20 lines
1.2 KiB
Python
20 lines
1.2 KiB
Python
import unittest
|
|
from unittest.mock import patch
|
|
from backend.app.config import Settings
|
|
from backend.app.routers.site import _build_site_info
|
|
|
|
|
|
class WelcomeSiteTests(unittest.TestCase):
|
|
def test_public_response_does_not_expose_playback_url(self):
|
|
with patch('backend.app.routers.site.get_runtime_settings', return_value=Settings().model_copy(update={'jellyfin_public_url': 'https://watch.example.com'})):
|
|
self.assertNotIn('mediaServerUrl', _build_site_info(False))
|
|
|
|
def test_authenticated_response_uses_public_playback_url(self):
|
|
with patch('backend.app.routers.site.get_runtime_settings', return_value=Settings().model_copy(update={'jellyfin_public_url': 'https://watch.example.com/web/'})):
|
|
self.assertEqual(_build_site_info(True)['mediaServerUrl'], 'https://watch.example.com/web/')
|
|
|
|
def test_missing_unsafe_or_credential_urls_have_no_watch_link(self):
|
|
for url in ['', 'javascript:alert(1)', '//internal', 'https://user:secret@example.com', 'https://[broken']:
|
|
with self.subTest(url=url), patch('backend.app.routers.site.get_runtime_settings', return_value=Settings().model_copy(update={'jellyfin_public_url': url})):
|
|
self.assertIsNone(_build_site_info(True)['mediaServerUrl'])
|