package community.yuvomi.mobile import org.junit.Assert.assertFalse import org.junit.Assert.assertTrue import org.junit.Test class BlobOriginsTest { @Test fun blobDownloadsCannotCrossOriginsOrDowngradeTls() { val server = ServerAddress.parse("https://family.example") assertTrue(BlobTransfer.owns(server, "blob:https://family.example/unique-id")) listOf( "blob:https://evil.example/id", "blob:http://family.example/id", "blob:https://family.example.evil.test/id", "data:text/plain,hi", ).forEach { assertFalse(it, BlobTransfer.owns(server, it)) } } }