AI/참고/playwright-main/tests/mcp/request-blocking.spec.ts

/**
 * Copyright (c) Microsoft Corporation.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 * http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

import { Client } from '@modelcontextprotocol/sdk/client/index.js';
import { test, expect } from './fixtures';

const BLOCK_MESSAGE = /Blocked by Web Inspector|NS_ERROR_FAILURE|net::ERR_BLOCKED_BY_CLIENT/g;

const fetchPage = async (client: Client, url: string) => {
  return await client.callTool({
    name: 'browser_navigate',
    arguments: {
      url,
    },
  });
};

const fetchPageText = async (client: Client, url: string) => {
  const result = await fetchPage(client, url);
  return JSON.stringify(result, null, 2);
};

test('default to allow all', async ({ server, client }) => {
  server.setContent('/ppp', 'content:PPP', 'text/html');
  expect(await fetchPage(client, server.PREFIX + '/ppp')).toHaveResponse({
    snapshot: expect.stringContaining('content:PPP'),
  });
});

test('blocked works (hostname)', async ({ startClient }) => {
  const { client } = await startClient({
    args: ['--blocked-origins', 'microsoft.com;example.com;playwright.dev']
  });
  const result = await fetchPageText(client, 'https://example.com/');
  expect(result).toMatch(BLOCK_MESSAGE);
});

test('blocked works (origin)', async ({ startClient }) => {
  const { client } = await startClient({
    args: ['--blocked-origins', 'https://microsoft.com;https://example.com;https://playwright.dev']
  });
  const result = await fetchPageText(client, 'https://example.com/');
  expect(result).toMatch(BLOCK_MESSAGE);
});

test('allowed works (hostname)', async ({ server, startClient }) => {
  server.setContent('/ppp', 'content:PPP', 'text/html');
  const { client } = await startClient({
    args: ['--allowed-origins', `microsoft.com;${new URL(server.PREFIX).host};playwright.dev`]
  });
  expect(await fetchPage(client, server.PREFIX + '/ppp')).toHaveResponse({
    snapshot: expect.stringContaining('content:PPP'),
  });
});

test('allowed works (origin)', async ({ server, startClient }) => {
  server.setContent('/ppp', 'content:PPP', 'text/html');
  const { client } = await startClient({
    args: ['--allowed-origins', `https://microsoft.com;${new URL(server.PREFIX).origin};https://playwright.dev`]
  });
  expect(await fetchPage(client, server.PREFIX + '/ppp')).toHaveResponse({
    snapshot: expect.stringContaining('content:PPP'),
  });
});

test('blocked takes precedence (hostname)', async ({ startClient }) => {
  const { client } = await startClient({
    args: [
      '--blocked-origins', 'example.com',
      '--allowed-origins', 'example.com',
    ],
  });
  const result = await fetchPageText(client, 'https://example.com/');
  expect(result).toMatch(BLOCK_MESSAGE);
});

test('blocked takes precedence (origin)', async ({ startClient }) => {
  const { client } = await startClient({
    args: [
      '--blocked-origins', 'https://example.com',
      '--allowed-origins', 'https://example.com',
    ],
  });
  const result = await fetchPageText(client, 'https://example.com/');
  expect(result).toMatch(BLOCK_MESSAGE);
});

test('allowed without blocked blocks all non-explicitly specified origins (hostname)', async ({ startClient }) => {
  const { client } = await startClient({
    args: ['--allowed-origins', 'playwright.dev'],
  });
  const result = await fetchPageText(client, 'https://example.com/');
  expect(result).toMatch(BLOCK_MESSAGE);
});

test('allowed without blocked blocks all non-explicitly specified origins (origin)', async ({ startClient }) => {
  const { client } = await startClient({
    args: ['--allowed-origins', 'https://playwright.dev'],
  });
  const result = await fetchPageText(client, 'https://example.com/');
  expect(result).toMatch(BLOCK_MESSAGE);
});

test('blocked without allowed allows non-explicitly specified origins (hostname)', async ({ server, startClient }) => {
  server.setContent('/ppp', 'content:PPP', 'text/html');
  const { client } = await startClient({
    args: ['--blocked-origins', 'example.com'],
  });
  expect(await fetchPage(client, server.PREFIX + '/ppp')).toHaveResponse({
    snapshot: expect.stringContaining('content:PPP'),
  });
});

test('blocked without allowed allows non-explicitly specified origins (origin)', async ({ server, startClient }) => {
  server.setContent('/ppp', 'content:PPP', 'text/html');
  const { client } = await startClient({
    args: ['--blocked-origins', 'https://example.com'],
  });
  expect(await fetchPage(client, server.PREFIX + '/ppp')).toHaveResponse({
    snapshot: expect.stringContaining('content:PPP'),
  });
});

test('allowed works (wildcard port)', async ({ server, startClient }) => {
  server.setContent('/ppp', 'content:PPP', 'text/html');
  const { client } = await startClient({
    args: ['--allowed-origins', 'http://localhost:*']
  });
  expect(await fetchPage(client, server.PREFIX + '/ppp')).toHaveResponse({
    snapshot: expect.stringContaining('content:PPP'),
  });
});

test('allowed blocks different hostname (wildcard port)', async ({ startClient }) => {
  const { client } = await startClient({
    args: ['--allowed-origins', 'http://localhost:*'],
  });
  const result = await fetchPageText(client, 'http://example.com/');
  expect(result).toMatch(BLOCK_MESSAGE);
});

test('allowed blocks different protocol (wildcard port)', async ({ startClient }) => {
  const { client } = await startClient({
    args: ['--allowed-origins', 'http://localhost:*'],
  });
  const result = await fetchPageText(client, 'https://localhost:8080/');
  expect(result).toMatch(BLOCK_MESSAGE);
});

test('blocked works (wildcard port)', async ({ server, startClient }) => {
  server.setContent('/ppp', 'content:PPP', 'text/html');
  const { client } = await startClient({
    args: ['--blocked-origins', `http://${new URL(server.PREFIX).host.split(':')[0]}:*`]
  });
  const result = await fetchPageText(client, server.PREFIX + '/ppp');
  expect(result).toMatch(BLOCK_MESSAGE);
});