coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Restore contained attended browser launch on WSL without xdg-utils
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883
This commit is contained in:
codex 2026-09-06 00:44:08 +02:00
parent d05c3000c5
commit 63b5d6d426
3 changed files with 61 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

15
tests/test_operator_browser.py Normal file
View file

@ -0,0 +1,15 @@
import runpy
from pathlib import Path
import unittest
from urllib.parse import urlencode
allowed=runpy.run_path(str(Path(__file__).resolve().parents[1]/'scripts/operator-browser/xdg-open'))['allowed']
class BrowserBoundary(unittest.TestCase):
def test_approved_flow(self):
self.assertTrue(allowed('https://kc.coulomb.social/authorize?'+urlencode({'redirect_uri':'http://localhost:8250/oidc/callback','state':'test'})))
def test_other_destination_rejected(self):
for host in ['evil.example','kc.coulomb.social.evil.example','user@kc.coulomb.social']:
self.assertFalse(allowed('https://'+host+'/?'+urlencode({'redirect_uri':'http://localhost:8250/oidc/callback'})))
def test_unapproved_callback_rejected(self):
self.assertFalse(allowed('https://kc.coulomb.social/?'+urlencode({'redirect_uri':'https://evil.example'})))
def test_duplicate_callback_rejected(self):
self.assertFalse(allowed('https://kc.coulomb.social/?redirect_uri=http://localhost:8250/oidc/callback&redirect_uri=https://evil.example'))