99 lines
3.3 KiB
Go
99 lines
3.3 KiB
Go
package check
|
|
|
|
import (
|
|
"io/fs"
|
|
"os"
|
|
"path/filepath"
|
|
"strings"
|
|
"testing"
|
|
|
|
"git.coffeylabs.org/coffey-labs/hotdog-cms/internal/build"
|
|
"git.coffeylabs.org/coffey-labs/hotdog-cms/starter"
|
|
)
|
|
|
|
func starterSite(t *testing.T, extra string) string {
|
|
t.Helper()
|
|
dir := t.TempDir()
|
|
err := fs.WalkDir(starter.Files, "site", func(p string, d fs.DirEntry, err error) error {
|
|
if err != nil {
|
|
return err
|
|
}
|
|
target := filepath.Join(dir, strings.TrimPrefix(p, "site"))
|
|
if d.IsDir() {
|
|
return os.MkdirAll(target, 0o755)
|
|
}
|
|
data, _ := starter.Files.ReadFile(p)
|
|
return os.WriteFile(target, []byte(strings.ReplaceAll(string(data), "{{SITE_NAME}}", "Test")), 0o644)
|
|
})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
f, _ := os.OpenFile(filepath.Join(dir, "site.yaml"), os.O_APPEND|os.O_WRONLY, 0o644)
|
|
f.WriteString(extra)
|
|
f.Close()
|
|
return dir
|
|
}
|
|
|
|
func TestConsentAndPrivacy(t *testing.T) {
|
|
dir := starterSite(t, "analytics: { provider: plausible, domain: example.org, src: \"https://stats.example.net/js/script.js\" }\nprivacy: { controller: Test Co, contact: [email protected] }\n")
|
|
res, err := build.Run(build.Options{SiteDir: dir})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
home, _ := os.ReadFile(filepath.Join(res.Out, "index.html"))
|
|
h := string(home)
|
|
for _, want := range []string{`data-hotdog-consent data-provider="plausible" data-domain="example.org" data-src="https://stats.example.net/js/script.js" data-privacy="/privacy/" data-hosts="https://stats.example.net"`, `/hotdog-consent.`, `data-hotdog-consent-open>Cookie settings</button>`} {
|
|
if !strings.Contains(h, want) {
|
|
t.Errorf("home missing %s", want)
|
|
}
|
|
}
|
|
if strings.Contains(h, `<script src="https://stats.example.net`) {
|
|
t.Error("the counter loads on page view")
|
|
}
|
|
priv, _ := os.ReadFile(filepath.Join(res.Out, "privacy", "index.html"))
|
|
p := string(priv)
|
|
for _, want := range []string{"Visit statistics", "Plausible (stats.example.net)", "Your consent", "The Contact form: what you write in it", "Test Co", `<!--email_off--><a href="mailto:[email protected]">`} {
|
|
if !strings.Contains(p, want) {
|
|
t.Errorf("privacy page missing %q", want)
|
|
}
|
|
}
|
|
rep, err := Run(dir, res.Out, res.Site.Config)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
for _, pr := range rep.Problems {
|
|
if pr.Rule == "tracker-before-consent" || pr.Rule == "analytics-ungated" || pr.Rule == "privacy-page" || pr.Rule == "privacy-contact" {
|
|
t.Errorf("unexpected: %v", pr)
|
|
}
|
|
}
|
|
if !strings.Contains(rep.CSP, "script-src 'self' https://stats.example.net") || !strings.Contains(rep.CSP, "connect-src 'self' https://stats.example.net") {
|
|
t.Errorf("CSP: %s", rep.CSP)
|
|
}
|
|
|
|
// Counting without asking is a recorded choice, and still a warning.
|
|
dir = starterSite(t, "analytics: { provider: ga4, id: G-ABC123, gated: false }\n")
|
|
res, err = build.Run(build.Options{SiteDir: dir})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
rep, _ = Run(dir, res.Out, res.Site.Config)
|
|
n := 0
|
|
for _, pr := range rep.Problems {
|
|
if pr.Rule == "analytics-ungated" {
|
|
n++
|
|
if pr.Level != Warning {
|
|
t.Errorf("level %s", pr.Level)
|
|
}
|
|
}
|
|
}
|
|
if n == 0 {
|
|
t.Error("no analytics-ungated warning")
|
|
}
|
|
|
|
// A bad analytics setting stops the build, saying why.
|
|
dir = starterSite(t, "analytics: { provider: ga4, id: UA-1 }\n")
|
|
if _, err := build.Run(build.Options{SiteDir: dir}); err == nil || !strings.Contains(err.Error(), "G-ABC123") {
|
|
t.Errorf("bad id: %v", err)
|
|
}
|
|
}
|