Preview Frames Test

1import assert from "node:assert/strict";
2import crypto from "node:crypto";
3import { createRequire } from "node:module";
4import test from "node:test";
5
6const require = createRequire(import.meta.url);
7const { sriSha384, withPreviewGsapSri } = require("./preview-frames.cjs");
8
9test("preview GSAP integrity matches the intercepted asset bytes", () => {
10  const servedAsset = Buffer.from("the exact local GSAP response body");
11  const html = `
12    <script src="https://cdn.jsdelivr.net/npm/gsap@3.14.2/dist/gsap.min.js" integrity="sha384-stale" crossorigin="anonymous"></script>
13    <script src="https://cdn.example.test/app.js" integrity="sha384-app" crossorigin="anonymous"></script>
14  `;
15
16  const emitted = withPreviewGsapSri(html, servedAsset);
17  const expected = `sha384-${crypto.createHash("sha384").update(servedAsset).digest("base64")}`;
18  const gsapTag = emitted.match(/<script[^>]*gsap[^>]*>/i)[0];
19
20  assert.equal(sriSha384(servedAsset), expected);
21  assert.match(gsapTag, new RegExp(`integrity="${expected}"`));
22  assert.match(gsapTag, /crossorigin="anonymous"/);
23  assert.match(emitted, /app\.js" integrity="sha384-app" crossorigin="anonymous"/);
24});