browser-commander 0.24.0 → 0.25.0

package/src/browser/safari-access.js

@@ -0,0 +1,45 @@
+import { stat } from 'node:fs/promises';
+
+/** A protected path remains a source, so reads can explain Full Disk Access. */
+export async function findSafariFile(candidates, statFile = stat) {
+  for (const candidate of candidates) {
+    try {
+      if ((await statFile(candidate)).isFile()) {
+        return candidate;
+      }
+    } catch (error) {
+      if (['EPERM', 'EACCES'].includes(error.code)) {
+        return candidate;
+      }
+      if (!['ENOENT', 'ENOTDIR'].includes(error.code)) {
+        throw error;
+      }
+    }
+  }
+  return null;
+}
+
+/** Enrich protection failures for every Safari store, preserving the cause. */
+export async function withSafariAccess(
+  filename,
+  read,
+  environment = process.env
+) {
+  try {
+    return await read();
+  } catch (error) {
+    if (!['EPERM', 'EACCES'].includes(error.code)) {
+      throw error;
+    }
+    const app =
+      environment.__CFBundleIdentifier ||
+      environment.TERM_PROGRAM ||
+      process.execPath;
+    const diagnostic = new Error(
+      `Safari access denied (${error.code}) at ${filename}. Grant Full Disk Access to ${app}, the app running Browser Commander, then retry: x-apple.systempreferences:com.apple.preference.security?Privacy_AllFiles`,
+      { cause: error }
+    );
+    diagnostic.code = error.code;
+    throw diagnostic;
+  }
+}

package/src/browser/safari-cookies.js

@@ -4,7 +4,9 @@
  */
 import { readFile as readFileBytes, stat } from 'node:fs/promises';
 import path from 'node:path';
+import { findSafariFile, withSafariAccess } from './safari-access.js';
 import { TextDecoder } from 'node:util';
+import { matchesDomains } from './migration/domains.js';
 
 const APPLE_EPOCH = 978_307_200;
 const utf8 = new TextDecoder('utf-8', { fatal: true, ignoreBOM: true });
@@ -121,7 +123,7 @@ export function countSafariCookies(data, domains) {
     const host = string(record, 16).toLowerCase();
     total += 1;
     for (const domain of Object.keys(byDomain ?? {})) {
-      if (host.includes(domain.toLowerCase())) {
+      if (matchesDomains(host, [domain])) {
         byDomain[domain] += 1;
       }
     }
@@ -130,44 +132,45 @@ export function countSafariCookies(data, domains) {
 }
 
 /** A protected path is still a source: preserve it for an actionable read error. */
-export async function findSafariCookieFile(profileDir, statFile = stat) {
-  for (const candidate of [
-    path.join(profileDir, 'Cookies', 'Cookies.binarycookies'),
-    path.join(profileDir, 'Cookies.binarycookies'),
-  ]) {
-    try {
-      if ((await statFile(candidate)).isFile()) {
-        return candidate;
-      }
-    } catch (error) {
-      if (['EPERM', 'EACCES'].includes(error.code)) {
-        return candidate;
-      }
-      if (!['ENOENT', 'ENOTDIR'].includes(error.code)) {
-        throw error;
-      }
-    }
-  }
-  return null;
+export function findSafariCookieFile(profileDir, statFile = stat) {
+  const named =
+    path.basename(path.dirname(profileDir)) === 'Profiles' &&
+    path.basename(path.dirname(path.dirname(profileDir))) === 'Safari';
+  const root = named
+    ? path.dirname(path.dirname(path.dirname(profileDir)))
+    : profileDir;
+  const modern = named
+    ? [
+        path.join(
+          root,
+          'WebKit/WebsiteDataStore',
+          path.basename(profileDir).toLowerCase(),
+          'Cookies/Cookies.binarycookies'
+        ),
+      ]
+    : [
+        path.join(
+          root,
+          'WebKit/WebsiteData/Default/Cookies/Cookies.binarycookies'
+        ),
+        path.join(
+          root,
+          'WebKit/WebsiteDataStore/Default/Cookies/Cookies.binarycookies'
+        ),
+      ];
+  return findSafariFile(
+    [
+      ...modern,
+      path.join(profileDir, 'Cookies', 'Cookies.binarycookies'),
+      path.join(profileDir, 'Cookies.binarycookies'),
+    ],
+    statFile
+  );
 }
 
