Genarrative/src/components/game-distribution/gameDistributionGuards.test.ts

/* @vitest-environment jsdom */

import { describe, expect, it } from 'vitest';

import { normalizeGameEntryUrl } from './gameDistributionGuards';

const GAME_ID = `game_${'a'.repeat(32)}`;
const GAME_ENTRY_PATH = `/games/${GAME_ID}/`;

describe('normalizeGameEntryUrl', () => {
  it('resolves a release gateway relative path against the current origin', () => {
    expect(normalizeGameEntryUrl(GAME_ENTRY_PATH)).toBe(
      new URL(GAME_ENTRY_PATH, window.location.origin).href,
    );
  });

  it('adds the trailing slash required for relative game assets', () => {
    expect(normalizeGameEntryUrl(`/games/${GAME_ID}`)).toBe(
      new URL(GAME_ENTRY_PATH, window.location.origin).href,
    );
  });

  it('normalizes a same-origin absolute release gateway URL', () => {
    expect(
      normalizeGameEntryUrl(`${window.location.origin}/games/${GAME_ID}`),
    ).toBe(new URL(GAME_ENTRY_PATH, window.location.origin).href);
  });

  it.each([
    `/games/${GAME_ID}/assets/x.js`,
    '/games/detail',
    '/creation',
    '/',
    'javascript:alert(1)',
    'https://user:pass@x/y',
    'http://evil.test/x',
  ])('rejects an invalid or unsafe entry URL: %s', (entryUrl) => {
    expect(normalizeGameEntryUrl(entryUrl)).toBeNull();
  });

  it('passes through an absolute HTTPS URL on another origin', () => {
    const entryUrl = 'https://play.example.test/releases/version-1/index.html';

    expect(normalizeGameEntryUrl(entryUrl)).toBe(entryUrl);
  });
});