mirror of
https://github.com/tiennm99/is-a-dev.git
synced 2026-10-14 22:17:36 +00:00
prettier + updates to tests
This commit is contained in:
1 parent
0bab0f1756
commit
bc55135cef
50 files changed
+372
-203
No files matched your search
+70
-16
@@ -3,7 +3,9 @@ const fs = require("fs-extra");
|
||||
const path = require("path");
|
||||
|
||||
const domainsPath = path.resolve("domains");
|
||||
const files = fs.readdirSync(domainsPath).filter((file) => file.endsWith(".json"));
|
||||
const files = fs
|
||||
.readdirSync(domainsPath)
|
||||
.filter((file) => file.endsWith(".json"));
|
||||
|
||||
const domainCache = {};
|
||||
|
||||
@@ -13,11 +15,15 @@ function getDomainData(subdomain) {
|
||||
}
|
||||
|
||||
try {
|
||||
const data = fs.readJsonSync(path.join(domainsPath, `${subdomain}.json`));
|
||||
const data = fs.readJsonSync(
|
||||
path.join(domainsPath, `${subdomain}.json`),
|
||||
);
|
||||
domainCache[subdomain] = data; // Cache the domain data
|
||||
return data;
|
||||
} catch (error) {
|
||||
throw new Error(`Failed to read JSON for ${subdomain}: ${error.message}`);
|
||||
throw new Error(
|
||||
`Failed to read JSON for ${subdomain}: ${error.message}`,
|
||||
);
|
||||
}
|
||||
}
|
||||
|
||||
@@ -44,23 +50,32 @@ t("Nested subdomains should not exist without a parent subdomain", (t) => {
|
||||
|
||||
if (subdomain.split(".").length > 1) {
|
||||
const parentSubdomain = getParentSubdomain(subdomain);
|
||||
t.true(parentSubdomain && files.includes(`${parentSubdomain}.json`), `${file}: Parent subdomain does not exist`);
|
||||
t.true(
|
||||
parentSubdomain && files.includes(`${parentSubdomain}.json`),
|
||||
`${file}: Parent subdomain does not exist`,
|
||||
);
|
||||
}
|
||||
});
|
||||
});
|
||||
|
||||
t("Nested subdomains should not exist if the parent subdomain has NS records", (t) => {
|
||||
files.forEach((file) => {
|
||||
const subdomain = file.replace(/\.json$/, "");
|
||||
t(
|
||||
"Nested subdomains should not exist if the parent subdomain has NS records",
|
||||
(t) => {
|
||||
files.forEach((file) => {
|
||||
const subdomain = file.replace(/\.json$/, "");
|
||||
|
||||
if (subdomain.split(".").length > 1) {
|
||||
const parentSubdomain = getParentSubdomain(subdomain);
|
||||
const parentDomain = getDomainData(parentSubdomain);
|
||||
if (subdomain.split(".").length > 1) {
|
||||
const parentSubdomain = getParentSubdomain(subdomain);
|
||||
const parentDomain = getDomainData(parentSubdomain);
|
||||
|
||||
t.true(!parentDomain.record.NS, `${file}: Parent subdomain has NS records`);
|
||||
}
|
||||
});
|
||||
});
|
||||
t.true(
|
||||
!parentDomain.record.NS,
|
||||
`${file}: Parent subdomain has NS records`,
|
||||
);
|
||||
}
|
||||
});
|
||||
},
|
||||
);
|
||||
|
||||
t("Nested subdomains should be owned by the parent subdomain's owner", (t) => {
|
||||
files.forEach((file) => {
|
||||
@@ -72,9 +87,48 @@ t("Nested subdomains should be owned by the parent subdomain's owner", (t) => {
|
||||
const parentDomain = getDomainData(parentSubdomain);
|
||||
|
||||
t.true(
|
||||
data.owner.username.toLowerCase() === parentDomain.owner.username.toLowerCase(),
|
||||
`${file}: Owner does not match the parent subdomain`
|
||||
data.owner.username.toLowerCase() ===
|
||||
parentDomain.owner.username.toLowerCase(),
|
||||
`${file}: Owner does not match the parent subdomain`,
|
||||
);
|
||||
}
|
||||
});
|
||||
});
|
||||
|
||||
t("Subdomains containing an underscore can only have specific records", (t) => {
|
||||
files.forEach((file) => {
|
||||
const subdomain = file.replace(/\.json$/, "");
|
||||
|
||||
if (subdomain.includes("_")) {
|
||||
const data = getDomainData(subdomain);
|
||||
const recordKeys = Object.keys(data.record);
|
||||
|
||||
if (
|
||||
subdomain.startsWith("_acme-challenge.") ||
|
||||
subdomain.includes("._domainkey.")