-export async function readSafariCookieFile(
+export function readSafariCookieFile(
   filePath,
   { environment = process.env, readFile = readFileBytes } = {}
 ) {
-  try {
-    return await readFile(filePath);
-  } catch (error) {
-    if (!['EPERM', 'EACCES'].includes(error.code)) {
-      throw error;
-    }
-    const app =
-      environment.__CFBundleIdentifier ||
-      environment.TERM_PROGRAM ||
-      process.execPath;
-    throw new Error(
-      `Safari cookie access denied (${error.code}) at ${filePath}. Grant Full Disk Access to ${app}, the app running Browser Commander, then retry: x-apple.systempreferences:com.apple.preference.security?Privacy_AllFiles`,
-      { cause: error }
-    );
-  }
+  return withSafariAccess(filePath, () => readFile(filePath), environment);
 }

package/src/browser/safari-profiles.js

@@ -0,0 +1,83 @@
+import path from 'node:path';
+import { open } from 'node:fs/promises';
+import { findSafariCookieFile } from './safari-cookies.js';
+import { findSafariFile, withSafariAccess } from './safari-access.js';
+import { openSqliteDatabase } from './browser-cookie-database.js';
+
+/** SafariTabs supplies names; each UUID has separate Safari and WebKit stores. */
+export async function listSafariProfiles(browser, root) {
+  const profiles = [];
+  const defaultFile =
+    (await findSafariCookieFile(root)) ??
+    (await findSafariFile([
+      path.join(root, 'Safari/History.db'),
+      path.join(root, 'History.db'),
+      path.join(root, 'Safari/Bookmarks.plist'),
+      path.join(root, 'Bookmarks.plist'),
+    ]));
+  if (defaultFile) {
+    profiles.push({
+      browser,
+      name: 'Default',
+      displayName: 'Default',
+      path: root,
+      isDefault: true,
+    });
+  }
+  const tabs = await findSafariFile([
+    path.join(root, 'Safari/SafariTabs.db'),
+    path.join(root, 'SafariTabs.db'),
+  ]);
+  if (!tabs) {
+    return profiles;
+  }
+  let rows;
+  try {
+    rows = await withSafariAccess(tabs, async () => {
+      const file = await open(tabs, 'r');
+      await file.close();
+      const db = await openSqliteDatabase(tabs, {
+        readOnly: true,
+        fileMustExist: true,
+      });
+      try {
+        return db
+          .prepare(
+            "SELECT DISTINCT external_uuid,title FROM bookmarks WHERE subtype=2 AND external_uuid != 'DefaultProfile' ORDER BY external_uuid"
+          )
+          .all();
+      } finally {
+        db.close();
+      }
+    });
+  } catch (error) {
+    profiles.push({
+      browser,
+      name: 'Profiles',
+      displayName: 'Safari profile discovery',
+      path: root,
+      isDefault: false,
+      error: error.message,
+    });
+    return profiles;
+  }
+  for (const row of rows) {
+    if (
+      !/^[\da-f]{8}(?:-[\da-f]{4}){3}-[\da-f]{12}$/iu.test(
+        row.external_uuid ?? ''
+      )
+    ) {
+      continue;
+    }
+    const name = row.external_uuid.toUpperCase();
+    const profilePath = path.join(root, 'Safari/Profiles', name);
+    profiles.push({
+      browser,
+      name,
+      displayName: row.title ?? name,
+      path: profilePath,
+      isDefault: false,
+    });
+  }
+  return profiles;
+}

package/src/browser/system-browser.js

@@ -1,4 +1,10 @@
 import { constants } from 'node:fs';
+import { physicalPath } from './browser-profile-files.js';
+import {
+  BROWSER_SOURCES,
+  resolveBrowserRoots,
+  resolveBrowserExecutables,
+} from './browser-sources.js';
 import { access } from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
@@ -9,18 +15,16 @@ import path from 'node:path';
  * to refuse a default profile; profile migration uses it to find the source.
  */
 
