SHA256
Yuvomi Mobile Contributors
8c480ddca3
Add real native onboarding/auth/dashboard/tasks/notes/shopping, origin-bound HTTPS and encrypted AndroidKeyStore session persistence. Archive the superseded browser renderer and tests. Verify 10 JVM tests, 6 native API-35 emulator tests, lintDebug/lintRelease and debug/unsigned release APK/AAB builds; the real upstream suite passes 7 tests and exports a nonblank native fixture screenshot. Tink host-tool update removes the old generated-protobuf warning. Full module/visual parity remains explicitly incomplete.
17 lines
617 B
Kotlin
17 lines
617 B
Kotlin
package community.yuvomi.mobile
|
|
|
|
import org.junit.Assert.assertFalse
|
|
import org.junit.Assert.assertTrue
|
|
import org.junit.Test
|
|
|
|
class BlobOriginsTest {
|
|
@Test fun blobDownloadsCannotCrossOriginsOrDowngradeTls() {
|
|
val server = ServerAddress.parse("https://family.example")
|
|
assertTrue(BlobTransfer.owns(server, "blob:https://family.example/unique-id"))
|
|
listOf(
|
|
"blob:https://evil.example/id", "blob:http://family.example/id",
|
|
"blob:https://family.example.evil.test/id", "data:text/plain,hi",
|
|
).forEach { assertFalse(it, BlobTransfer.owns(server, it)) }
|
|
}
|
|
}
|