(chore) add playwright e2e test
This commit is contained in:
@@ -6,6 +6,7 @@
|
||||
|
||||
- [ ] `exec_parse_test.go` — fuzz corpus: every non-allowlisted input rejects and performs zero upstream calls
|
||||
- [ ] `exec_test.go` — unknown namespace rejects on snapshot membership, not regex
|
||||
- [ ] `terminal.e2e.ts` (Playwright, hard requirement) — load terminal UI, submit `get nodes`, assert rendered output; submit an injection payload, assert rejection surfaces in UI, zero upstream call
|
||||
|
||||
## GREEN
|
||||
|
||||
@@ -25,6 +26,7 @@
|
||||
```bash
|
||||
# attempt injection payloads against /api/exec; all rejected, all logged
|
||||
curl -X POST https://riotpiao.com/api/exec -d '{"cmd":"get pods; rm -rf /"}'
|
||||
pnpm test:e2e terminal.e2e.ts # required, must pass before merge
|
||||
```
|
||||
|
||||
Next: [06-phase5-chat.md](06-phase5-chat.md)
|
||||
|
||||
Reference in New Issue
Block a user