first commit

2026-07-12 15:55:18 +05:30
commit ee98026cc5
404 changed files with 44522 additions and 0 deletions
@@ -0,0 +1,22 @@
+import { expect, test } from "bun:test";
+import { mkdirSync, mkdtempSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { servePublicAsset } from "../src/public.ts";
+
+test("production HTML revalidates while fingerprinted assets are immutable", async () => {
+  const root = mkdtempSync(join(tmpdir(), "wrnexus-public-"));
+  mkdirSync(join(root, "assets"));
+  writeFileSync(join(root, "index.html"), "home");
+  writeFileSync(join(root, "assets", "app.abcdef1234.js"), "app");
+  const html = await servePublicAsset(root, "/index.html", "production");
+  const asset = await servePublicAsset(root, "/assets/app.abcdef1234.js", "production");
+  expect(html?.headers.get("cache-control")).toBe("public, max-age=0, must-revalidate");
+  expect(asset?.headers.get("cache-control")).toBe("public, max-age=31536000, immutable");
+  expect(asset?.headers.get("x-content-type-options")).toBe("nosniff");
+});
+
+test("public server rejects encoded traversal", async () => {
+  const root = mkdtempSync(join(tmpdir(), "wrnexus-public-"));
+  expect(await servePublicAsset(root, "/%2e%2e/secret", "production")).toBeNull();
+});