|
| 1 | +'use strict'; |
| 2 | + |
| 3 | +require('../common'); |
| 4 | + |
| 5 | +const { BlockList } = require('net'); |
| 6 | +const assert = require('assert'); |
| 7 | + |
| 8 | +{ |
| 9 | + const blockList = new BlockList(); |
| 10 | + |
| 11 | + [1, [], {}, null, 1n, undefined, null].forEach((i) => { |
| 12 | + assert.throws(() => blockList.addAddress(i), { |
| 13 | + code: 'ERR_INVALID_ARG_TYPE' |
| 14 | + }); |
| 15 | + }); |
| 16 | + |
| 17 | + [1, [], {}, null, 1n, null].forEach((i) => { |
| 18 | + assert.throws(() => blockList.addAddress('1.1.1.1', i), { |
| 19 | + code: 'ERR_INVALID_ARG_TYPE' |
| 20 | + }); |
| 21 | + }); |
| 22 | + |
| 23 | + assert.throws(() => blockList.addAddress('1.1.1.1', 'foo'), { |
| 24 | + code: 'ERR_INVALID_ARG_VALUE' |
| 25 | + }); |
| 26 | + |
| 27 | + [1, [], {}, null, 1n, undefined, null].forEach((i) => { |
| 28 | + assert.throws(() => blockList.addRange(i), { |
| 29 | + code: 'ERR_INVALID_ARG_TYPE' |
| 30 | + }); |
| 31 | + assert.throws(() => blockList.addRange('1.1.1.1', i), { |
| 32 | + code: 'ERR_INVALID_ARG_TYPE' |
| 33 | + }); |
| 34 | + }); |
| 35 | + |
| 36 | + [1, [], {}, null, 1n, null].forEach((i) => { |
| 37 | + assert.throws(() => blockList.addRange('1.1.1.1', '1.1.1.2', i), { |
| 38 | + code: 'ERR_INVALID_ARG_TYPE' |
| 39 | + }); |
| 40 | + }); |
| 41 | + |
| 42 | + assert.throws(() => blockList.addRange('1.1.1.1', '1.1.1.2', 'foo'), { |
| 43 | + code: 'ERR_INVALID_ARG_VALUE' |
| 44 | + }); |
| 45 | +} |
| 46 | + |
| 47 | +{ |
| 48 | + const blockList = new BlockList(); |
| 49 | + blockList.addAddress('1.1.1.1'); |
| 50 | + blockList.addAddress('8592:757c:efae:4e45:fb5d:d62a:0d00:8e17', 'ipv6'); |
| 51 | + blockList.addAddress('::ffff:1.1.1.2', 'ipv6'); |
| 52 | + |
| 53 | + assert(blockList.check('1.1.1.1')); |
| 54 | + assert(!blockList.check('1.1.1.1', 'ipv6')); |
| 55 | + assert(!blockList.check('8592:757c:efae:4e45:fb5d:d62a:0d00:8e17')); |
| 56 | + assert(blockList.check('8592:757c:efae:4e45:fb5d:d62a:0d00:8e17', 'ipv6')); |
| 57 | + |
| 58 | + assert(blockList.check('::ffff:1.1.1.1', 'ipv6')); |
| 59 | + |
| 60 | + assert(blockList.check('1.1.1.2')); |
| 61 | + |
| 62 | + assert(!blockList.check('1.2.3.4')); |
| 63 | + assert(!blockList.check('::1', 'ipv6')); |
| 64 | +} |
| 65 | + |
| 66 | +{ |
| 67 | + const blockList = new BlockList(); |
| 68 | + blockList.addRange('1.1.1.1', '1.1.1.10'); |
| 69 | + blockList.addRange('::1', '::f', 'ipv6'); |
| 70 | + |
| 71 | + assert(!blockList.check('1.1.1.0')); |
| 72 | + for (let n = 1; n <= 10; n++) |
| 73 | + assert(blockList.check(`1.1.1.${n}`)); |
| 74 | + assert(!blockList.check('1.1.1.11')); |
| 75 | + |
