%PDF- <> %âãÏÓ endobj 2 0 obj <> endobj 3 0 obj <>/ExtGState<>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI] >>/Annots[ 28 0 R 29 0 R] /MediaBox[ 0 0 595.5 842.25] /Contents 4 0 R/Group<>/Tabs/S>> endobj ºaâÚÎΞ-ÌE1ÍØÄ÷{òò2ÿ ÛÖ^ÔÀá TÎ{¦?§®¥kuµùÕ5sLOšuY>endobj 2 0 obj<>endobj 2 0 obj<>endobj 2 0 obj<>endobj 2 0 obj<> endobj 2 0 obj<>endobj 2 0 obj<>es 3 0 R>> endobj 2 0 obj<> ox[ 0.000000 0.000000 609.600000 935.600000]/Fi endobj 3 0 obj<> endobj 7 1 obj<>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI]>>/Subtype/Form>> stream
'use strict'; const common = require('../../common'); if (!common.hasCrypto) common.skip('missing crypto'); const assert = require('assert'); const tmpdir = require('../../common/tmpdir'); const { spawnSync } = require('child_process'); const crypto = require('crypto'); const fs = require('fs'); const path = require('path'); const { pathToFileURL } = require('url'); tmpdir.refresh(); function hash(algo, body) { const h = crypto.createHash(algo); h.update(body); return h.digest('base64'); } const policyFilepath = path.join(tmpdir.path, 'policy'); const depFilepath = require.resolve(`./build/${common.buildType}/binding.node`); const depURL = pathToFileURL(depFilepath); const tmpdirURL = pathToFileURL(tmpdir.path); if (!tmpdirURL.pathname.endsWith('/')) { tmpdirURL.pathname += '/'; } const depBody = fs.readFileSync(depURL); function writePolicy(...resources) { const manifest = { resources: {} }; for (const { url, integrity } of resources) { manifest.resources[url] = { integrity }; } fs.writeFileSync(policyFilepath, JSON.stringify(manifest, null, 2)); } function test(shouldFail, resources) { writePolicy(...resources); const { status, stdout, stderr } = spawnSync(process.execPath, [ '--experimental-policy', policyFilepath, depFilepath, ]); console.log(stdout.toString(), stderr.toString()); if (shouldFail) { assert.notStrictEqual(status, 0); } else { assert.strictEqual(status, 0); } } test(false, [{ url: depURL, integrity: `sha256-${hash('sha256', depBody)}` }]); test(true, [{ url: depURL, integrity: `sha256akjsalkjdlaskjdk-${hash('sha256', depBody)}` }]);