|
||||
) {
|
||||
t.true(
|
||||
recordKeys.every((key) =>
|
||||
new Set(["TXT", "CNAME"]).has(key),
|
||||
),
|
||||
`${file}: This type of subdomain can only have TXT or CNAME records`,
|
||||
);
|
||||
} else if (
|
||||
subdomain.includes("._tcp.") ||
|
||||
subdomain.includes("._udp.")
|
||||
) {
|
||||
t.deepEqual(
|
||||
recordKeys,
|
||||
["SRV"],
|
||||
`${file}: This type of subdomain can only have SRV records`,
|
||||
);
|
||||
} else {
|
||||
t.deepEqual(
|
||||
recordKeys,
|
||||
["TXT"],
|
||||
`${file}: Subdomains with underscores can only have TXT records`,
|
||||
);
|
||||
}
|
||||
}
|
||||
});
|
||||
});
|
||||
+79
-23
@@ -6,29 +6,30 @@ const ignoredRootJSONFiles = ["package-lock.json", "package.json"];
|
||||
|
||||
const requiredFields = {
|
||||
owner: "object",
|
||||
record: "object"
|
||||
record: "object",
|
||||
};
|
||||
|
||||
const optionalFields = {
|
||||
proxied: "boolean",
|
||||
redirect_config: "object"
|
||||
redirect_config: "object",
|
||||
};
|
||||
|
||||
const requiredOwnerFields = {
|
||||
username: "string"
|
||||
username: "string",
|
||||
};
|
||||
|
||||
const optionalOwnerFields = {
|
||||
email: "string"
|
||||
email: "string",
|
||||
};
|
||||
|
||||
const optionalRedirectConfigFields = {
|
||||
custom_paths: "object",
|
||||
redirect_paths: "boolean"
|
||||
redirect_paths: "boolean",
|
||||
};
|
||||
|
||||
const emailRegex = /^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$/;
|
||||
const hostnameRegex = /^(?=.{1,253}$)(?:(?:[_a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)\.)+[a-zA-Z]{2,63}$/;
|
||||
const hostnameRegex =
|
||||
/^(?=.{1,253}$)(?:(?:[_a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)\.)+[a-zA-Z]{2,63}$/;
|
||||
|
||||
const exceptedDomains = require("../util/excepted.json");
|
||||
const reservedDomains = require("../util/reserved.json");
|
||||
@@ -52,7 +53,9 @@ function expandReservedDomains(reserved) {
|
||||
}
|
||||
expandedList.splice(expandedList.indexOf(item), 1);
|
||||
} else {
|
||||
throw new Error(`[util/reserved.json] Invalid range [${start}-${end}] in "${item}"`);
|
||||
throw new Error(
|
||||
`[util/reserved.json] Invalid range [${start}-${end}] in "${item}"`,
|
||||
);
|
||||
}
|
||||
}
|
||||
});
|
||||
@@ -87,7 +90,11 @@ function validateFields(t, obj, fields, file, prefix = "") {
|
||||
const fieldPath = prefix ? `${prefix}.${key}` : key;
|
||||
|
||||
if (obj.hasOwnProperty(key)) {
|
||||
t.is(typeof obj[key], fields[key], `${file}: Field ${fieldPath} should be of type ${fields[key]}`);
|
||||
t.is(
|
||||
typeof obj[key],
|
||||
fields[key],
|
||||
`${file}: Field ${fieldPath} should be of type ${fields[key]}`,
|
||||
);
|
||||
} else if (fields === requiredFields) {
|
||||
t.true(false, `${file}: Missing required field: ${fieldPath}`);
|
||||
}
|
||||
@@ -95,9 +102,18 @@ function validateFields(t, obj, fields, file, prefix = "") {
|
||||
}
|
||||
|
||||
function validateFileName(t, file) {
|
||||
t.true(file.endsWith(".json"), `${file}: File does not have .json extension`);
|
||||
t.false(file.includes(".is-a.dev"), `${file}: File name should not contain .is-a.dev`);
|
||||
t.true(file === file.toLowerCase(), `${file}: File name should be all lowercase`);
|
||||
t.true(
|
||||
file.endsWith(".json"),
|
||||
`${file}: File does not have .json extension`,
|
||||
);
|
||||
t.false(
|
||||
file.includes(".is-a.dev"),
|
||||
`${file}: File name should not contain .is-a.dev`,
|
||||
);
|
||||
t.true(
|
||||
file === file.toLowerCase(),
|
||||
`${file}: File name should be all lowercase`,
|
||||
);
|
||||
|
||||
// Ignore root domain
|
||||
if (file !== "@.json") {
|
||||
@@ -106,12 +122,27 @@ function validateFileName(t, file) {
|
||||
t.regex(
|
||||
subdomain + ".is-a.dev",
|
||||
hostnameRegex,
|
||||
`${file}: FQDN must be 1-253 characters, use letters, numbers, dots, or hyphens, and not start or end with a hyphen.`
|
||||
