posthog/plugin-server/tests/utils/fetch.test.ts

import { FetchError } from 'node-fetch'

import { raiseIfUserProvidedUrlUnsafe } from '../../src/utils/fetch'

test('raiseIfUserProvidedUrlUnsafe', async () => {
    // Sync test cases with posthog/api/test/test_utils.py
    await raiseIfUserProvidedUrlUnsafe('https://google.com?q=20') // Safe
    await raiseIfUserProvidedUrlUnsafe('https://posthog.com') // Safe
    await raiseIfUserProvidedUrlUnsafe('https://posthog.com/foo/bar') // Safe, with path
    await raiseIfUserProvidedUrlUnsafe('https://posthog.com:443') // Safe, good port
    await raiseIfUserProvidedUrlUnsafe('https://1.1.1.1') // Safe, public IP
    await expect(raiseIfUserProvidedUrlUnsafe('')).rejects.toThrow(new FetchError('Invalid URL', 'posthog-host-guard'))
    await expect(raiseIfUserProvidedUrlUnsafe('@@@')).rejects.toThrow(
        new FetchError('Invalid URL', 'posthog-host-guard')
    )
    await expect(raiseIfUserProvidedUrlUnsafe('posthog.com')).rejects.toThrow(
        new FetchError('Invalid URL', 'posthog-host-guard')
    )
    await expect(raiseIfUserProvidedUrlUnsafe('ftp://posthog.com')).rejects.toThrow(
        new FetchError('Scheme must be either HTTP or HTTPS', 'posthog-host-guard')
    )
    await expect(raiseIfUserProvidedUrlUnsafe('http://localhost')).rejects.toThrow(
        new FetchError('Internal hostname', 'posthog-host-guard')
    )
    await expect(raiseIfUserProvidedUrlUnsafe('http://192.168.0.5')).rejects.toThrow(
        new FetchError('Internal hostname', 'posthog-host-guard')
    )
    await expect(raiseIfUserProvidedUrlUnsafe('http://0.0.0.0')).rejects.toThrow(
        new FetchError('Internal hostname', 'posthog-host-guard')
    )
    await expect(raiseIfUserProvidedUrlUnsafe('http://10.0.0.24')).rejects.toThrow(
        new FetchError('Internal hostname', 'posthog-host-guard')
    )
    await expect(raiseIfUserProvidedUrlUnsafe('http://172.20.0.21')).rejects.toThrow(
        new FetchError('Internal hostname', 'posthog-host-guard')
    )
    await expect(raiseIfUserProvidedUrlUnsafe('http://fgtggggzzggggfd.com')).rejects.toThrow(
        new FetchError('Invalid hostname', 'posthog-host-guard')
    )
})