mirror/nanobot
1
0
Fork 0
mirror of https://github.com/HKUDS/nanobot.git synced 2026-08-07 21:08:34 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix(session): enforce trusted read scope

Browse Source
This commit is contained in:
Xubin Ren
2026-08-04 12:14:51 +08:00
parent 4c07c40b34
commit f15ea84dd1
11 changed files with 177 additions and 64 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/webui/test_session_mentions.py
+20
View File
@@ -35,6 +35,7 @@ def test_normalize_session_mentions_keeps_existing_distinct_targets(tmp_path) ->
],
manager,
current_session_key="websocket:current",
session_key_prefix="websocket:",
)
assert mentions == [{
@@ -70,9 +71,28 @@ def test_normalize_session_mentions_matches_browser_lowercase_rules(tmp_path) ->
],
manager,
current_session_key="websocket:current",
session_key_prefix="websocket:",
)
assert [mention["session_key"] for mention in mentions] == [
"websocket:street",
"websocket:upper",
]
def test_normalize_session_mentions_rejects_other_session_scopes(tmp_path) -> None:
manager = SessionManager(tmp_path)
_save_session(manager, "websocket:visible", "Visible")
_save_session(manager, "telegram:private", "Private")
mentions = normalize_session_mentions(
[
{"name": "visible", "session_key": "websocket:visible"},
{"name": "private", "session_key": "telegram:private"},
],
manager,
current_session_key="websocket:current",
session_key_prefix="websocket:",
)
assert [mention["session_key"] for mention in mentions] == ["websocket:visible"]