`${file}: FQDN must be 1-253 characters, use letters, numbers, dots, or hyphens, and not start or end with a hyphen.`,
|
||||
);
|
||||
t.false(
|
||||
expandedReservedDomains.includes(subdomain),
|
||||
`${file}: Subdomain name is reserved`,
|
||||
);
|
||||
// Disallow nested subdomains above reserved domains
|
||||
t.true(
|
||||
!expandedReservedDomains.some((reserved) =>
|
||||
subdomain.endsWith(`.${reserved}`),
|
||||
),
|
||||
`${file}: Subdomain name is reserved`,
|
||||
);
|
||||
t.true(!expandedReservedDomains.includes(subdomain), `${file}: Subdomain name is reserved`);
|
||||
|
||||
if (subdomain.split(".").length === 1 && !exceptedDomains.includes(subdomain)) {
|
||||
t.false(subdomain.startsWith("_"), `${file}: Root subdomains should not start with an underscore`);
|
||||
const rootSubdomain = subdomain.split(".").pop();
|
||||
|
||||
if (!exceptedDomains.includes(rootSubdomain)) {
|
||||
t.false(
|
||||
rootSubdomain.startsWith("_"),
|
||||
`${file}: Root subdomains should not start with an underscore`,
|
||||
);
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -119,13 +150,19 @@ function validateFileName(t, file) {
|
||||
t("JSON files should not be in the root directory", (t) => {
|
||||
const rootFiles = fs
|
||||
.readdirSync(path.resolve())
|
||||
.filter((file) => file.endsWith(".json") && !ignoredRootJSONFiles.includes(file));
|
||||
.filter(
|
||||
(file) =>
|
||||
file.endsWith(".json") && !ignoredRootJSONFiles.includes(file),
|
||||
);
|
||||
t.is(rootFiles.length, 0, "JSON files should not be in the root directory");
|
||||
});
|
||||
|
||||
t("All files should be valid JSON", (t) => {
|
||||
files.forEach((file) => {
|
||||
t.notThrows(() => fs.readJsonSync(path.join(domainsPath, file)), `${file}: Invalid JSON file`);
|
||||
t.notThrows(
|
||||
() => fs.readJsonSync(path.join(domainsPath, file)),
|
||||
`${file}: Invalid JSON file`,
|
||||
);
|
||||
});
|
||||
});
|
||||
|
||||
@@ -135,7 +172,10 @@ t("All files should not have duplicate keys", (t) => {
|
||||
const rawData = fs.readFileSync(`${domainsPath}/${file}`, "utf8");
|
||||
const duplicateKeys = findDuplicateKeys(rawData);
|
||||
|
||||
t.true(!duplicateKeys.length, `${file}: Duplicate keys found: ${duplicateKeys.join(", ")}`);
|
||||
t.true(
|
||||
!duplicateKeys.length,
|
||||
`${file}: Duplicate keys found: ${duplicateKeys.join(", ")}`,
|
||||
);
|
||||
});
|
||||
});
|
||||
|
||||
@@ -159,17 +199,33 @@ t("All files should have valid required and optional fields", (t) => {
|
||||
// Validate optional fields for top-level and redirect config
|
||||
validateFields(t, data, optionalFields, file);
|
||||
if (data.redirect_config) {
|
||||
validateFields(t, data.redirect_config, optionalRedirectConfigFields, file, "redirect_config");
|
||||
validateFields(
|
||||
t,
|
||||
data.redirect_config,
|
||||
optionalRedirectConfigFields,
|
||||
file,
|
||||
"redirect_config",
|
||||
);
|
||||
}
|
||||
|
||||
// Validate email format
|
||||
if (data.owner.email) {
|
||||
t.regex(data.owner.email, emailRegex, `${file}: Owner email should be a valid email address`);
|
||||
t.true(!data.owner.email.endsWith("@users.noreply.github.com"), `${file}: Owner email should not be a GitHub no-reply email`);
|
||||
t.regex(
|
||||
data.owner.email,
|
||||
emailRegex,
|
||||
`${file}: Owner email should be a valid email address`,
|
||||
);
|
||||
t.false(
|
||||
data.owner.email.endsWith("@users.noreply.github.com"),
|
||||
`${file}: Owner email should not be a GitHub no-reply email`,
|
||||
);
|
||||
}
|
||||
|
||||
// Ensure 'record' field is not empty
|
||||
t.true(Object.keys(data.record).length > 0, `${file}: Missing DNS records`);
|
||||
t.true(
|
||||
Object.keys(data.record).length > 0,
|
||||
`${file}: Missing DNS records`,
|
||||
);
|
||||
});
|
||||
});
|
||||
|
||||
@@ -180,7 +236,7 @@ t("Reserved domains file should be valid", (t) => {
|
||||
t.regex(
|
||||
item,
|
||||
