34 lines
1.1 KiB
C++
34 lines
1.1 KiB
C++
|
/*
|
||
|
|
* Copyright (c) 2026, Luke Wilde <luke@ladybird.org>
|
||
|
|
*
|
||
|
|
* SPDX-License-Identifier: BSD-2-Clause
|
||
|
|
*/
|
||
|
|
|
||
|
|
#include <LibHTTP/HSTSPreloadData.h>
|
||
|
|
#include <LibTest/TestCase.h>
|
||
|
|
|
||
|
|
// Hosts from Chromium's transport_security_state_static.json:
|
||
|
|
// - accounts.google.com: a preloaded force-https host (exact match).
|
||
|
|
// - dev: a force-https TLD with include_subdomains, so any *.dev matches as a subdomain.
|
||
|
|
// - example.test: a reserved TLD that is never preloaded.
|
||
|
|
// Stable enough to anchor tests; if upstream removes one the matching test fails loudly
|
||
|
|
// rather than silently regressing.
|
||
|
|
//
|
||
|
|
// is_known_preloaded_hsts_host expects an already-lowercased domain (callers canonicalize
|
||
|
|
// before querying), so these tests pass lowercased input.
|
||
|
|
|
||
|
|
TEST_CASE(congruent_match)
|
||
|
|
{
|
||
|
|
EXPECT(HTTP::HSTSPreloadData::the().is_known_preloaded_hsts_host("accounts.google.com"sv));
|
||
|
|
}
|
||
|
|
|
||
|
|
TEST_CASE(subdomain_match_via_include_subdomains)
|
||
|
|
{
|
||
|
|
EXPECT(HTTP::HSTSPreloadData::the().is_known_preloaded_hsts_host("anything.dev"sv));
|
||
|
|
}
|
||
|
|
|
||
|
|
TEST_CASE(non_preloaded_host_is_not_known)
|
||
|
|
{
|
||
|
|
EXPECT(!HTTP::HSTSPreloadData::the().is_known_preloaded_hsts_host("example.test"sv));
|
||
|
|
}
|