servo/components/net/tests/hsts.rs

/* This Source Code Form is subject to the terms of the Mozilla Public
 * License, v. 2.0. If a copy of the MPL was not distributed with this
 * file, You can obtain one at https://mozilla.org/MPL/2.0/. */

use std::collections::HashMap;
use std::num::NonZeroU64;
use std::time::Duration as StdDuration;

use net::hsts::{HstsEntry, HstsList, HstsPreloadList};
use net_traits::IncludeSubdomains;

#[test]
fn test_hsts_entry_is_not_expired_when_it_has_no_expires_at() {
    let entry = HstsEntry {
        host: "mozilla.org".to_owned(),
        include_subdomains: false,
        expires_at: None,
    };

    assert!(!entry.is_expired());
}

#[test]
fn test_hsts_entry_is_expired_when_it_has_reached_its_max_age() {
    let entry = HstsEntry {
        host: "mozilla.org".to_owned(),
        include_subdomains: false,
        expires_at: Some(NonZeroU64::new(1).unwrap()),
    };

    assert!(entry.is_expired());
}

#[test]
fn test_hsts_entry_cant_be_created_with_ipv6_address_as_host() {
    let entry = HstsEntry::new(
        "2001:0db8:0000:0000:0000:ff00:0042:8329".to_owned(),
        IncludeSubdomains::NotIncluded,
        None,
    );

    assert!(entry.is_none(), "able to create HstsEntry with IPv6 host");
}

#[test]
fn test_hsts_entry_cant_be_created_with_ipv4_address_as_host() {
    let entry = HstsEntry::new("4.4.4.4".to_owned(), IncludeSubdomains::NotIncluded, None);

    assert!(entry.is_none(), "able to create HstsEntry with IPv4 host");
}

#[test]
fn test_base_domain_in_entries_map() {
    let entries_map = HashMap::new();

    let mut list = HstsList {
        entries_map: entries_map,
    };

    list.push(
        HstsEntry::new(
            "servo.mozilla.org".to_owned(),
            IncludeSubdomains::NotIncluded,
            None,
        )
        .unwrap(),
    );
    list.push(
        HstsEntry::new(
            "firefox.mozilla.org".to_owned(),
            IncludeSubdomains::NotIncluded,
            None,
        )
        .unwrap(),
    );
    list.push(
        HstsEntry::new(
            "bugzilla.org".to_owned(),
            IncludeSubdomains::NotIncluded,
            None,
        )
        .unwrap(),
    );

    assert_eq!(list.entries_map.len(), 2);
    assert_eq!(list.entries_map.get("mozilla.org").unwrap().len(), 2);
}

#[test]
fn test_push_entry_with_0_max_age_is_not_secure() {
    let mut entries_map = HashMap::new();
    entries_map.insert(
        "mozilla.org".to_owned(),
        vec![
            HstsEntry::new(
                "mozilla.org".to_owned(),
                IncludeSubdomains::NotIncluded,
                Some(StdDuration::from_secs(500000)),
            )
            .unwrap(),
        ],
    );
    let mut list = HstsList {
        entries_map: entries_map,
    };

    list.push(
        HstsEntry::new(
            "mozilla.org".to_owned(),
            IncludeSubdomains::NotIncluded,
            Some(StdDuration::ZERO),
        )
        .unwrap(),
    );

    assert_eq!(list.is_host_secure("mozilla.org"), false)
}

fn test_push_entry_with_0_max_age_evicts_entry_from_list() {
    let mut entries_map = HashMap::new();
    entries_map.insert(
        "mozilla.org".to_owned(),
        vec![
            HstsEntry::new(
                "mozilla.org".to_owned(),
                IncludeSubdomains::NotIncluded,
                Some(StdDuration::from_secs(500000)),
            )
            .unwrap(),
        ],
    );
    let mut list = HstsList {
        entries_map: entries_map,
    };

    assert_eq!(list.entries_map.get("mozilla.org").unwrap().len(), 1);

    list.push(
        HstsEntry::new(
            "mozilla.org".to_owned(),
            IncludeSubdomains::NotIncluded,
            Some(StdDuration::ZERO),
        )
        .unwrap(),
    );
    assert_eq!(list.entries_map.get("mozilla.org").unwrap().len(), 0);
}