subdomainRegex,
|
||||
`[util/reserved-domains.json] Invalid subdomain name "${item}" at index ${index}`
|
||||
`[util/reserved-domains.json] Invalid subdomain name "${item}" at index ${index}`,
|
||||
);
|
||||
});
|
||||
|
||||
|
||||
+16
-9
@@ -25,22 +25,29 @@ function validateProxiedRecords(t, data, file) {
|
||||
const recordTypes = Array.from(requiredRecordsToProxy).join(", ");
|
||||
|
||||
if (data.proxied) {
|
||||
const hasProxiedRecord = Object.keys(data.record).some((key) => requiredRecordsToProxy.has(key));
|
||||
const hasProxiedRecord = Object.keys(data.record).some((key) =>
|
||||
requiredRecordsToProxy.has(key),
|
||||
);
|
||||
|
||||
t.true(
|
||||
hasProxiedRecord,
|
||||
`${file}: Proxied is true but there are no records that can be proxied (${recordTypes} expected)`
|
||||
`${file}: Proxied is true but there are no records that can be proxied (${recordTypes} expected)`,
|
||||
);
|
||||
}
|
||||
}
|
||||
|
||||
const domainsPath = path.resolve("domains");
|
||||
const files = fs.readdirSync(domainsPath).filter((file) => file.endsWith(".json"));
|
||||
const files = fs
|
||||
.readdirSync(domainsPath)
|
||||
.filter((file) => file.endsWith(".json"));
|
||||
|
||||
t("Domains with proxy enabled must have at least one proxy-able record", (t) => {
|
||||
files.forEach((file) => {
|
||||
const domain = getDomainData(file);
|
||||
t(
|
||||
"Domains with proxy enabled must have at least one proxy-able record",
|
||||
(t) => {
|
||||
files.forEach((file) => {
|
||||
const domain = getDomainData(file);
|
||||
|
||||
validateProxiedRecords(t, domain, file);
|
||||
});
|
||||
});
|
||||
validateProxiedRecords(t, domain, file);
|
||||
});
|
||||
},
|
||||
);
|
||||
+162
-58
@@ -2,14 +2,29 @@ const t = require("ava");
|
||||
const fs = require("fs-extra");
|
||||
const path = require("path");
|
||||
|
||||
const validRecordTypes = new Set(["A", "AAAA", "CAA", "CNAME", "DS", "MX", "NS", "SRV", "TXT", "URL"]);
|
||||
const hostnameRegex = /^(?=.{1,253}$)(?:(?:[_a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)\.)+[a-zA-Z]{2,63}$/;
|
||||
const ipv4Regex = /^(25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9])(\.(25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9])){3}$/;
|
||||
const validRecordTypes = new Set([
|
||||
"A",
|
||||
"AAAA",
|
||||
"CAA",
|
||||
"CNAME",
|
||||
"DS",
|
||||
"MX",
|
||||
"NS",
|
||||
"SRV",
|
||||
"TXT",
|
||||
"URL",
|
||||
]);
|
||||
const hostnameRegex =
|
||||
/^(?=.{1,253}$)(?:(?:[_a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)\.)+[a-zA-Z]{2,63}$/;
|
||||
const ipv4Regex =
|
||||
/^(25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9])(\.(25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9])){3}$/;
|
||||
const ipv6Regex =
|
||||
/^(?:[0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}$|^::(?:[0-9a-fA-F]{1,4}:){0,6}[0-9a-fA-F]{1,4}$|^(?:[0-9a-fA-F]{1,4}:){1,7}:$|^(?:[0-9a-fA-F]{1,4}:){0,6}::(?:[0-9a-fA-F]{1,4}:){0,5}[0-9a-fA-F]{1,4}$/;
|
||||
|
||||
const domainsPath = path.resolve("domains");
|
||||
const files = fs.readdirSync(domainsPath).filter((file) => file.endsWith(".json"));
|
||||
const files = fs
|
||||
.readdirSync(domainsPath)
|
||||
.filter((file) => file.endsWith(".json"));
|
||||
|
||||
const domainCache = {};
|
||||
|
||||
@@ -38,7 +53,7 @@ function expandIPv6(ip) {
|
||||
segments = [
|
||||
...nonEmptySegments.slice(0, emptyIndex),
|
||||
...Array(missingSegments).fill("0000"),
|
||||
...nonEmptySegments.slice(emptyIndex)
|
||||
...nonEmptySegments.slice(emptyIndex),
|
||||
];
|
||||
}
|
||||
|
||||
@@ -48,7 +63,11 @@ function expandIPv6(ip) {
|
||||
function validateIPv4(ip, proxied) {
|
||||
const parts = ip.split(".").map(Number);
|
||||
|
||||
if (parts.length !== 4 || parts.some((part) => isNaN(part) || part < 0 || part > 255)) return false;
|
||||
if (
|
||||
parts.length !== 4 ||
|
||||
parts.some((part) => isNaN(part) || part < 0 || part > 255)
