048ed061c2
实现 allow_insecure_http 并在关闭校验时执行最小格式验证 - 关闭 allowlist 时要求 URL 可解析且 scheme 合规 - 响应头过滤关闭时使用默认白名单策略 - 更新相关文档、示例与测试覆盖
68 lines
2.0 KiB
Go
68 lines
2.0 KiB
Go
package responseheaders
|
|
|
|
import (
|
|
"net/http"
|
|
"testing"
|
|
|
|
"github.com/Wei-Shaw/sub2api/internal/config"
|
|
)
|
|
|
|
func TestFilterHeadersDisabledUsesDefaultAllowlist(t *testing.T) {
|
|
src := http.Header{}
|
|
src.Add("Content-Type", "application/json")
|
|
src.Add("X-Request-Id", "req-123")
|
|
src.Add("X-Test", "ok")
|
|
src.Add("Connection", "keep-alive")
|
|
src.Add("Content-Length", "123")
|
|
|
|
cfg := config.ResponseHeaderConfig{
|
|
Enabled: false,
|
|
ForceRemove: []string{"x-request-id"},
|
|
}
|
|
|
|
filtered := FilterHeaders(src, cfg)
|
|
if filtered.Get("Content-Type") != "application/json" {
|
|
t.Fatalf("expected Content-Type passthrough, got %q", filtered.Get("Content-Type"))
|
|
}
|
|
if filtered.Get("X-Request-Id") != "req-123" {
|
|
t.Fatalf("expected X-Request-Id allowed, got %q", filtered.Get("X-Request-Id"))
|
|
}
|
|
if filtered.Get("X-Test") != "" {
|
|
t.Fatalf("expected X-Test removed, got %q", filtered.Get("X-Test"))
|
|
}
|
|
if filtered.Get("Connection") != "" {
|
|
t.Fatalf("expected Connection to be removed, got %q", filtered.Get("Connection"))
|
|
}
|
|
if filtered.Get("Content-Length") != "" {
|
|
t.Fatalf("expected Content-Length to be removed, got %q", filtered.Get("Content-Length"))
|
|
}
|
|
}
|
|
|
|
func TestFilterHeadersEnabledUsesAllowlist(t *testing.T) {
|
|
src := http.Header{}
|
|
src.Add("Content-Type", "application/json")
|
|
src.Add("X-Extra", "ok")
|
|
src.Add("X-Remove", "nope")
|
|
src.Add("X-Blocked", "nope")
|
|
|
|
cfg := config.ResponseHeaderConfig{
|
|
Enabled: true,
|
|
AdditionalAllowed: []string{"x-extra"},
|
|
ForceRemove: []string{"x-remove"},
|
|
}
|
|
|
|
filtered := FilterHeaders(src, cfg)
|
|
if filtered.Get("Content-Type") != "application/json" {
|
|
t.Fatalf("expected Content-Type allowed, got %q", filtered.Get("Content-Type"))
|
|
}
|
|
if filtered.Get("X-Extra") != "ok" {
|
|
t.Fatalf("expected X-Extra allowed, got %q", filtered.Get("X-Extra"))
|
|
}
|
|
if filtered.Get("X-Remove") != "" {
|
|
t.Fatalf("expected X-Remove removed, got %q", filtered.Get("X-Remove"))
|
|
}
|
|
if filtered.Get("X-Blocked") != "" {
|
|
t.Fatalf("expected X-Blocked removed, got %q", filtered.Get("X-Blocked"))
|
|
}
|
|
}
|