#[test]
fn test_push_entry_to_hsts_list_should_not_add_subdomains_whose_superdomain_is_already_matched() {
    let mut entries_map = HashMap::new();
    entries_map.insert(
        "mozilla.org".to_owned(),
        vec![HstsEntry::new("mozilla.org".to_owned(), IncludeSubdomains::Included, None).unwrap()],
    );
    let mut list = HstsList {
        entries_map: entries_map,
    };

    list.push(
        HstsEntry::new(
            "servo.mozilla.org".to_owned(),
            IncludeSubdomains::NotIncluded,
            None,
        )
        .unwrap(),
    );

    assert_eq!(list.entries_map.get("mozilla.org").unwrap().len(), 1)
}

#[test]
fn test_push_entry_to_hsts_list_should_add_subdomains_whose_superdomain_doesnt_include() {
    let mut entries_map = HashMap::new();
    entries_map.insert(
        "mozilla.org".to_owned(),
        vec![
            HstsEntry::new(
                "mozilla.org".to_owned(),
                IncludeSubdomains::NotIncluded,
                None,
            )
            .unwrap(),
        ],
    );
    let mut list = HstsList {
        entries_map: entries_map,
    };

    list.push(
        HstsEntry::new(
            "servo.mozilla.org".to_owned(),
            IncludeSubdomains::NotIncluded,
            None,
        )
        .unwrap(),
    );

    assert_eq!(list.entries_map.get("mozilla.org").unwrap().len(), 2)
}

#[test]
fn test_push_entry_to_hsts_list_should_update_existing_domain_entrys_include_subdomains() {
    let mut entries_map = HashMap::new();
    entries_map.insert(
        "mozilla.org".to_owned(),
        vec![HstsEntry::new("mozilla.org".to_owned(), IncludeSubdomains::Included, None).unwrap()],
    );
    let mut list = HstsList {
        entries_map: entries_map,
    };

    assert!(list.is_host_secure("servo.mozilla.org"));

    list.push(
        HstsEntry::new(
            "mozilla.org".to_owned(),
            IncludeSubdomains::NotIncluded,
            None,
        )
        .unwrap(),
    );

    assert!(!list.is_host_secure("servo.mozilla.org"))
}

#[test]
fn test_push_entry_to_hsts_list_should_not_create_duplicate_entry() {
    let mut entries_map = HashMap::new();
    entries_map.insert(
        "mozilla.org".to_owned(),
        vec![
            HstsEntry::new(
                "mozilla.org".to_owned(),
                IncludeSubdomains::NotIncluded,
                None,
            )
            .unwrap(),
        ],
    );
    let mut list = HstsList {
        entries_map: entries_map,
    };

    list.push(
        HstsEntry::new(
            "mozilla.org".to_owned(),
            IncludeSubdomains::NotIncluded,
            None,
        )
        .unwrap(),
    );

    assert_eq!(list.entries_map.get("mozilla.org").unwrap().len(), 1)
}

#[test]
fn test_push_multiple_entrie_to_hsts_list_should_add_them_all() {
    let mut list = HstsList {
        entries_map: HashMap::new(),
    };

    assert!(!list.is_host_secure("mozilla.org"));
    assert!(!list.is_host_secure("bugzilla.org"));

    list.push(HstsEntry::new("mozilla.org".to_owned(), IncludeSubdomains::Included, None).unwrap());
    list.push(
        HstsEntry::new("bugzilla.org".to_owned(), IncludeSubdomains::Included, None).unwrap(),
    );

    assert!(list.is_host_secure("mozilla.org"));
    assert!(list.is_host_secure("bugzilla.org"));
}

#[test]
fn test_push_entry_to_hsts_list_should_add_an_entry() {
    let mut list = HstsList {
        entries_map: HashMap::new(),
    };

    assert!(!list.is_host_secure("mozilla.org"));

    list.push(HstsEntry::new("mozilla.org".to_owned(), IncludeSubdomains::Included, None).unwrap());

    assert!(list.is_host_secure("mozilla.org"));
}

#[test]
fn test_parse_hsts_preload_should_return_none_when_json_invalid() {
    let mock_preload_content = "derp";
    assert!(
        HstsPreloadList::from_preload(mock_preload_content).is_none(),
        "invalid preload list should not have parsed"
    )
}

#[test]
fn test_parse_hsts_preload_should_return_none_when_json_contains_no_entries_map_key() {
    let mock_preload_content = "{\"nothing\": \"to see here\"}";
    assert!(
        HstsPreloadList::from_preload(mock_preload_content).is_none(),
        "invalid preload list should not have parsed"
    )
}