|
||||
)
|
||||
return false;
|
||||
if (ip === "192.0.2.1" && proxied) return true;
|
||||
|
||||
return !(
|
||||
@@ -94,100 +113,153 @@ function validateRecordValues(t, data, file) {
|
||||
Object.entries(data.record).forEach(([key, value]) => {
|
||||
// General validation for arrays
|
||||
if (["A", "AAAA", "MX", "NS"].includes(key)) {
|
||||
t.true(Array.isArray(value), `${file}: Record value for ${key} should be an array`);
|
||||
t.true(
|
||||
Array.isArray(value),
|
||||
`${file}: Record value for ${key} should be an array`,
|
||||
);
|
||||
|
||||
value.forEach((record, idx) => {
|
||||
t.true(
|
||||
typeof record === "string",
|
||||
`${file}: Record value for ${key} should be a string at index ${idx}`
|
||||
`${file}: Record value for ${key} should be a string at index ${idx}`,
|
||||
);
|
||||
|
||||
if (key === "A") {
|
||||
t.true(ipv4Regex.test(record), `${file}: Invalid IPv4 address for ${key} at index ${idx}`);
|
||||
t.true(
|
||||
ipv4Regex.test(record),
|
||||
`${file}: Invalid IPv4 address for ${key} at index ${idx}`,
|
||||
);
|
||||
t.true(
|
||||
validateIPv4(record, data.proxied),
|
||||
`${file}: Invalid IPv4 address for ${key} at index ${idx}`
|
||||
`${file}: Invalid IPv4 address for ${key} at index ${idx}`,
|
||||
);
|
||||
} else if (key === "AAAA") {
|
||||
const expandedIPv6 = expandIPv6(record);
|
||||
t.true(ipv6Regex.test(expandedIPv6), `${file}: Invalid IPv6 address for ${key} at index ${idx}`);
|
||||
t.true(validateIPv6(expandedIPv6), `${file}: Invalid IPv6 address for ${key} at index ${idx}`);
|
||||
t.true(
|
||||
ipv6Regex.test(expandedIPv6),
|
||||
`${file}: Invalid IPv6 address for ${key} at index ${idx}`,
|
||||
);
|
||||
t.true(
|
||||
validateIPv6(expandedIPv6),
|
||||
`${file}: Invalid IPv6 address for ${key} at index ${idx}`,
|
||||
);
|
||||
} else if (["MX", "NS"].includes(key)) {
|
||||
t.true(isValidHostname(record), `${file}: Invalid hostname for ${key} at index ${idx}`);
|
||||
t.true(
|
||||
isValidHostname(record),
|
||||
`${file}: Invalid hostname for ${key} at index ${idx}`,
|
||||
);
|
||||
}
|
||||
});
|
||||
}
|
||||
|
||||
// CNAME and URL validations
|
||||
if (["CNAME", "URL"].includes(key)) {
|
||||
t.true(typeof value === "string", `${file}: Record value for ${key} should be a string`);
|
||||
t.true(
|
||||
typeof value === "string",
|
||||
`${file}: Record value for ${key} should be a string`,
|
||||
);
|
||||
|
||||
if (key === "CNAME") {
|
||||
t.true(isValidHostname(value), `${file}: Invalid hostname for ${key}`);
|
||||
t.true(
|
||||
isValidHostname(value),
|
||||
`${file}: Invalid hostname for ${key}`,
|
||||
);
|
||||
t.true(value !== file, `${file}: CNAME cannot point to itself`);
|
||||
} else if (key === "URL") {
|
||||
t.true(
|
||||
value.startsWith("http://") || value.startsWith("https://"),
|
||||
`${file}: Record value for ${key} must start with http:// or https://`
|
||||
`${file}: Record value for ${key} must start with http:// or https://`,
|
||||
);
|
||||
t.notThrows(
|
||||
() => new URL(value),
|
||||
`${file}: Invalid URL for ${key}`,
|
||||
);
|
||||
t.notThrows(() => new URL(value), `${file}: Invalid URL for ${key}`);
|
||||
|
||||
const urlHost = new URL(value).host;
|
||||
const isSelfReferencing =
|
||||
file === "@.json" ? urlHost === "is-a.dev" : urlHost === `${subdomain}.is-a.dev`;
|
||||
file === "@.json"
|
||||
? urlHost === "is-a.dev"
|
||||
: urlHost === `${subdomain}.is-a.dev`;
|
||||
|
||||
t.true(!isSelfReferencing, `${file}: URL cannot point to itself`);
|
||||
t.false(
|
||||
isSelfReferencing,
|
||||
`${file}: URL cannot point to itself`,
|
||||
);
|
||||
}
|
||||
}
|
||||
|
||||
// CAA, DS, SRV validations
|
||||
if (["CAA", "DS", "SRV"].includes(key)) {
|
||||
t.true(Array.isArray(value), `${file}: Record value for ${key} should be an array`);
|
||||
t.true(
|
||||
Array.isArray(value),
|
||||
