forked from arne/asdf-games
49 lines
1.3 KiB
JavaScript
49 lines
1.3 KiB
JavaScript
|
var browserify = require('../');
|
||
|
|
var fs = require('fs');
|
||
|
|
var vm = require('vm');
|
||
|
|
var semver = require('semver');
|
||
|
|
var test = require('tap').test;
|
||
|
|
|
||
|
|
test('json', function (t) {
|
||
|
|
t.plan(2);
|
||
|
|
var b = browserify();
|
||
|
|
b.add(__dirname + '/json/main.js');
|
||
|
|
b.bundle(function (err, src) {
|
||
|
|
if (err) t.fail(err);
|
||
|
|
var c = {
|
||
|
|
ex : function (obj) {
|
||
|
|
t.same(obj, { beep : 'boop', x : 555 });
|
||
|
|
}
|
||
|
|
};
|
||
|
|
vm.runInNewContext(src, c);
|
||
|
|
});
|
||
|
|
});
|
||
|
|
|
||
|
|
// This works in Node v10 and up thanks to the JSON superset proposal, which
|
||
|
|
// allows the evil chars in javascript strings.
|
||
|
|
// https://github.com/tc39/proposal-json-superset
|
||
|
|
test('verify evil json', { skip: semver.gte(process.version, 'v10.0.0') }, function(t) {
|
||
|
|
t.plan(1);
|
||
|
|
fs.readFile(__dirname + '/json/evil-chars.json', function(err, data) {
|
||
|
|
if (err) t.fail(err);
|
||
|
|
t.throws(function() {
|
||
|
|
vm.runInNewContext('(' + data.toString() + ')');
|
||
|
|
});
|
||
|
|
});
|
||
|
|
});
|
||
|
|
|
||
|
|
test('evil json', function (t) {
|
||
|
|
t.plan(2);
|
||
|
|
var b = browserify();
|
||
|
|
b.add(__dirname + '/json/evil.js');
|
||
|
|
b.bundle(function (err, src) {
|
||
|
|
if (err) t.fail(err);
|
||
|
|
var c = {
|
||
|
|
ex : function (obj) {
|
||
|
|
t.same(obj, { evil : '\u2028\u2029' });
|
||
|
|
}
|
||
|
|
};
|
||
|
|
vm.runInNewContext(src, c);
|
||
|
|
});
|
||
|
|
});
|