#[test]
fn test_parse_hsts_preload_should_decode_host_and_includes_subdomains() {
    let mock_preload_content = "{\
                                \"entries\": [\
                                {\"host\": \"mozilla.org\",\
                                \"include_subdomains\": false}\
                                ]\
                                }";
    let hsts_list = HstsPreloadList::from_preload(mock_preload_content);
    let entries_map = hsts_list.unwrap().entries_map;

    assert_eq!(
        entries_map.get("mozilla.org").unwrap()[0].host,
        "mozilla.org"
    );
    assert!(!entries_map.get("mozilla.org").unwrap()[0].include_subdomains);
}

#[test]
fn test_hsts_list_with_no_entries_map_does_not_is_host_secure() {
    let hsts_list = HstsList {
        entries_map: HashMap::new(),
    };

    assert!(!hsts_list.is_host_secure("mozilla.org"));
}

#[test]
fn test_hsts_list_with_exact_domain_entry_is_is_host_secure() {
    let mut entries_map = HashMap::new();
    entries_map.insert(
        "mozilla.org".to_owned(),
        vec![
            HstsEntry::new(
                "mozilla.org".to_owned(),
                IncludeSubdomains::NotIncluded,
                None,
            )
            .unwrap(),
        ],
    );

    let hsts_list = HstsList {
        entries_map: entries_map,
    };

    assert!(hsts_list.is_host_secure("mozilla.org"));
}

#[test]
fn test_hsts_list_with_subdomain_when_include_subdomains_is_true_is_is_host_secure() {
    let mut entries_map = HashMap::new();
    entries_map.insert(
        "mozilla.org".to_owned(),
        vec![HstsEntry::new("mozilla.org".to_owned(), IncludeSubdomains::Included, None).unwrap()],
    );
    let hsts_list = HstsList {
        entries_map: entries_map,
    };

    assert!(hsts_list.is_host_secure("servo.mozilla.org"));
}

#[test]
fn test_hsts_list_with_subdomain_when_include_subdomains_is_false_is_not_is_host_secure() {
    let mut entries_map = HashMap::new();
    entries_map.insert(
        "mozilla.org".to_owned(),
        vec![
            HstsEntry::new(
                "mozilla.org".to_owned(),
                IncludeSubdomains::NotIncluded,
                None,
            )
            .unwrap(),
        ],
    );
    let hsts_list = HstsList {
        entries_map: entries_map,
    };

    assert!(!hsts_list.is_host_secure("servo.mozilla.org"));
}

#[test]
fn test_hsts_list_with_subdomain_when_host_is_not_a_subdomain_is_not_is_host_secure() {
    let mut entries_map = HashMap::new();
    entries_map.insert(
        "mozilla.org".to_owned(),
        vec![HstsEntry::new("mozilla.org".to_owned(), IncludeSubdomains::Included, None).unwrap()],
    );
    let hsts_list = HstsList {
        entries_map: entries_map,
    };

    assert!(!hsts_list.is_host_secure("servo-mozilla.org"));
}

#[test]
fn test_hsts_list_with_subdomain_when_host_is_exact_match_is_is_host_secure() {
    let mut entries_map = HashMap::new();
    entries_map.insert(
        "mozilla.org".to_owned(),
        vec![HstsEntry::new("mozilla.org".to_owned(), IncludeSubdomains::Included, None).unwrap()],
    );
    let hsts_list = HstsList {
        entries_map: entries_map,
    };

    assert!(hsts_list.is_host_secure("mozilla.org"));
}

#[test]
fn test_hsts_list_with_expired_entry_is_not_is_host_secure() {
    let mut entries_map = HashMap::new();
    entries_map.insert(
        "mozilla.org".to_owned(),
        vec![HstsEntry {
            host: "mozilla.org".to_owned(),
            include_subdomains: false,
            expires_at: Some(NonZeroU64::new(1).unwrap()),
        }],
    );
    let hsts_list = HstsList {
        entries_map: entries_map,
    };

    assert!(!hsts_list.is_host_secure("mozilla.org"));
}

#[test]
fn test_preload_hsts_domains_well_formed() {
    let hsts_list = HstsPreloadList::from_servo_preload();
    assert!(!hsts_list.entries_map.is_empty());
}