`${file}: Record value for ${key} should be an array`,
|
||||
);
|
||||
|
||||
value.forEach((record, idx) => {
|
||||
t.true(
|
||||
typeof record === "object",
|
||||
`${file}: Record value for ${key} should be an object at index ${idx}`
|
||||
`${file}: Record value for ${key} should be an object at index ${idx}`,
|
||||
);
|
||||
|
||||
if (key === "CAA") {
|
||||
t.true(
|
||||
["issue", "issuewild", "iodef"].includes(record.tag),
|
||||
`${file}: Invalid tag for CAA at index ${idx}`
|
||||
`${file}: Invalid tag for CAA at index ${idx}`,
|
||||
);
|
||||
t.true(
|
||||
typeof record.value === "string",
|
||||
`${file}: Invalid value for CAA at index ${idx}`,
|
||||
);
|
||||
t.true(typeof record.value === "string", `${file}: Invalid value for CAA at index ${idx}`);
|
||||
t.true(
|
||||
isValidHostname(record.value) || record.value === ";",
|
||||
`${file}: Value must be a hostname or semicolon for CAA at index ${idx}`
|
||||
`${file}: Value must be a hostname or semicolon for CAA at index ${idx}`,
|
||||
);
|
||||
} else if (key === "DS") {
|
||||
t.true(
|
||||
Number.isInteger(record.key_tag) && record.key_tag >= 0 && record.key_tag <= 65535,
|
||||
`${file}: Invalid key_tag for DS at index ${idx}`
|
||||
Number.isInteger(record.key_tag) &&
|
||||
record.key_tag >= 0 &&
|
||||
record.key_tag <= 65535,
|
||||
`${file}: Invalid key_tag for DS at index ${idx}`,
|
||||
);
|
||||
t.true(
|
||||
Number.isInteger(record.algorithm) && record.algorithm >= 0 && record.algorithm <= 255,
|
||||
`${file}: Invalid algorithm for DS at index ${idx}`
|
||||
Number.isInteger(record.algorithm) &&
|
||||
record.algorithm >= 0 &&
|
||||
record.algorithm <= 255,
|
||||
`${file}: Invalid algorithm for DS at index ${idx}`,
|
||||
);
|
||||
t.true(
|
||||
Number.isInteger(record.digest_type) && record.digest_type >= 0 && record.digest_type <= 255,
|
||||
`${file}: Invalid digest_type for DS at index ${idx}`
|
||||
Number.isInteger(record.digest_type) &&
|
||||
record.digest_type >= 0 &&
|
||||
record.digest_type <= 255,
|
||||
`${file}: Invalid digest_type for DS at index ${idx}`,
|
||||
);
|
||||
t.true(
|
||||
isValidHexadecimal(record.digest),
|
||||
`${file}: Invalid digest for DS at index ${idx}`,
|
||||
);
|
||||
t.true(isValidHexadecimal(record.digest), `${file}: Invalid digest for DS at index ${idx}`);
|
||||
} else if (key === "SRV") {
|
||||
t.true(
|
||||
Number.isInteger(record.priority) && record.priority >= 0 && record.priority <= 65535,
|
||||
`${file}: Invalid priority for SRV at index ${idx}`
|
||||
Number.isInteger(record.priority) &&
|
||||
record.priority >= 0 &&
|
||||
record.priority <= 65535,
|
||||
`${file}: Invalid priority for SRV at index ${idx}`,
|
||||
);
|
||||
t.true(
|
||||
Number.isInteger(record.weight) && record.weight >= 0 && record.weight <= 65535,
|
||||
`${file}: Invalid weight for SRV at index ${idx}`
|
||||
Number.isInteger(record.weight) &&
|
||||
record.weight >= 0 &&
|
||||
record.weight <= 65535,
|
||||
`${file}: Invalid weight for SRV at index ${idx}`,
|
||||
);
|
||||
t.true(
|
||||
Number.isInteger(record.port) && record.port >= 0 && record.port <= 65535,
|
||||
`${file}: Invalid port for SRV at index ${idx}`
|
||||
Number.isInteger(record.port) &&
|
||||
record.port >= 0 &&
|
||||
record.port <= 65535,
|
||||
`${file}: Invalid port for SRV at index ${idx}`,
|
||||
);
|
||||
t.true(
|
||||
isValidHostname(record.target),
|
||||
`${file}: Invalid target for SRV at index ${idx}`,
|
||||
);
|
||||
t.true(isValidHostname(record.target), `${file}: Invalid target for SRV at index ${idx}`);
|
||||
}
|
||||
});
|
||||
}
|
||||
@@ -196,44 +268,60 @@ function validateRecordValues(t, data, file) {
|
||||
if (key === "TXT") {
|
||||
const values = Array.isArray(value) ? value : [value];
|
||||
values.forEach((record, idx) => {
|
||||
t.true(typeof record === "string", `${file}: TXT record value should be a string at index ${idx}`);
|
||||
