mirror of
https://github.com/MadsLorentzen/ai-job-search.git
synced 2026-11-02 13:12:50 +00:00
1c39c51b1b
* fix(portal-clis): validate Jobbank and Jobnet detail URL hosts * fix(portal-clis): preserve scheme-less portal detail URLs Normalize host-like input with HTTPS before validating the portal host. Cover apex, www, mobile, uppercase and legacy routes while rejecting foreign or deceptive hosts and query-only posting paths. Thanks to MadsLorentzen for finding the compatibility regression in #672. * changelog: place the #672 entry under [Unreleased] Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Mads Lorentzen <madslorentzen_17@hotmail.com> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
93 lines
3.7 KiB
TypeScript
93 lines
3.7 KiB
TypeScript
import { describe, expect, test } from "bun:test"
|
|
import { normalizeJobId } from "../src/helpers.js"
|
|
import { runCLI } from "./helpers.js"
|
|
|
|
describe("jobnet-search normalizeJobId", () => {
|
|
test("accepts portal URLs without a scheme", () => {
|
|
const id = "12345678-1234-1234-1234-123456789abc"
|
|
for (const host of ["jobnet.dk", "www.jobnet.dk", "m.jobnet.dk", "JOBNET.DK"]) {
|
|
expect(normalizeJobId(` ${host}/find-job/${id}?ref=search#apply `)).toBe(id)
|
|
}
|
|
expect(normalizeJobId(`job.jobnet.dk/CV/FindWork/Details/${id}`)).toBe(id)
|
|
})
|
|
|
|
test("rejects foreign hosts, non-web schemes and job paths only in a query", () => {
|
|
for (const value of [
|
|
"https://example.com/find-job/6123456/",
|
|
"https://jobnet.dk.example.com/find-job/6123456/",
|
|
"ftp://jobnet.dk/find-job/6123456/",
|
|
"https://jobnet.dk/?next=/find-job/6123456/",
|
|
"example.com/find-job/6123456/",
|
|
"jobnet.dk.evil.io/find-job/6123456/",
|
|
"jobnet.dk@evil.io/find-job/6123456/",
|
|
"jobnet.dk/?next=/find-job/6123456/",
|
|
]) expect(normalizeJobId(value)).toBeNull()
|
|
})
|
|
|
|
test("accepts the portal's www host and HTTP links", () => {
|
|
expect(normalizeJobId("http://www.jobnet.dk/find-job/6123456/")).toBe("6123456")
|
|
})
|
|
|
|
test("CLI rejects another site's matching job path before any fetch", async () => {
|
|
const proc = Bun.spawn([
|
|
process.execPath, "--preload", `${import.meta.dir}/reject-network.ts`,
|
|
`${import.meta.dir}/../src/cli.ts`, "detail", "https://example.com/find-job/6123456/",
|
|
], { stdout: "pipe", stderr: "pipe" })
|
|
const [stdout, stderr, code] = await Promise.all([
|
|
new Response(proc.stdout).text(), new Response(proc.stderr).text(), proc.exited,
|
|
])
|
|
expect(code).toBe(1)
|
|
expect(stdout).toBe("")
|
|
expect(JSON.parse(stderr).code).toBe("BAD_ID")
|
|
})
|
|
|
|
test("accepts bare numeric ID", () => {
|
|
expect(normalizeJobId("6123456")).toBe("6123456")
|
|
expect(normalizeJobId(" 6123456 ")).toBe("6123456")
|
|
})
|
|
|
|
test("accepts alphanumeric ID", () => {
|
|
expect(normalizeJobId("E123456")).toBe("E123456")
|
|
expect(normalizeJobId("job_12345")).toBe("job_12345")
|
|
})
|
|
|
|
test("extracts ID from /find-job/ URL with trailing slash", () => {
|
|
expect(normalizeJobId("https://jobnet.dk/find-job/6123456/")).toBe("6123456")
|
|
})
|
|
|
|
test("extracts ID from /find-job/ URL without trailing slash", () => {
|
|
expect(normalizeJobId("https://jobnet.dk/find-job/6123456")).toBe("6123456")
|
|
})
|
|
|
|
test("extracts ID from /find-job/detaljer/ URL", () => {
|
|
expect(normalizeJobId("https://jobnet.dk/find-job/detaljer/6123456")).toBe("6123456")
|
|
expect(normalizeJobId("https://jobnet.dk/find-job/detaljer/6123456/")).toBe("6123456")
|
|
})
|
|
|
|
test("extracts ID from /FindJob/JobAdDetails/ URL", () => {
|
|
expect(normalizeJobId("https://jobnet.dk/FindJob/JobAdDetails/6123456")).toBe("6123456")
|
|
})
|
|
|
|
test("extracts ID from legacy /CV/FindWork/Details/ URL", () => {
|
|
expect(normalizeJobId("https://job.jobnet.dk/CV/FindWork/Details/6123456")).toBe("6123456")
|
|
})
|
|
|
|
test("extracts ID from URL with query parameters and hash fragments", () => {
|
|
expect(normalizeJobId("https://jobnet.dk/find-job/6123456?ref=share&utm=test")).toBe("6123456")
|
|
expect(normalizeJobId("https://jobnet.dk/find-job/6123456#main")).toBe("6123456")
|
|
})
|
|
|
|
test("rejects empty string and invalid URLs", () => {
|
|
expect(normalizeJobId("")).toBeNull()
|
|
expect(normalizeJobId(" ")).toBeNull()
|
|
expect(normalizeJobId("https://example.com/other/6123456")).toBeNull()
|
|
})
|
|
|
|
test("CLI detail command rejects invalid ID format with BAD_ID", async () => {
|
|
const result = await runCLI(["detail", "https://invalid.com/not-jobnet"])
|
|
expect(result.exitCode).toBe(1)
|
|
const err = JSON.parse(result.stderr)
|
|
expect(err.code).toBe("BAD_ID")
|
|
})
|
|
})
|