mirror of
https://github.com/angular/angular.git
synced 2026-09-14 13:54:52 +08:00
Alan Agius
280d09b160
Previously, `parseCookieValue` did not strip enclosing double quotes (`DQUOTE`) from quoted cookie values as specified in RFC 6265 Section 4.1.1. In addition, malformed percent-encoding in cookie values caused an unhandled `URIError` when calling `decodeURIComponent`.
51 lines
1.8 KiB
TypeScript
51 lines
1.8 KiB
TypeScript
/**
|
|
* @license
|
|
* Copyright Google LLC All Rights Reserved.
|
|
*
|
|
* Use of this source code is governed by an MIT-style license that can be
|
|
* found in the LICENSE file at https://angular.dev/license
|
|
*/
|
|
|
|
/**
|
|
* @license
|
|
* Copyright Google LLC All Rights Reserved.
|
|
*
|
|
* Use of this source code is governed by an MIT-style license that can be
|
|
* found in the LICENSE file at https://angular.dev/license
|
|
*/
|
|
|
|
import {parseCookieValue} from '../src/cookie';
|
|
|
|
describe('cookies', () => {
|
|
it('parses cookies', () => {
|
|
const cookie = 'other-cookie=false; xsrf-token=token-value; is_awesome=true; ffo=true;';
|
|
expect(parseCookieValue(cookie, 'xsrf-token')).toBe('token-value');
|
|
});
|
|
|
|
it('handles encoded keys', () => {
|
|
expect(parseCookieValue('whitespace%20token=token-value', 'whitespace token')).toBe(
|
|
'token-value',
|
|
);
|
|
});
|
|
|
|
it('handles encoded values', () => {
|
|
expect(parseCookieValue('token=whitespace%20', 'token')).toBe('whitespace ');
|
|
expect(parseCookieValue('token=whitespace%0A', 'token')).toBe('whitespace\n');
|
|
});
|
|
|
|
it('strips DQUOTE characters per RFC 6265 Section 4.1.1', () => {
|
|
expect(parseCookieValue('token="abc123"', 'token')).toBe('abc123');
|
|
expect(parseCookieValue('token=%22abc123%22', 'token')).toBe('abc123');
|
|
expect(parseCookieValue('token="abc=def"', 'token')).toBe('abc=def');
|
|
expect(parseCookieValue('token="abc def"', 'token')).toBe('abc def');
|
|
expect(parseCookieValue('token=""', 'token')).toBe('');
|
|
expect(parseCookieValue('token="abc"', 'token')).toBe('abc');
|
|
expect(parseCookieValue('token="', 'token')).toBe('"');
|
|
});
|
|
|
|
it('handles malformed percent-encoding without throwing URIError', () => {
|
|
expect(parseCookieValue('token=%ZZ', 'token')).toBe('%ZZ');
|
|
expect(parseCookieValue('token="abc%ZZ"', 'token')).toBe('abc%ZZ');
|
|
});
|
|
});
|