t.true(
|
||||
typeof record === "string",
|
||||
`${file}: TXT record value should be a string at index ${idx}`,
|
||||
);
|
||||
});
|
||||
}
|
||||
});
|
||||
|
||||
if (data.redirect_config) {
|
||||
const customPaths = Object.keys(data.redirect_config.custom_paths || {});
|
||||
const customPaths = Object.keys(
|
||||
data.redirect_config.custom_paths || {},
|
||||
);
|
||||
const pathRegex = /^\/[a-zA-Z0-9\-_\.\/]+(?<!\/)$/;
|
||||
|
||||
customPaths.forEach((customPath, idx) => {
|
||||
const customRedirectURL = data.redirect_config.custom_paths[customPath];
|
||||
const customRedirectURL =
|
||||
data.redirect_config.custom_paths[customPath];
|
||||
const urlMessage = `${file}: Custom path in redirect_config`;
|
||||
|
||||
// Validate the custom path
|
||||
t.true(
|
||||
pathRegex.test(customPath),
|
||||
`${urlMessage} must start with a slash, contain only alphanumeric characters, hyphens, underscores, periods, and slashes, and cannot end with a slash at index ${idx}`
|
||||
`${urlMessage} must start with a slash, contain only alphanumeric characters, hyphens, underscores, periods, and slashes, and cannot end with a slash at index ${idx}`,
|
||||
);
|
||||
t.true(
|
||||
customPath.length >= 2 && customPath.length <= 255,
|
||||
`${urlMessage} should be 2-255 characters long at index ${idx}`
|
||||
`${urlMessage} should be 2-255 characters long at index ${idx}`,
|
||||
);
|
||||
|
||||
// Validate the redirect URL
|
||||
t.true(
|
||||
data.record.URL !== customRedirectURL,
|
||||
`${urlMessage} should be different from the URL record at index ${idx}`
|
||||
`${urlMessage} should be different from the URL record at index ${idx}`,
|
||||
);
|
||||
t.true(
|
||||
customRedirectURL.startsWith("http://") || customRedirectURL.startsWith("https://"),
|
||||
`${urlMessage} must start with http:// or https:// at index ${idx}`
|
||||
customRedirectURL.startsWith("http://") ||
|
||||
customRedirectURL.startsWith("https://"),
|
||||
`${urlMessage} must start with http:// or https:// at index ${idx}`,
|
||||
);
|
||||
t.notThrows(
|
||||
() => new URL(customRedirectURL),
|
||||
`${urlMessage} contains an invalid URL at index ${idx}`,
|
||||
);
|
||||
t.notThrows(() => new URL(customRedirectURL), `${urlMessage} contains an invalid URL at index ${idx}`);
|
||||
|
||||
// Check for self-referencing redirects
|
||||
const urlHost = new URL(customRedirectURL).host;
|
||||
const isSelfReferencing = file === "@.json" ? urlHost === "is-a.dev" : urlHost === `${subdomain}.is-a.dev`;
|
||||
t.true(!isSelfReferencing, `${urlMessage} cannot point to itself at index ${idx}`);
|
||||
const isSelfReferencing =
|
||||
file === "@.json"
|
||||
? urlHost === "is-a.dev"
|
||||
: urlHost === `${subdomain}.is-a.dev`;
|
||||
t.false(
|
||||
isSelfReferencing,
|
||||
`${urlMessage} cannot point to itself at index ${idx}`,
|
||||
);
|
||||
});
|
||||
}
|
||||
}
|
||||
@@ -244,35 +332,51 @@ t("All files should have valid record types", (t) => {
|
||||
const recordKeys = Object.keys(data.record);
|
||||
|
||||
recordKeys.forEach((key) => {
|
||||
t.true(validateRecordType(key), `${file}: Invalid record type: ${key}`);
|
||||
t.true(
|
||||
validateRecordType(key),
|
||||
`${file}: Invalid record type: ${key}`,
|
||||
);
|
||||
});
|
||||
|
||||
// Record type combinations validation
|
||||
if (recordKeys.includes("CNAME") && !data.proxied) {
|
||||
t.is(recordKeys.length, 1, `${file}: CNAME records cannot be combined with other records unless proxied`);
|
||||
t.is(
|
||||
recordKeys.length,
|
||||
1,
|
||||
`${file}: CNAME records cannot be combined with other records unless proxied`,
|
||||
);
|
||||
}
|
||||
if (recordKeys.includes("NS")) {
|
||||
t.true(
|
||||
recordKeys.length === 1 || (recordKeys.length === 2 && recordKeys.includes("DS")),
|
||||
`${file}: NS records cannot be combined with other records, except for DS records`
|
||||
recordKeys.length === 1 ||