-export const CHANNEL_EXECUTABLE_NAMES = {
-  brave: ['brave-browser', 'brave-browser-stable', 'brave'],
-  chrome: ['google-chrome', 'google-chrome-stable', 'chrome'],
-  'chrome-beta': ['google-chrome-beta'],
-  'chrome-canary': ['google-chrome-canary'],
-  'chrome-dev': ['google-chrome-unstable'],
-  chromium: ['chromium', 'chromium-browser'],
-  msedge: ['microsoft-edge', 'microsoft-edge-stable', 'msedge'],
-  'msedge-beta': ['microsoft-edge-beta'],
-  'msedge-canary': ['microsoft-edge-canary'],
-  'msedge-dev': ['microsoft-edge-dev'],
-};
+export const CHANNEL_EXECUTABLE_NAMES = Object.freeze(
+  Object.fromEntries(
+    BROWSER_SOURCES.flatMap((browser) =>
+      [browser.id, ...(browser.aliases ?? [])].map((name) => [
+        name,
+        browser.executableNames ?? [],
+      ])
+    )
+  )
+);
 
 function platformPath(platform) {
   return platform === 'win32' ? path.win32 : path;
@@ -41,72 +45,13 @@ export function knownDefaultUserDataDirs({
   homeDir = os.homedir(),
   environment = process.env,
 } = {}) {
-  const pathApi = platformPath(platform);
-  if (platform === 'darwin') {
-    const applicationSupport = pathApi.join(
+  return BROWSER_SOURCES.flatMap((browser) =>
+    resolveBrowserRoots(browser.id, {
+      platform,
       homeDir,
-      'Library',
-      'Application Support'
-    );
-    return [
-      pathApi.join(applicationSupport, 'Google', 'Chrome'),
-      pathApi.join(applicationSupport, 'Google', 'Chrome Beta'),
-      pathApi.join(applicationSupport, 'Google', 'Chrome Canary'),
-      pathApi.join(applicationSupport, 'Google', 'Chrome Dev'),
-      pathApi.join(applicationSupport, 'Chromium'),
-      pathApi.join(applicationSupport, 'BraveSoftware', 'Brave-Browser'),
-      pathApi.join(applicationSupport, 'BraveSoftware', 'Brave-Browser-Beta'),
-      pathApi.join(
-        applicationSupport,
-        'BraveSoftware',
-        'Brave-Browser-Nightly'
-      ),
-      pathApi.join(applicationSupport, 'Microsoft Edge'),
-      pathApi.join(applicationSupport, 'Microsoft Edge Beta'),
-      pathApi.join(applicationSupport, 'Microsoft Edge Canary'),
-      pathApi.join(applicationSupport, 'Microsoft Edge Dev'),
-    ];
-  }
-  if (platform === 'win32') {
-    const localAppData =
-      environment.LOCALAPPDATA ?? pathApi.join(homeDir, 'AppData', 'Local');
-    return [
-      pathApi.join(localAppData, 'Google', 'Chrome', 'User Data'),
-      pathApi.join(localAppData, 'Google', 'Chrome Beta', 'User Data'),
-      pathApi.join(localAppData, 'Google', 'Chrome Dev', 'User Data'),
-      pathApi.join(localAppData, 'Google', 'Chrome SxS', 'User Data'),
-      pathApi.join(localAppData, 'Chromium', 'User Data'),
-      pathApi.join(localAppData, 'BraveSoftware', 'Brave-Browser', 'User Data'),
-      pathApi.join(
-        localAppData,
-        'BraveSoftware',
-        'Brave-Browser-Beta',
-        'User Data'
-      ),
-      pathApi.join(
-        localAppData,
-        'BraveSoftware',
-        'Brave-Browser-Nightly',
-        'User Data'
-      ),
-      pathApi.join(localAppData, 'Microsoft', 'Edge', 'User Data'),
-      pathApi.join(localAppData, 'Microsoft', 'Edge Beta', 'User Data'),
-      pathApi.join(localAppData, 'Microsoft', 'Edge Dev', 'User Data'),
-      pathApi.join(localAppData, 'Microsoft', 'Edge SxS', 'User Data'),
-    ];
-  }
-  return [
-    pathApi.join(homeDir, '.config', 'google-chrome'),
-    pathApi.join(homeDir, '.config', 'google-chrome-beta'),
-    pathApi.join(homeDir, '.config', 'google-chrome-unstable'),
-    pathApi.join(homeDir, '.config', 'chromium'),
-    pathApi.join(homeDir, '.config', 'BraveSoftware', 'Brave-Browser'),
-    pathApi.join(homeDir, '.config', 'BraveSoftware', 'Brave-Browser-Beta'),
-    pathApi.join(homeDir, '.config', 'BraveSoftware', 'Brave-Browser-Nightly'),
-    pathApi.join(homeDir, '.config', 'microsoft-edge'),
-    pathApi.join(homeDir, '.config', 'microsoft-edge-beta'),
-    pathApi.join(homeDir, '.config', 'microsoft-edge-dev'),
-  ];
+      environment,
+    })
+  );
 }
 