| 76 | + assert(!blockList.check('::0', 'ipv6')); |
| 77 | + for (let n = 0x1; n <= 0xf; n++) { |
| 78 | + assert(blockList.check(`::${n.toString(16)}`, 'ipv6'), |
| 79 | + `::${n.toString(16)} check failed`); |
| 80 | + } |
| 81 | + assert(!blockList.check('::10', 'ipv6')); |
| 82 | +} |
| 83 | + |
| 84 | +{ |
| 85 | + const blockList = new BlockList(); |
| 86 | + blockList.addSubnet('1.1.1.0', 16); |
| 87 | + blockList.addSubnet('8592:757c:efae:4e45::', 64, 'ipv6'); |
| 88 | + |
| 89 | + assert(blockList.check('1.1.0.1')); |
| 90 | + assert(blockList.check('1.1.1.1')); |
| 91 | + assert(!blockList.check('1.2.0.1')); |
| 92 | + assert(blockList.check('::ffff:1.1.0.1', 'ipv6')); |
| 93 | + |
| 94 | + assert(blockList.check('8592:757c:efae:4e45:f::', 'ipv6')); |
| 95 | + assert(blockList.check('8592:757c:efae:4e45::f', 'ipv6')); |
| 96 | + assert(!blockList.check('8592:757c:efae:4f45::f', 'ipv6')); |
| 97 | +} |
| 98 | + |
| 99 | +{ |
| 100 | + const blockList = new BlockList(); |
| 101 | + blockList.addAddress('1.1.1.1'); |
| 102 | + blockList.addRange('10.0.0.1', '10.0.0.10'); |
| 103 | + blockList.addSubnet('8592:757c:efae:4e45::', 64, 'ipv6'); |
| 104 | + |
| 105 | + const rulesCheck = [ |
| 106 | + 'Subnet: IPv6 8592:757c:efae:4e45::/64', |
| 107 | + 'Range: IPv4 10.0.0.1-10.0.0.10', |
| 108 | + 'Address: IPv4 1.1.1.1' |
| 109 | + ]; |
| 110 | + assert.deepStrictEqual(blockList.rules, rulesCheck); |
| 111 | + console.log(blockList); |
| 112 | + |
| 113 | + assert(blockList.check('1.1.1.1')); |
| 114 | + assert(blockList.check('10.0.0.5')); |
| 115 | + assert(blockList.check('::ffff:10.0.0.5', 'ipv6')); |
| 116 | + assert(blockList.check('8592:757c:efae:4e45::f', 'ipv6')); |
| 117 | + |
| 118 | + assert(!blockList.check('123.123.123.123')); |
| 119 | + assert(!blockList.check('8592:757c:efaf:4e45:fb5d:d62a:0d00:8e17', 'ipv6')); |
| 120 | + assert(!blockList.check('::ffff:123.123.123.123', 'ipv6')); |
| 121 | +} |
| 122 | + |
| 123 | +{ |
| 124 | + // This test validates boundaries of non-aligned CIDR bit prefixes |
| 125 | + const blockList = new BlockList(); |
| 126 | + blockList.addSubnet('10.0.0.0', 27); |
| 127 | + blockList.addSubnet('8592:757c:efaf::', 51, 'ipv6'); |
| 128 | + |
| 129 | + for (let n = 0; n <= 31; n++) |
| 130 | + assert(blockList.check(`10.0.0.${n}`)); |
| 131 | + assert(!blockList.check('10.0.0.32')); |
| 132 | + |
| 133 | + assert(blockList.check('8592:757c:efaf:0:0:0:0:0', 'ipv6')); |
| 134 | + assert(blockList.check('8592:757c:efaf:1fff:ffff:ffff:ffff:ffff', 'ipv6')); |
| 135 | + assert(!blockList.check('8592:757c:efaf:2fff:ffff:ffff:ffff:ffff', 'ipv6')); |
| 136 | +} |
0 commit comments