsFunction = {
-      [Capabilities.PROJECTNAME]: 'security.allowUnsafe.connectors',
-      [Capabilities.CONTAINERMODE]: functionConnector,
-      [Capabilities.SCRIPTING_ENABLE_MEMORY]: true,
-      [Capabilities.SECURITY_ALLOW_UNSAFE]: false
-    }
-    const driver = new BotDriver(myCapsFunction)
-    await driver.Build()
+    it('should create any function connectors', async function () {
+      const myCapsFunction = {
+        [Capabilities.PROJECTNAME]: 'security.allowUnsafe.connectors',
+        [Capabilities.CONTAINERMODE]: functionConnector,
+        [Capabilities.SCRIPTING_ENABLE_MEMORY]: true,
+        [Capabilities.SECURITY_ALLOW_UNSAFE]: false
+      }
+      const driver = new BotDriver(myCapsFunction)
+      await driver.Build()
+    })
   })
-})
 
-describe('media input', function () {
-  it('should fail for downloadMedia global arg without baseDir', async function () {
-    const args = {
-      downloadMedia: true
-    }
+  describe('media input', function () {
+    it('should fail for downloadMedia global arg without baseDir', async function () {
+      const args = {
+        downloadMedia: true
+      }
 
-    const driver = new BotDriver(_getSimpleRestCaps({
-      [Capabilities.USER_INPUTS]: [
-        {
-          ref: 'MEDIA',
-          src: 'MediaInput',
-          args
-        }
-      ]
-    }))
-    const compiler = driver.BuildCompiler()
-    const container = await driver.Build()
-    await container.Start()
-
-    try {
-      compiler.ReadScript(path.resolve(__dirname, 'convos'), 'media.convo.txt')
-      await compiler.convos[0].Run(container)
-      assert.fail('should have failed')
-    } catch (err) {
-      assert.isTrue(err.message.indexOf('Security Error. Using base dir global argument in MediaInput is required') >= 0)
-    }
-    await container && container.Clean()
-  })
+      const driver = new BotDriver(_getSimpleRestCaps({
+        [Capabilities.USER_INPUTS]: [
+          {
+            ref: 'MEDIA',
+            src: 'MediaInput',
+            args
+          }
+        ]
+      }))
+      const compiler = driver.BuildCompiler()
+      const container = await driver.Build()
+      await container.Start()
+
+      try {
+        compiler.ReadScript(path.resolve(__dirname, 'convos'), 'media.convo.txt')
+        await compiler.convos[0].Run(container)
+        assert.fail('should have failed')
+      } catch (err) {
+        assert.isTrue(err.message.indexOf('Security Error. Using base dir global argument in MediaInput is required') >= 0)
+      }
+      await container && container.Clean()
+    })
 
-  it('should fail for downloadMedia global arg as file', async function () {
-    const args = {
-      downloadMedia: true
-    }
+    it('should fail for downloadMedia global arg as file', async function () {
+      const args = {
+        downloadMedia: true
+      }
 
-    const driver = new BotDriver(_getSimpleRestCaps({
-      [Capabilities.USER_INPUTS]: [
-        {
-          ref: 'MEDIA',
-          src: 'MediaInput',
-          args
-        }
-      ]
-    }))
-    const compiler = driver.BuildCompiler()
-    const container = await driver.Build()
-    await container.Start()
-    compiler.ReadScript(path.resolve(__dirname, 'convos'), 'mediaasfile.convo.txt')
-
-    try {
-      await compiler.convos[0].Run(container)
-      assert.fail('should have failed')
-    } catch (err) {
-      assert.isTrue(err.message.indexOf('Security Error. Using base dir global argument in MediaInput is required') >= 0)
-    }
-    await container && container.Clean()
-  })
+      const driver = new BotDriver(_getSimpleRestCaps({
+        [Capabilities.USER_INPUTS]: [
+          {
+            ref: 'MEDIA',
+            src: 'MediaInput',
+            args
+          }
+        ]
+      }))
+      const compiler = driver.BuildCompiler()
+      const container = await driver.Build()
+      await container.Start()
+      compiler.ReadScript(path.resolve(__dirname, 'convos'), 'mediaasfile.convo.txt')
+
+      try {
+        await compiler.convos[0].Run(container)
+        assert.fail('should have failed')
+      } catch (err) {
+        assert.isTrue(err.message.indexOf('Security Error. Using base dir global argument in MediaInput is required') >= 0)
+      }
+      await container && container.Clean()
+    })
 
-  it('should fail for wildcard arg', async function () {
-    const driver = new BotDriver(_getSimpleRestCaps())
-    const compiler = driver.BuildCompiler()
-    const container = await driver.Build()
-    await container.Start()
-    compiler.ReadScript(path.resolve(__dirname, 'convos'), 'mediawildcard.convo.txt')
-
-    try {
-      compiler.ExpandConvos()
-      assert.fail('should have failed')
-    } catch (err) {
-      assert.isTrue(err.message.indexOf('Security Error. Using base dir global argument in MediaInput is required') >= 0)
-    }
-    await container && container.Clean()
+    it('should fail for wildcard arg', async function () {
+      const driver = new BotDriver(_getSimpleRestCaps())
+      const compiler = driver.BuildCompiler()
+      const container = await driver.Build()
+      await container.Start()
+      compiler.ReadScript(path.resolve(__dirname, 'convos'), 'mediawildcard.convo.txt')
+
+      try {
+        compiler.ExpandConvos()
+        assert.fail('should have failed')
+      } catch (err) {
+        assert.isTrue(err.message.indexOf('Security Error. Using base dir global argument in MediaInput is required') >= 0)
+      }
+      await container && container.Clean()
+    })
   })
 })