Jeppe B
2a6a86c9c3
Resolve recommended-profile Critical and High findings, retain narrow analyzer exceptions, and update the edge-broker WebSocket dependency to a non-vulnerable release.
14 lines
585 B
PHP
14 lines
585 B
PHP
<?php
|
|
|
|
it('restricts absolute webhook URLs to configured n8n webhook host', function (): void {
|
|
$classFile = app_path('classes/n8n.php');
|
|
$content = file_get_contents($classFile);
|
|
|
|
expect($content)->not->toBeFalse();
|
|
expect($content)->toContain('isAllowedWebhookAbsoluteUrl');
|
|
expect($content)->toContain('Webhook URL must use the configured n8n webhook host.');
|
|
expect($content)->toContain('$targetHost !== $baseHost');
|
|
expect($content)->toContain('$targetScheme !== $baseScheme');
|
|
expect($content)->toContain('return $targetPort === $basePort;');
|
|
});
|