1import { describe, expect, it } from "vitest";23import {4 getMessageContext,5 isMessageSenderAllowed,6 MESSAGE_CONTEXT_POLICY,7} from "./message-policy";8import type { MessageType } from "../shared/types";910describe("message context policy", () => {11 it("classifies every declared message type", () => {12 const policy = MESSAGE_CONTEXT_POLICY as Record<string, string>;13 const declaredTypes: MessageType[] = [14 "GET_SYNC_ALERTS", "CLEAR_CLIPBOARD", "GET_PENDING_VOUCHED_DEVICES", "CONFIRM_VOUCHED_DEVICE",15 "REJECT_VOUCHED_DEVICE", "VOUCHED_DEVICE_PENDING", "ROTATE_SYNC_IDENTITY", "DEVICE_KEY_ROTATED",16 "UNLOCK", "UNLOCK_WITH_PIN", "GET_PIN_STATUS", "LOCK", "IS_UNLOCKED", "HAS_VAULT", "GET_ENTRIES", "ADD_ENTRY",17 "BATCH_ADD_ENTRIES", "RESTORE_ENTRIES", "CLEAR_VAULT_ENTRIES", "UPDATE_ENTRY", "ADD_ADDITIONAL_URL",18 "DELETE_ENTRY", "AUTOFILL_QUERY", "COPY", "CREATE_VAULT", "CREATE_VAULT_FROM_ROOT_KEY",19 "GET_ENTRY_FOR_FILL", "GET_ENTRY_FOR_EDIT", "CHECK_ALL_BREACHES", "GET_SETTINGS", "UPDATE_SETTINGS",20 "SETUP_PIN", "DISABLE_PIN", "FIRE_CANARY_PING", "ACTIVATE_LICENSE", "GET_LICENSE", "GET_LICENSE_KEY",21 "IS_DURESS_ENABLED", "SETUP_DURESS", "DISABLE_DURESS", "VERIFY_MAIN_PASSWORD", "CHANGE_PASSWORD",22 "GET_SITE_PASSWORD_POLICY", "GET_LOCAL_IDENTITY", "LIST_PAIRED_DEVICES", "RENAME_PAIRED_DEVICE",23 "UNPAIR_DEVICE", "RENAME_LOCAL_DEVICE", "START_ADOPTION_SOURCE", "START_ADOPTION_RECEIVER",24 "CANCEL_ADOPTION_SOURCE", "SOURCE_SAS_DECISION", "ADOPTION_SOURCE_SAS", "ADOPTION_SOURCE_RESULT",25 "TRIGGER_SYNC", "GET_SYNC_STATE", "GET_SYNC_SETTINGS", "SET_SYNC_SETTINGS", "GET_PENDING_PASSKEY",26 "APPROVE_PASSKEY", "DENY_PASSKEY", "GET_PASSKEY_PROVIDER_STATE", "SET_PASSKEY_PROVIDER_ENABLED",27 "GET_DELETED_ENTRIES", "RESTORE_ENTRY", "PURGE_ENTRY", "PURGE_EXPIRED_TRASH", "GET_VAULT_HISTORY",28 "RESTORE_VAULT_SNAPSHOT", "COUNT_DUPLICATES", "DEDUPLICATE_ENTRIES", "RECORD_MANUAL_SUMMON",29 "DECLINE_CARD_SAVE", "IS_CARD_DECLINED", "GET_VAULT_STATUS", "GET_ADVANCED_HEALTH_REPORT",30 "DEACTIVATE_LICENSE", "GET_IDENTITIES", "DESTROY_VAULT", "INITIATE_FIREFOX_PASSKEY_CREATE",31 "COMPLETE_FIREFOX_PASSKEY_CREATE", "PASSKEY_OFFER_DECLINE", "GET_PASSKEY_OFFER_DECLINED",32 "GET_PASSKEY_FOR_DOMAIN", "PASSKEY_HAS_CREDENTIALS", "PASSKEY_CREATE", "PASSKEY_GET",33 "PASSKEY_AUTH_RESPONSE", "VALIDATE_RECOVERY_WORDS", "RECOVER_WITH_WORDS", "GET_RECOVERY_WORDS",34 "GET_RECOVERY_CONFIRM_PENDING", "SET_RECOVERY_CONFIRM_PENDING", "CLEAR_RECOVERY_CONFIRM_PENDING",35 "GET_IDENTITY_SUGGESTIONS", "TOUCH_AUTO_LOCK", "SAVE_NOTE", "DELETE_NOTE", "GET_NOTES", "SEARCH_VAULT",36 "ML_INIT", "ML_PREDICT_BATCH", "PING", "SUMMON_AUTOFILL", "VAULT_LOCKED", "VAULT_UNLOCKED",37 "PRO_GATE_TRIGGERED", "PASSKEY_PRO_GATE", "OPEN_PRO_GATE", "OPEN_POPUP", "OPEN_DETACHED_POPUP",38 "SHOW_PASSKEY_TOAST", "DISMISS_PASSKEY_TOAST", "SHOULD_PLAY_CELEBRATION", "MARK_CELEBRATION_PLAYED",39 "GET_CODEX_VAULT_DATA", "ESTIMATE_CODEX_PAGES", "GENERATE_CODEX", "RESTORE_FROM_CODEX",40 ];4142 expect(Object.keys(policy).sort()).toEqual([...new Set(declaredTypes)].sort());43 for (const type of declaredTypes) expect(getMessageContext(type)).toBeDefined();44 });4546 it("fails closed for unknown runtime message types", () => {47 expect(getMessageContext("TOTALLY_UNKNOWN_MESSAGE")).toBeUndefined();48 expect(getMessageContext(undefined)).toBeUndefined();49 });5051 it("refuses URL-less senders for privileged extension-page messages", () => {52 expect(53 isMessageSenderAllowed(54 "GET_ENTRIES",55 { id: "peach-extension" },56 "peach-extension",57 "chrome-extension://peach-extension/",58 ),59 ).toBe(false);60 });6162 it("marks the bulk vault and device-authority handlers extension-page-only", () => {63 for (const type of [64 "GET_ENTRIES",65 "GET_RECOVERY_WORDS",66 "RESTORE_ENTRIES",67 "UNPAIR_DEVICE",68 "CONFIRM_VOUCHED_DEVICE",69 "ROTATE_SYNC_IDENTITY",70 ] as const) {71 expect(getMessageContext(type)).toBe("extension-page-only");72 }73 });7475 it("covers every message type against popup, content-script, and foreign senders", () => {76 const popup = {77 id: "peach-extension",78 url: "chrome-extension://peach-extension/src/popup/index.html",79 };80 const contentScript = { id: "peach-extension", url: "https://evil.test/login" };81 const foreign = { id: "other-extension", url: "https://evil.test/login" };8283 for (const [type, context] of Object.entries(MESSAGE_CONTEXT_POLICY)) {84 expect(85 isMessageSenderAllowed(type, popup, "peach-extension", "chrome-extension://peach-extension/"),86 `popup ${type}`,87 ).toBe(context === "extension-page-only" || context === "content-script-allowed");88 expect(89 isMessageSenderAllowed(type, contentScript, "peach-extension", "chrome-extension://peach-extension/"),90 `content script ${type}`,91 ).toBe(context === "content-script-allowed" || context === "page-relay");92 expect(93 isMessageSenderAllowed(type, foreign, "peach-extension", "chrome-extension://peach-extension/"),94 `foreign sender ${type}`,95 ).toBe(false);96 }9798 expect(99 isMessageSenderAllowed(100 "TOTALLY_UNKNOWN_MESSAGE",101 contentScript,102 "peach-extension",103 "chrome-extension://peach-extension/",104 ),105 ).toBe(false);106 });107});