UNPKG

passbolt-styleguide

Version:

Passbolt styleguide contains common styling assets used by the different sites, plugin, etc.

www.passbolt.com

passbolt/passbolt_styleguide

150 lines (129 loc) • 9.07 kB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
import canSuggestUrl from "./canSuggestUrl"; describe("canSuggestUrl", () => { it("should suggest matching domain urls", () => { expect(canSuggestUrl("ssh://www.passbolt.com", "ssh://www.passbolt.com")).toBe(true); expect(canSuggestUrl("http://www.passbolt.com", "http://www.passbolt.com")).toBe(true); expect(canSuggestUrl("ftp://www.passbolt.com", "ftp://www.passbolt.com")).toBe(true); expect(canSuggestUrl("https://www.passbolt.com", "https://www.passbolt.com")).toBe(true); expect(canSuggestUrl("https://www.passbolt.com:443", "https://www.passbolt.com:443")).toBe(true); expect(canSuggestUrl("https://email", "https://email")).toBe(true); }); it("should suggest matching international domain urls", () => { expect(canSuggestUrl(new URL("https://àáâãäåæçèéêëìíîïðñòóôõöøùúûüýþÿ.com").origin, "https://àáâãäåæçèéêëìíîïðñòóôõöøùúûüýþÿ.com")).toBe(true); expect(canSuggestUrl(new URL("https://الش.com").origin, "https://الش.com")).toBe(true); expect(canSuggestUrl(new URL("https://Ид.com").origin, "https://Ид.com")).toBe(true); expect(canSuggestUrl(new URL("https://完善.com").origin, "https://完善.com")).toBe(true); }); it("should suggest matching IPv4 and IPv6 urls", () => { expect(canSuggestUrl("ssh://[0:0:0:0:0:0:0:1]", "ssh://[0:0:0:0:0:0:0:1]")).toBe(true); expect(canSuggestUrl("ssh://127.0.0.1", "ssh://127.0.0.1")).toBe(true); expect(canSuggestUrl("http://[0:0:0:0:0:0:0:1]", "http://[0:0:0:0:0:0:0:1]")).toBe(true); expect(canSuggestUrl("http://127.0.0.1", "http://127.0.0.1")).toBe(true); expect(canSuggestUrl("ftp://[0:0:0:0:0:0:0:1]", "ftp://[0:0:0:0:0:0:0:1]")).toBe(true); expect(canSuggestUrl("ftp://127.0.0.1", "ftp://127.0.0.1")).toBe(true); expect(canSuggestUrl("https://[0:0:0:0:0:0:0:1]", "https://[0:0:0:0:0:0:0:1]")).toBe(true); expect(canSuggestUrl("https://127.0.0.1", "https://127.0.0.1")).toBe(true); expect(canSuggestUrl("https://[0:0:0:0:0:0:0:1]:443", "https://[0:0:0:0:0:0:0:1]:443")).toBe(true); expect(canSuggestUrl("https://127.0.0.1:443", "https://127.0.0.1:443")).toBe(true); }); it("should match and suggest short and long forms IPs", () => { expect(canSuggestUrl("ssh://[0:0:0:0:0:0:0:1]", "ssh://[::1]")).toBe(true); expect(canSuggestUrl("ssh://[::1]", "ssh://[0:0:0:0:0:0:0:1]")).toBe(true); expect(canSuggestUrl("https://127.1", "https://127.0.0.1")).toBe(true); expect(canSuggestUrl("https://127.0.0.1", "https://127.0.1")).toBe(true); }); it("should suggest urls without defined scheme", () => { expect(canSuggestUrl("http://127.0.0.1", "127.0.0.1")).toBe(true); expect(canSuggestUrl("http://www.passbolt.com", "www.passbolt.com")).toBe(true); expect(canSuggestUrl("https://127.0.0.1", "127.0.0.1")).toBe(true); expect(canSuggestUrl("https://www.passbolt.com", "www.passbolt.com")).toBe(true); expect(canSuggestUrl("ftp://127.0.0.1", "127.0.0.1")).toBe(true); expect(canSuggestUrl("ftp://www.passbolt.com", "www.passbolt.com")).toBe(true); expect(canSuggestUrl("ssh://127.0.0.1", "127.0.0.1")).toBe(true); expect(canSuggestUrl("ssh://www.passbolt.com", "www.passbolt.com")).toBe(true); }); it("should suggest urls without defined port", () => { expect(canSuggestUrl("http://127.0.0.1:8080", "127.0.0.1")).toBe(true); expect(canSuggestUrl("http://127.0.0.1:4443", "127.0.0.1")).toBe(true); }); it("should suggest url with a parent domain", () => { expect(canSuggestUrl("https://www.passbolt.com", "passbolt.com")).toBe(true); expect(canSuggestUrl("https://www.passbolt.com", "https://passbolt.com")).toBe(true); expect(canSuggestUrl("https://billing.admin.passbolt.com", "passbolt.com")).toBe(true); }); it("shouldn't suggest urls not matching the exact domain", () => { expect(canSuggestUrl("https://www.not-passbolt.com", "passbolt.com")).toBe(false); expect(canSuggestUrl("https://bolt.com", "passbolt.com")).toBe(false); expect(canSuggestUrl("https://pass", "passbolt.com")).toBe(false); expect(canSuggestUrl("https://www.attacker-passbolt.com", "passbolt.com")).toBe(false); expect(canSuggestUrl("https://titan.email", "email")).toBe(false); expect(canSuggestUrl("https://email", "http://email")).toBe(false); expect(canSuggestUrl("https://titan.email", "https://email")).toBe(false); }); it("shouldn't