1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
|
-- Self-check for panto-web. Run with:
--
-- panto lua panto-web/_selfcheck.lua
local registered = {}
package.loaded["panto"] = {
ext = {
register_tool = function(tool) registered[#registered + 1] = tool end,
json = {
decode = function() return {} end,
encode = function() return "{}" end,
},
},
}
local here = debug.getinfo(1, "S").source:match("^@(.*)/[^/]+$") or "."
package.path = here .. "/panto-web/?.lua;" .. here .. "/panto-web/?/init.lua;" .. package.path
local web = require("init")
assert(web.name == "web", "entry name")
local parsed = assert(web.parse_url("https://example.com:8443/docs?q=1"))
assert(parsed.host == "example.com" and parsed.port == 8443, "URL host and port")
local _, local_err = web.parse_url("http://user:pass@example.com/")
assert(local_err:find("credentials", 1, true), "URL credentials rejected")
assert(web.is_public_address("8.8.8.8"), "public IPv4 allowed")
assert(not web.is_public_address("127.0.0.1"), "loopback IPv4 blocked")
assert(not web.is_public_address("::1"), "loopback IPv6 blocked")
assert(not web.is_public_address("::127.0.0.1"), "IPv4-compatible loopback blocked")
local page, title = web.html_to_text([[<html><head><title>A & B</title>
<style>hidden</style></head><body><h1>Heading</h1><p>Hello <world>.</p>
<script>also hidden</script><a href="https://example.com/x">Read</a></body></html>]])
assert(title == "A & B", "HTML title decoded")
assert(page:find("Heading", 1, true) and page:find("Hello <world>.", 1, true), "HTML text retained")
assert(page:find("Read (https://example.com/x)", 1, true), "link destination retained")
assert(not page:find("hidden", 1, true), "non-content HTML removed")
local search_text = web.format_search([[Title: First result
URL: https://example.com/one
Highlights:
Useful first excerpt.
...
---
Title: Second result
URL: https://example.com/two
Highlights:
Useful second excerpt.]], "example query")
assert(search_text:find("1. First result", 1, true), "first search result")
assert(search_text:find("URL: https://example.com/two", 1, true), "second search URL")
web.activate()
assert(registered[1].name == "web.fetch", "fetch tool registered")
assert(registered[2].name == "web.search", "search tool registered")
assert(web.on_fetch({ url = "file:///etc/passwd" }):find("only http", 1, true), "fetch rejects file URLs")
assert(web.on_search({ query = "" }):find("non-empty", 1, true), "search rejects empty query")
print("panto-web selfcheck: OK")
|
