feat: add web testing foundation with infra-backed suites (#349)

* feat: add web test framework with infra-backed suites * fix: honor DATABASE_URL env in integration prepare script * fix: apply web test review feedback * fix: streamline web test infra lifecycle and workflow scope
2026-02-16 09:13:29 +11:00
parent 09bdb8aaad
commit 487902421b
33 changed files with 1676 additions and 39 deletions
@@ -0,0 +1,40 @@
+import { describe, expect, it } from "vitest";
+import {
+  buildHeaders,
+  sanitizeCustomHeaders,
+  sanitizeHeader,
+} from "~/server/utils/email-headers";
+
+describe("email header sanitization", () => {
+  it("removes reserved and invalid headers", () => {
+    expect(sanitizeHeader("x-usesend-email-id", "123")).toBeUndefined();
+    expect(sanitizeHeader("X-Test", "ok\r\nInjected: true")).toBeUndefined();
+    expect(sanitizeHeader(123, "ok")).toBeUndefined();
+  });
+
+  it("returns undefined for empty sanitized map", () => {
+    const result = sanitizeCustomHeaders({
+      "x-usesend-email-id": "blocked",
+      "x-bad": "hello\nworld",
+    });
+
+    expect(result).toBeUndefined();
+  });
+
+  it("adds defaults and keeps valid custom headers", () => {
+    const headers = buildHeaders({
+      emailId: "em_1",
+      headers: {
+        "X-Custom-Trace": "trace-1",
+      },
+      unsubUrl: "https://example.com/unsub",
+      isBulk: true,
+    });
+
+    expect(headers["X-Usesend-Email-ID"]).toBe("em_1");
+    expect(headers["X-Custom-Trace"]).toBe("trace-1");
+    expect(headers["List-Unsubscribe"]).toBe("<https://example.com/unsub>");
+    expect(headers["Precedence"]).toBe("bulk");
+    expect(headers["X-Entity-Ref-ID"]).toBeTypeOf("string");
+  });
+});