irc/webpush/security_test.go

Rama master · réplica de lectura del repositorio original.

package webpush

import (
	"errors"
	"testing"
)

func TestExternalOnlyHTTPClient(t *testing.T) {
	client := makeExternalOnlyClient()

	for _, url := range []string{
		"https://127.0.0.2/test",
		"https://127.0.0.2:8201",
		"https://127.0.0.2:8201/asdf",
		"https://0.0.0.0/asdf",
		"https://100.64.0.1",
		"https://[0:0:0:0:0:ffff:6440:0001]",
	} {
		_, err := client.Get(url)
		if err == nil || !errors.Is(err, errInternalIP) {
			t.Errorf("%s was not forbidden as expected (got %v)", url, err)
		}
	}
}