External/SnapOtter
1
0
Fork 0
mirror of https://github.com/snapotter-hq/SnapOtter.git synced 2026-08-03 07:46:42 +02:00
Code Issues Packages Projects Releases Wiki Activity

test(api): section-prefix tool URLs across integration, docker, and e2e api specs

Browse Source
This commit is contained in:
SnapOtter
2026-06-20 12:24:50 +08:00
parent fc205c7428
commit f80444791b
213 changed files with 2868 additions and 2846 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/e2e/security.spec.ts
+5 -5
View File
@@ -84,7 +84,7 @@ test.describe("Security: XSS in filenames", () => {
formData.append("file", blob, "<img src=x onerror=alert(1)>.png");
formData.append("settings", JSON.stringify({ width: 50, height: 50, fit: "contain" }));
const res = await fetch(`${API}/api/v1/tools/resize`, {
const res = await fetch(`${API}/api/v1/tools/image/resize`, {
method: "POST",
headers: authHeaders(token),
body: formData,
@@ -110,7 +110,7 @@ test.describe("Security: XSS in filenames", () => {
formData.append("file", blob, "../../../etc/passwd.png");
formData.append("settings", JSON.stringify({ width: 50, height: 50, fit: "contain" }));
const res = await fetch(`${API}/api/v1/tools/resize`, {
const res = await fetch(`${API}/api/v1/tools/image/resize`, {
method: "POST",
headers: authHeaders(token),
body: formData,
@@ -130,7 +130,7 @@ test.describe("Security: XSS in filenames", () => {
formData.append("file", blob, "test\x00.png");
formData.append("settings", JSON.stringify({ width: 50 }));
const res = await fetch(`${API}/api/v1/tools/resize`, {
const res = await fetch(`${API}/api/v1/tools/image/resize`, {
method: "POST",
headers: authHeaders(token),
body: formData,
@@ -292,7 +292,7 @@ test.describe("Security: CSRF and request validation", () => {
formData.append("file", blob, "not-an-image.txt");
formData.append("settings", JSON.stringify({ width: 50 }));
const res = await fetch(`${API}/api/v1/tools/resize`, {
const res = await fetch(`${API}/api/v1/tools/image/resize`, {
method: "POST",
headers: authHeaders(token),
body: formData,
@@ -309,7 +309,7 @@ test.describe("Security: CSRF and request validation", () => {
formData.append("file", emptyBlob, "empty.png");
formData.append("settings", JSON.stringify({ width: 50 }));
const res = await fetch(`${API}/api/v1/tools/resize`, {
const res = await fetch(`${API}/api/v1/tools/image/resize`, {
method: "POST",
headers: authHeaders(token),
body: formData,