|
||||
(recordKeys.length === 2 && recordKeys.includes("DS")),
|
||||
`${file}: NS records cannot be combined with other records, except for DS records`,
|
||||
);
|
||||
}
|
||||
if (recordKeys.includes("DS")) {
|
||||
t.true(recordKeys.includes("NS"), `${file}: DS records must be combined with NS records`);
|
||||
t.true(
|
||||
recordKeys.includes("NS"),
|
||||
`${file}: DS records must be combined with NS records`,
|
||||
);
|
||||
}
|
||||
if (recordKeys.includes("URL")) {
|
||||
t.true(
|
||||
!recordKeys.includes("A") && !recordKeys.includes("AAAA") && !recordKeys.includes("CNAME"),
|
||||
`${file}: URL records cannot be combined with A, AAAA, or CNAME records`
|
||||
!recordKeys.includes("A") &&
|
||||
!recordKeys.includes("AAAA") &&
|
||||
!recordKeys.includes("CNAME"),
|
||||
`${file}: URL records cannot be combined with A, AAAA, or CNAME records`,
|
||||
);
|
||||
}
|
||||
if (data.redirect_config) {
|
||||
t.true(
|
||||
recordKeys.includes("URL") || data.proxied,
|
||||
`${file}: Redirect config must be combined with a URL record or the domain must be proxied`
|
||||
`${file}: Redirect config must be combined with a URL record or the domain must be proxied`,
|
||||
);
|
||||
if (data.redirect_config.redirect_paths) {
|
||||
t.true(recordKeys.includes("URL"), `${file}: redirect_config.redirect_paths requires a URL record`);
|
||||
t.true(
|
||||
recordKeys.includes("URL"),
|
||||
`${file}: redirect_config.redirect_paths requires a URL record`,
|
||||
);
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
+21
-8
@@ -3,16 +3,24 @@ const fs = require("fs-extra");
|
||||
const path = require("path");
|
||||
|
||||
const domainsPath = path.resolve("domains");
|
||||
const files = fs.readdirSync(domainsPath).filter((file) => file.endsWith(".json"));
|
||||
const files = fs
|
||||
.readdirSync(domainsPath)
|
||||
.filter((file) => file.endsWith(".json"));
|
||||
|
||||
const bypassedUsernames = require("../util/bypassed.json").map((username) => username.toLowerCase());
|
||||
const bypassedUsernames = require("../util/bypassed.json").map((username) =>
|
||||
username.toLowerCase(),
|
||||
);
|
||||
|
||||
function getDomainData(subdomain) {
|
||||
try {
|
||||
const data = fs.readJsonSync(path.join(domainsPath, `${subdomain}.json`));
|
||||
const data = fs.readJsonSync(
|
||||
path.join(domainsPath, `${subdomain}.json`),
|
||||
);
|
||||
return data;
|
||||
} catch (error) {
|
||||
throw new Error(`Failed to read JSON for ${subdomain}: ${error.message}`);
|
||||
throw new Error(
|
||||
`Failed to read JSON for ${subdomain}: ${error.message}`,
|
||||
);
|
||||
}
|
||||
}
|
||||
|
||||
@@ -23,15 +31,20 @@ t("Users are limited to one single character subdomain", (t) => {
|
||||
const subdomain = file.replace(/\.json$/, "");
|
||||
const data = getDomainData(subdomain);
|
||||
|
||||
if (subdomain.length === 1 && !bypassedUsernames.includes(data.owner.username.toLowerCase())) {
|
||||
if (
|
||||
subdomain.length === 1 &&
|
||||
!bypassedUsernames.includes(data.owner.username.toLowerCase())
|
||||
) {
|
||||
results.push({
|
||||
subdomain,
|
||||
owner: data.owner.username.toLowerCase()
|
||||
owner: data.owner.username.toLowerCase(),
|
||||
});
|
||||
}
|
||||
});
|
||||
|
||||
const duplicates = results.filter((result) => results.filter((r) => r.owner === result.owner).length > 1);
|
||||
const duplicates = results.filter(
|
||||
(result) => results.filter((r) => r.owner === result.owner).length > 1,
|
||||
);
|
||||
const output = duplicates.reduce((acc, curr) => {
|
||||
if (!acc[curr.owner]) {
|
||||
acc[curr.owner] = [];
|
||||
@@ -46,7 +59,7 @@ t("Users are limited to one single character subdomain", (t) => {
|
||||
0,
|
||||
Object.keys(output)
|
||||
.map((owner) => `${owner} - ${output[owner].join(", ")}`)
|
||||
.join("\n")
|
||||
.join("\n"),
|
||||
);
|
||||
|
||||
t.pass();
|
||||
|
||||
Reference in new issue
Block a user