mirror of
https://github.com/morluto/rea.git
synced 2026-10-12 02:19:24 +00:00
ysopwnable
01be082e9e
* feat(browser): trace captured website module imports Compose verified exported scripts, inert native import syntax and a narrow Chromium resolution port. Preserve query/fragment identity, import-map context, all reported capture candidates and explicit unknown execution. Share named CLI/MCP contracts and retain native reports, diagnostics and cleanup failures. Add focused boundary regressions and a real module-loading oracle to the existing conditional Chrome lane. No captured application code is executed by module tracing, and no selected website asset is refetched. Refs #851, #774 Assisted-by: Yukari (gensokyo-skills:yukari-boundary-analysis) Assisted-by: Kogasa (gensokyo-skills:kogasa-surprise-testing) * fix(browser): preserve module contexts and source bindings Keep capture completeness inline, validate actual source text against its digest, and separate unsupported URL contexts from malformed input. Use the importer origin for native module resolution and the selected map base independently, including mixed HTTP/HTTPS and escaped HTML attributes. Refs #851, #774 Assisted-by: Yukari (gensokyo-skills:yukari-boundary-analysis) Assisted-by: Kogasa (gensokyo-skills:kogasa-surprise-testing)
62 lines
2.9 KiB
JavaScript
62 lines
2.9 KiB
JavaScript
import { createServer } from "node:http";
|
|
|
|
/** Source-owned module graph with actual native loading and an uncalled lazy edge. */
|
|
export async function startBrowserModuleSite() {
|
|
const requests = [];
|
|
const importMap = {
|
|
imports: { "pkg/": "/pkg/", alias: "./global.js", blocked: null },
|
|
scopes: { "/scoped/": { alias: "./scoped.js" } },
|
|
};
|
|
const main = `
|
|
import {marker as alias} from 'alias';
|
|
import {marker as pkg} from 'pkg/nested.js';
|
|
const a = await import('/query.js?v=1#one');
|
|
const b = await import('/query.js?v=1#two');
|
|
const c = await import('/query.js?v=2');
|
|
const again = await import('/query.js?v=1#one');
|
|
const specifiers = ['alias', 'pkg/nested.js', '/query.js?v=1#one', '/query.js?v=1#two', '/query.js?v=2', '/query.js?v=1#one', './lazy.js', 'blocked', 'pkg/../escape.js', 'pkg/%2e%2e/escape.js', ''];
|
|
globalThis.__moduleProof = {alias, pkg, urls: [a.url,b.url,c.url], instances: [a.instance,b.instance,c.instance], same_module: again === a, different_fragments: a !== b, resolutions: specifiers.map(specifier => {try{return {state: 'resolved', url: import.meta.resolve(specifier)}}catch(error){return {state: 'rejected', message: String(error)}}})};
|
|
document.body.dataset.ready = 'true';
|
|
function uncalled(){return import('./lazy.js')}
|
|
function blocked(){return import('blocked')}
|
|
function escaped(){return import('pkg/../escape.js')}
|
|
function encodedEscape(){return import('pkg/%2e%2e/escape.js')}
|
|
function empty(){return import('')}
|
|
function computed(name){return import(name)}
|
|
`;
|
|
const server = createServer((request, response) => {
|
|
requests.push(request.url);
|
|
if (request.url === "/")
|
|
return response
|
|
.writeHead(200, { "Content-Type": "text/html" })
|
|
.end(
|
|
`<body><base href="/maps/"><script type="importmap">${JSON.stringify(importMap)}</script><script type="module" src="/scoped/main.js?build=2#entry"></script></body>`,
|
|
);
|
|
response.setHeader("Content-Type", "text/javascript");
|
|
if (request.url?.startsWith("/scoped/main.js?")) return response.end(main);
|
|
if (request.url === "/maps/scoped.js")
|
|
return response.end("export const marker = 'scoped';");
|
|
if (request.url === "/pkg/nested.js")
|
|
return response.end("export const marker = 'pkg';");
|
|
if (request.url?.startsWith("/query.js?"))
|
|
return response.end(
|
|
"globalThis.__moduleCount = (globalThis.__moduleCount ?? 0) + 1; export const instance = globalThis.__moduleCount; export const url = import.meta.url;",
|
|
);
|
|
response.writeHead(404).end("Not selected");
|
|
});
|
|
await new Promise((resolve) => server.listen(0, "127.0.0.1", resolve));
|
|
const address = server.address();
|
|
if (address === null || typeof address === "string")
|
|
throw new Error("Module fixture has no TCP address");
|
|
return {
|
|
origin: `http://127.0.0.1:${address.port}`,
|
|
requests,
|
|
importMap,
|
|
main,
|
|
close: () =>
|
|
new Promise((resolve, reject) =>
|
|
server.close((error) => (error ? reject(error) : resolve())),
|
|
),
|
|
};
|
|
}
|