 /** Ensure Chrome is not asked to expose the user's default profile over CDP. */
@@ -117,12 +62,17 @@ export function assertDedicatedUserDataDir(userDataDir, platformOptions = {}) {
   const platform = platformOptions.platform ?? process.platform;
   const pathApi = platformPath(platform);
   const normalize = (value) => {
-    const resolved = pathApi.resolve(value).replace(/[\\/]+$/, '');
+    let resolved = pathApi.resolve(value).replace(/[\\/]+$/, '');
+    if (platform === process.platform) {
+      resolved = physicalPath(resolved);
+    }
     return platform === 'win32' ? resolved.toLowerCase() : resolved;
   };
   const requested = normalize(userDataDir);
   const isDefault = knownDefaultUserDataDirs(platformOptions).some(
-    (directory) => normalize(directory) === requested
+    (directory) =>
+      requested === normalize(directory) ||
+      requested.startsWith(`${normalize(directory)}${pathApi.sep}`)
   );
   if (isDefault) {
     throw new Error(
@@ -136,74 +86,12 @@ function browserInstallCandidates({
   platform = process.platform,
   environment = process.env,
 }) {
-  const candidates = [];
-  const names = CHANNEL_EXECUTABLE_NAMES[channel];
-  if (!names) {
+  if (!CHANNEL_EXECUTABLE_NAMES[channel]?.length) {
     throw new Error(
       `Unknown browser channel: ${channel}. Expected one of ${Object.keys(CHANNEL_EXECUTABLE_NAMES).join(', ')}`
     );
   }
-
-  if (platform === 'darwin') {
-    const applications = {
-      brave: 'Brave Browser.app/Contents/MacOS/Brave Browser',
-      chrome: 'Google Chrome.app/Contents/MacOS/Google Chrome',
-      'chrome-beta': 'Google Chrome Beta.app/Contents/MacOS/Google Chrome Beta',
-      'chrome-canary':
-        'Google Chrome Canary.app/Contents/MacOS/Google Chrome Canary',
-      'chrome-dev': 'Google Chrome Dev.app/Contents/MacOS/Google Chrome Dev',
-      chromium: 'Chromium.app/Contents/MacOS/Chromium',
-      msedge: 'Microsoft Edge.app/Contents/MacOS/Microsoft Edge',
-      'msedge-beta':
-        'Microsoft Edge Beta.app/Contents/MacOS/Microsoft Edge Beta',
-      'msedge-canary':
-        'Microsoft Edge Canary.app/Contents/MacOS/Microsoft Edge Canary',
-      'msedge-dev': 'Microsoft Edge Dev.app/Contents/MacOS/Microsoft Edge Dev',
-    };
-    candidates.push(path.join('/Applications', applications[channel]));
-  } else if (platform === 'win32') {
-    const roots = [
-      environment.PROGRAMFILES,
-      environment['PROGRAMFILES(X86)'],
-      environment.LOCALAPPDATA,
-    ].filter(Boolean);
-    const relativePaths = {
-      brave: ['BraveSoftware', 'Brave-Browser', 'Application', 'brave.exe'],
-      chrome: ['Google', 'Chrome', 'Application', 'chrome.exe'],
-      'chrome-beta': ['Google', 'Chrome Beta', 'Application', 'chrome.exe'],
-      'chrome-canary': ['Google', 'Chrome SxS', 'Application', 'chrome.exe'],
-      'chrome-dev': ['Google', 'Chrome Dev', 'Application', 'chrome.exe'],
-      chromium: ['Chromium', 'Application', 'chrome.exe'],
-      msedge: ['Microsoft', 'Edge', 'Application', 'msedge.exe'],
-      'msedge-beta': ['Microsoft', 'Edge Beta', 'Application', 'msedge.exe'],
-      'msedge-canary': ['Microsoft', 'Edge SxS', 'Application', 'msedge.exe'],
-      'msedge-dev': ['Microsoft', 'Edge Dev', 'Application', 'msedge.exe'],
-    };
-    for (const root of roots) {
-      candidates.push(path.win32.join(root, ...relativePaths[channel]));
-    }
-  } else {
-    for (const name of names) {
-      candidates.push(`/usr/bin/${name}`, `/usr/local/bin/${name}`);
-    }
-    if (channel === 'chrome') {
-      candidates.push('/opt/google/chrome/google-chrome');
-    }
-  }
-
-  const pathApi = platformPath(platform);
-  const delimiter = platform === 'win32' ? ';' : path.delimiter;
-  for (const directory of (environment.PATH ?? '').split(delimiter)) {
-    if (!directory) {
-      continue;
-    }
-    for (const name of names) {
-      candidates.push(
-        pathApi.join(directory, platform === 'win32' ? `${name}.exe` : name)
-      );
-    }
-  }
-  return [...new Set(candidates)];
+  return resolveBrowserExecutables(channel, { platform, environment });
 }
 
