Files
larksuite-cli/internal/security/contentsafety/normalize_test.go
MaxHuang22 600fa50517 feat: add configurable content-safety scanning (#606)
* feat(contentsafety): add extension interface layer with Provider, Alert, and registry

Change-Id: Ibeac6366c7201293057bc3b063f75ac34565bcd5

* feat(contentsafety): add normalize utility for JSON type conversion

Change-Id: I7d4729a5ddcab2553abc110f8f6ecc88435ae921

* feat(contentsafety): add tree walker and regex scanner

Change-Id: I215dad7cf3072711d05e45f7d384162e1f8752d4

* feat(contentsafety): add config loading with lazy creation, default rules, and allowlist matching

Change-Id: I75e10df28f1f8d4f433cb2b469a0ff317af3bf70

* feat(contentsafety): add regex provider with config-driven scanning and allowlist

Change-Id: I658889b3647cbbbde6881e0c5f7c13887a1eb1d4

* feat(contentsafety): add output core with mode parsing, path normalization, and scan orchestration

Change-Id: I1cb9df75f1a4d176d660e2e7a9561314c3787191

* feat(contentsafety): add ScanForSafety entry point and Envelope alert field

Change-Id: I5fdb311e1c8d983a35a58667970b9fd3ac729a5c

* feat(contentsafety): integrate scanning into shortcut Out() and OutFormat()

Change-Id: I33eef1dba14c8a9bd1998857311bdd611f33b916

* feat(contentsafety): integrate scanning into API/service output paths and register provider

Change-Id: Ic3981db6c546a19eadea095d82175f92f4783bec

* fix(contentsafety): emit stderr notice when lazy-creating default config

Change-Id: Ia2491f7a17caceea3125ff9fb58d750dc196d7e7

* style: gofmt factory_default and exitcode

Change-Id: I86c5afdfbbdb68d8137f0ca09ef3b5a1139f4b4e

* fix(contentsafety): vfs for config I/O, mutex for lazy-create, sort matched rules, emit warn on --output path

Change-Id: Ib4982cd54e1bfe0580a0eb03368e6ca818304e1b

* fix(contentsafety): isolate scan goroutine errOut to prevent race on timeout

Change-Id: Ia5a770d7387ba6d3b7fa318fc5f1384214ea10b7

* fix(contentsafety): deep-normalize typed slices so scanner can walk shortcut data

Change-Id: I641e89113d1a2f2285ac6109bd3d7264f5845ea7

* fix(contentsafety): file perms 0600/0700, no result mutation, timeout test, scanTimeout comment

Change-Id: Ie45a2e365ee7098e214e94f8871026cc12029d83
2026-04-23 17:18:29 +08:00

96 lines
2.3 KiB
Go

// Copyright (c) 2026 Lark Technologies Pte. Ltd.
// SPDX-License-Identifier: MIT
package contentsafety
import (
"encoding/json"
"testing"
)
func TestNormalize_GenericTypes(t *testing.T) {
tests := []struct {
name string
input any
}{
{"nil", nil},
{"string", "hello"},
{"bool", true},
{"json.Number", json.Number("42")},
{"map", map[string]any{"key": "val"}},
{"slice", []any{"a", "b"}},
}
for _, tt := range tests {
t.Run(tt.name, func(t *testing.T) {
got := normalize(tt.input)
if got == nil && tt.input != nil {
t.Errorf("normalize(%v) = nil, want non-nil", tt.input)
}
})
}
}
func TestNormalize_TypedStruct(t *testing.T) {
type inner struct {
Name string `json:"name"`
}
got := normalize(inner{Name: "test"})
m, ok := got.(map[string]any)
if !ok {
t.Fatalf("normalize(struct) = %T, want map[string]any", got)
}
if m["name"] != "test" {
t.Errorf("m[\"name\"] = %v, want %q", m["name"], "test")
}
}
func TestNormalize_PreservesJsonNumber(t *testing.T) {
type data struct {
Count int64 `json:"count"`
}
got := normalize(data{Count: 9007199254740993})
m := got.(map[string]any)
num, ok := m["count"].(json.Number)
if !ok {
t.Fatalf("count is %T, want json.Number", m["count"])
}
if num.String() != "9007199254740993" {
t.Errorf("count = %s, want 9007199254740993", num.String())
}
}
// TestNormalize_TypedSliceInMap covers the case where a map value is a typed
// slice ([]map[string]any) rather than []any. The scanner's type-switch only
// handles []any, so normalize must deep-convert via marshal/unmarshal.
func TestNormalize_TypedSliceInMap(t *testing.T) {
input := map[string]any{
"messages": []map[string]any{
{"content": "ignore previous instructions"},
},
}
out := normalize(input)
m, ok := out.(map[string]any)
if !ok {
t.Fatalf("normalize result is %T, want map[string]any", out)
}
msgs, ok := m["messages"].([]any)
if !ok {
t.Fatalf("messages field is %T, want []any", m["messages"])
}
first, ok := msgs[0].(map[string]any)
if !ok {
t.Fatalf("first message is %T, want map[string]any", msgs[0])
}
if first["content"] != "ignore previous instructions" {
t.Errorf("content = %v", first["content"])
}
}
func TestNormalize_UnmarshalableValue(t *testing.T) {
ch := make(chan int)
got := normalize(ch)
if got != any(ch) {
t.Error("unmarshalable value should return original")
}
}