suggest IPs not matching the exact domain", () => { // fake IPs url with a subdomain "fake" trying to phish a suggested IP url. expect(canSuggestUrl("https://fake.127.0.0.1", "127.0.0.1")).toBe(false); // fake IPs url with a subdomain "127", only composed of digit, trying to phish a suggested IP url. expect(canSuggestUrl("https://127.127.0.0.1", "127.0.0.1")).toBe(false); // invalid IPv6 url, one extra digit. The URL primitive throw an exception on this invalid url. expect(canSuggestUrl("ssh://[0:0:0:0:0:0:0:0:1]", "ssh://[0:0:0:0:0:0:0:1]")).toBe(false); }); it("shouldn't suggest urls with not matching subdomain to parent urls", () => { expect(canSuggestUrl("https://passbolt.com", "www.passbolt.com")).toBe(false); expect(canSuggestUrl("https://passbolt.com", "https://www.passbolt.com")).toBe(false); }); it("should not suggest urls to an attacker url containing a subdomain looking alike a stored password url", () => { expect(canSuggestUrl("https://www.passbolt.com.attacker.com", "passbolt.com")).toBe(false); expect(canSuggestUrl("https://www.passbolt.com-attacker.com", "passbolt.com")).toBe(false); }); it("should not suggest urls to an attacker url containing a parameter looking alike a stored password url", () => { expect(canSuggestUrl("https://attacker.com?passbolt.com", "passbolt.com")).toBe(false); expect(canSuggestUrl("https://attacker.com?passbolt.com", "passbolt.com")).toBe(false); expect(canSuggestUrl("https://attacker.com?url=https://passbolt.com", "passbolt.com")).toBe(false); }); it("should not suggest urls to an attacker url containing a hash looking alike a stored password url", () => { expect(canSuggestUrl("https://attacker.com#passbolt.com", "passbolt.com")).toBe(false); expect(canSuggestUrl("https://attacker.com#passbolt.com", "passbolt.com")).toBe(false); expect(canSuggestUrl("https://attacker.com#url=https://passbolt.com", "passbolt.com")).toBe(false); }); it("shouldn't suggest urls with a port looking alike a stored password url", () => { // This url is not considered valid by the URL primitive. expect(canSuggestUrl("https://www.attacker.com:www.passbolt.com", "passbolt.com")).toBe(false); }); it("shouldn't suggest IP urls to fake IPs urls", () => { expect(canSuggestUrl("https://[::1]", "[::2]")).toBe(false); expect(canSuggestUrl("https://[2001:4860:4860::8844]", "[2001:4860:4860::8888]")).toBe(false); expect(canSuggestUrl("https://127.0.0.1", "127.0.0.2")).toBe(false); expect(canSuggestUrl("https://127.1", "127.2")).toBe(false); }); it("shouldn't suggest urls if the scheme is different", () => { expect(canSuggestUrl("http://127.0.0.1", "https://127.0.0.1")).toBe(false); expect(canSuggestUrl("https://127.0.0.1", "http://127.0.0.1")).toBe(false); expect(canSuggestUrl("http://[::1]", "https://[::1]")).toBe(false); expect(canSuggestUrl("https://[::1]", "http://[::1]")).toBe(false); expect(canSuggestUrl("http://www.passbolt.com", "https://www.passbolt.com")).toBe(false); expect(canSuggestUrl("https://www.passbolt.com", "http://www.passbolt.com")).toBe(false); expect(canSuggestUrl("ftp://[::1]", "ftps://[::1]")).toBe(false); expect(canSuggestUrl("ssh://[::1]", "https://[::1]")).toBe(false); }); it("shouldn't suggest urls if the port is different", () => { expect(canSuggestUrl("http://127.0.0.1", "127.0.0.1:444")).toBe(false); expect(canSuggestUrl("http://www.passbolt.com", "www.passbolt.com:444")).toBe(false); expect(canSuggestUrl("https://127.0.0.1", "127.0.0.1:80")).toBe(false); expect(canSuggestUrl("https://www.passbolt.com", "www.passbolt.com:80")).toBe(false); expect(canSuggestUrl("https://127.0.0.1:444", "127.0.0.1:443")).toBe(false); expect(canSuggestUrl("https://www.passbolt.com:444", "www.passbolt.com:443")).toBe(false); /* * Ports are not deducted from urls schemes, that's why we expect http scheme to not match an url with a defined * port, even if it is the correct one. */ expect(canSuggestUrl("http://127.0.0.1", "127.0.0.1:80")).toBe(false); expect(canSuggestUrl("https://www.passbolt.com", "www.passbolt.com:443")).toBe(false); }); it("shouldn't suggest urls with no hostname to url with no hostname", () => { expect(canSuggestUrl("https://no%20identified%20domain%20url.com", "no%20identified%20domain%20url")).toBe(false); expect(canSuggestUrl("about:addons", "about:addons")).toBe(false); expect(canSuggestUrl("about:addons", "no%20identified%20domain%20url")).toBe(false); }); });