 /** Resolve a genuine installed Chrome-family browser executable. */

package/src/cli/args.js

@@ -92,6 +92,8 @@ export const COMMANDS = Object.freeze({
       profile: STRING,
       'user-data-dir': STRING,
       'target-browser': STRING,
+      'password-csv': STRING,
+      'include-payment-cards': FLAG,
       to: STRING,
       include: STRING,
       domain: STRINGS,

package/src/cli/commands.js

@@ -216,6 +216,8 @@ async function profileMigrate(parsed, io) {
       profile: options.profile,
       userDataDir: options.userDataDir,
       targetBrowser: options.targetBrowser,
+      passwordCsv: options.passwordCsv,
+      includePaymentCards: options.includePaymentCards,
       to: options.to,
       include: options.include
         ?.split(',')

package/src/cli/high-level-methods.js

@@ -220,6 +220,8 @@ function migrateProfile(state, params) {
     include: params.include,
     domains: params.domains,
     targetBrowser: params.targetBrowser,
+    passwordCsv: params.passwordCsv,
+    includePaymentCards: params.includePaymentCards,
   });
 }
 

package/tests/unit/browser/attach/snapshot.test.js

@@ -34,6 +34,36 @@ function snapshotChrome(root, to) {
   return snapshotUserDataDir({ browser: 'chrome', userDataDir: root, to });
 }
 
+it(
+  'reports a locked database with snapshot guidance and leaves no target database',
+  { timeout: 5000 },
+  async () => {
+    const root = await makeTempDir();
+    const target = await makeTempDir();
+    const profile = path.join(root, 'Default');
+    await mkdir(profile);
+    const filename = await writeChromiumHistory(profile, 1);
+    const writer = new BetterSqlite3(filename);
+    writer.exec('BEGIN EXCLUSIVE');
+    try {
+      const report = await snapshotChrome(root, target);
+      assert.equal(report.copied.databases, 0);
+      assert.ok(
+        report.skipped.some(
+          ({ item, reason, detail }) =>
+            item === 'Default/History' &&
+            reason === 'unreadable' &&
+            detail.includes('Consistent SQLite snapshot unavailable')
+        )
+      );
+      await assert.rejects(stat(path.join(target, 'Default/History')));
+    } finally {
+      writer.exec('ROLLBACK');
+      writer.close();
+    }
+  }
+);
+
 /** Write `content` to `root/relativePath`, creating the parent folders. */
 async function put(root, relativePath, content = relativePath) {
   const filePath = path.join(root, ...relativePath.split('/'));

package/tests/unit/browser/browser-cookies.test.js

@@ -12,6 +12,7 @@ import {
   mkdtemp,
   readFile,
   readdir,
+  rename,
   rm,
   stat,
   writeFile,
@@ -149,6 +150,40 @@ describe('installed browser cookie import', () => {
     }
   });
 
