mirror of
https://github.com/vee1e/subidx.git
synced 2026-09-01 17:57:13 +00:00
lakshit verma
2be376e728
Certificate SANs went into the store after only lowercasing, so a unicode name like 'buecher.example.com' was stored as raw UTF-8 and could never be found by search, which runs IDNA. Ingest now maps names through a permissive IDNA profile (keeping DKIM-style underscores that the strict lookup profile rejects), enforces RFC 1035 label lengths, and stores the canonical form. Normalize also no longer lowercases before IDNA mapping, which produced wrong punycode for decomposed unicode input.
91 lines
2.3 KiB
Go
91 lines
2.3 KiB
Go
package apex
|
|
|
|
import (
|
|
"strings"
|
|
"testing"
|
|
)
|
|
|
|
func TestNormalize(t *testing.T) {
|
|
cases := []struct {
|
|
in string
|
|
want string
|
|
wantErr bool
|
|
}{
|
|
{"EXAMPLE.COM", "example.com", false},
|
|
{"example.com.", "example.com", false},
|
|
{" example.com ", "example.com", false},
|
|
{"xn--bcher-kva.example", "xn--bcher-kva.example", false},
|
|
{"_bad.example.com", "", true},
|
|
{"", "", true},
|
|
{"foo.local", "", true},
|
|
{"bar.test", "", true},
|
|
{"x.home.arpa", "", true},
|
|
}
|
|
for _, c := range cases {
|
|
got, err := Normalize(c.in)
|
|
if c.wantErr {
|
|
if err == nil {
|
|
t.Errorf("Normalize(%q): want error, got %q", c.in, got)
|
|
}
|
|
continue
|
|
}
|
|
if err != nil {
|
|
t.Errorf("Normalize(%q): unexpected error %v", c.in, err)
|
|
continue
|
|
}
|
|
if got != c.want {
|
|
t.Errorf("Normalize(%q) = %q, want %q", c.in, got, c.want)
|
|
}
|
|
}
|
|
}
|
|
|
|
func TestValidateApex(t *testing.T) {
|
|
if _, err := ValidateApex("www.example.com"); err == nil {
|
|
t.Error("subdomain accepted as apex")
|
|
}
|
|
if _, err := ValidateApex("co.uk"); err == nil {
|
|
t.Error("public suffix accepted as apex")
|
|
}
|
|
if got, err := ValidateApex("example.com"); err != nil || got != "example.com" {
|
|
t.Errorf("ValidateApex(example.com) = %q, %v", got, err)
|
|
}
|
|
}
|
|
|
|
func TestApexOf(t *testing.T) {
|
|
if a, ok := ApexOf("a.b.example.co.uk"); !ok || a != "example.co.uk" {
|
|
t.Errorf("ApexOf co.uk case = %q, %v", a, ok)
|
|
}
|
|
if a, ok := ApexOf("myapp.github.io"); !ok || a != "myapp.github.io" {
|
|
t.Errorf("private suffix handling = %q, %v", a, ok)
|
|
}
|
|
}
|
|
|
|
func TestNormalizeRejectsControlChars(t *testing.T) {
|
|
for _, in := range []string{"ab\x00cd.com", "a\x7f.com", "a b.com", "a\n.com"} {
|
|
if got, err := Normalize(in); err == nil {
|
|
t.Errorf("Normalize(%q) = %q, want error", in, got)
|
|
}
|
|
}
|
|
}
|
|
|
|
func TestCanonical(t *testing.T) {
|
|
cases := []struct {
|
|
in string
|
|
want string
|
|
ok bool
|
|
}{
|
|
{"example.com", "example.com", true},
|
|
{"bücher.example.com", "xn--bcher-kva.example.com", true},
|
|
{"_dmarc.example.com", "_dmarc.example.com", true},
|
|
{"ab\x00cd.example.com", "", false},
|
|
{"a..b.com", "", false},
|
|
{strings.Repeat("a", 64) + ".com", "", false},
|
|
{"*.example.com", "example.com", true},
|
|
}
|
|
for _, c := range cases {
|
|
got, ok := Canonical(c.in)
|
|
if ok != c.ok || (ok && got != c.want) {
|
|
t.Errorf("Canonical(%q) = %q, %v; want %q, %v", c.in, got, ok, c.want, c.ok)
|
|
}
|
|
}
|
|
}
|