+  it('discovers and decrypts Yandex Cookies through its catalogue alias', async () => {
+    temporaryDirectory = await mkdtemp(
+      path.join(os.tmpdir(), 'bc-yandex-cookies-')
+    );
+    const host = '.yandex.ru';
+    const { root } = await createChromiumProfile({
+      homeDir: temporaryDirectory,
+      rows: [
+        {
+          host,
+          name: 'SID',
+          encryptedValue: encryptCbcCookie({
+            host,
+            value: 'yandex-session',
+            password: 'peanuts',
+            prefix: 'v10',
+          }),
+        },
+      ],
+    });
+    const yandexRoot = path.join(temporaryDirectory, '.config/yandex-browser');
+    await rename(root, yandexRoot);
+    const file = path.join(yandexRoot, 'Default/Network/Cookies');
+    const before = await readFile(file);
+    const cookies = await readBrowserCookiesWithDependencies(
+      { browser: 'yandex-browser', domainFilter: 'yandex.ru', cache: false },
+      { platform: 'linux', homeDir: temporaryDirectory, environment: {} }
+    );
+    assert.equal(cookies.length, 1);
+    assert.equal(cookies[0].domain, host);
+    assert.equal(cookies[0].value, 'yandex-session');
+    assert.deepEqual(await readFile(file), before);
+  });
+
   it('exports both public helpers', () => {
     assert.equal(publicListBrowserProfiles, listBrowserProfiles);
     assert.equal(publicReadBrowserCookies, readBrowserCookies);

package/tests/unit/browser/catalogue-launch.test.js

@@ -0,0 +1,93 @@
+import assert from 'node:assert/strict';
+import { describe, it } from 'node:test';
+import { mkdir, symlink } from 'node:fs/promises';
+import path from 'node:path';
+import { useTempDirectories } from '../../helpers/temp-directory.js';
+import {
+  BROWSER_SOURCES,
+  resolveBrowserRoots,
+} from '../../../src/browser/browser-sources.js';
+import {
+  assertDedicatedUserDataDir,
+  CHANNEL_EXECUTABLE_NAMES,
+} from '../../../src/browser/system-browser.js';
+
+const temporary = useTempDirectories('bc-catalogue-protection-');
+
+describe('catalogue launch and protection (#121)', () => {
+  it('protects a new profile beneath a symlink to a default root', async () => {
+    const homeDir = await temporary();
+    const options = { homeDir, environment: {} };
+    const root = resolveBrowserRoots('chrome', options)[0];
+    await mkdir(root, { recursive: true });
+    const alias = path.join(homeDir, 'profile-alias');
+    await symlink(
+      root,
+      alias,
+      process.platform === 'win32' ? 'junction' : 'dir'
+    );
+    assert.throws(
+      () =>
+        assertDedicatedUserDataDir(path.join(alias, 'new-profile'), options),
+      /dedicated.*default profile/
+    );
+  });
+
+  it('offers launch names for every supported Chromium source and alias', () => {
+    for (const browser of BROWSER_SOURCES.filter(
+      (entry) => entry.family === 'chromium'
+    )) {
+      assert.ok(CHANNEL_EXECUTABLE_NAMES[browser.id]?.length, browser.id);
+      for (const alias of browser.aliases ?? []) {
+        assert.deepEqual(
+          CHANNEL_EXECUTABLE_NAMES[alias],
+          CHANNEL_EXECUTABLE_NAMES[browser.id]
+        );
+      }
+    }
+  });
+
+  it('protects every catalogue root and descendant profile on every OS', () => {
+    for (const platform of ['linux', 'darwin', 'win32']) {
+      const options = {
+        platform,
+        homeDir: platform === 'win32' ? 'C:\\Users\\test' : '/users/test',
+        environment: {},
+      };
+      for (const browser of BROWSER_SOURCES) {
+        for (const root of resolveBrowserRoots(browser.id, options)) {
+          assert.throws(
+            () => assertDedicatedUserDataDir(root, options),
+            /dedicated.*default profile/,
+            `${browser.id}: ${root}`
+          );
+          assert.throws(
+            () =>
+              assertDedicatedUserDataDir(
+                `${root}${platform === 'win32' ? '\\' : '/'}Profile 1`,
+                options
+              ),
+            /dedicated.*default profile/
+          );
+        }
+      }
+    }
+  });
+
+  it('adds the requested desktop catalogue entries', () => {
+    for (const id of [
+      'whale',
+      '360se',
+      '360chrome',
+      'qq',
+      'sogou',
+      'duckduckgo',
+      'tor',
+    ]) {
+      assert.ok(
+        BROWSER_SOURCES.some((entry) => entry.id === id),
+        id
+      );
+    }
+  });
+});