nuxt4-demo/server/utils/post-media-urls.test.ts

import { describe, expect, test } from "bun:test";
import { extractMediaUrlsFromMarkdown, publicAssetUrlToStorageKey } from "./post-media-urls";

describe("extractMediaUrlsFromMarkdown", () => {
  test("accepts site-relative /public/upload/ URL without allowed origins", () => {
    expect(extractMediaUrlsFromMarkdown("![](/public/upload/a.webp)")).toEqual(["/public/upload/a.webp"]);
  });

  test("rejects absolute URL when no allowed origins", () => {
    expect(extractMediaUrlsFromMarkdown("![](https://blog.example.com/public/upload/b.webp)")).toEqual([]);
  });

  test("accepts absolute URL when origin matches allowed list", () => {
    expect(
      extractMediaUrlsFromMarkdown("![](https://blog.example.com/public/upload/b.webp)", {
        allowedAssetOrigins: ["https://blog.example.com"],
      }),
    ).toEqual(["/public/upload/b.webp"]);
  });

  test("rejects absolute URL when origin does not match", () => {
    expect(
      extractMediaUrlsFromMarkdown("![](https://evil.example/public/upload/b.webp)", {
        allowedAssetOrigins: ["https://blog.example.com"],
      }),
    ).toEqual([]);
  });

  test("strips query on relative asset URL", () => {
    expect(extractMediaUrlsFromMarkdown("![](/public/upload/c.webp?v=1)")).toEqual(["/public/upload/c.webp"]);
  });

  test("strips query on absolute asset URL via pathname", () => {
    expect(
      extractMediaUrlsFromMarkdown("![](https://x.example/public/upload/d.webp?cache=1)", {
        allowedAssetOrigins: ["https://x.example"],
      }),
    ).toEqual(["/public/upload/d.webp"]);
  });

  test("ignores non-asset absolute URLs", () => {
    expect(
      extractMediaUrlsFromMarkdown("![](https://evil.com/other.png)", {
        allowedAssetOrigins: ["https://evil.com"],
      }),
    ).toEqual([]);
  });
});

describe("publicAssetUrlToStorageKey", () => {
  test("maps normalized path to storage key", () => {
    expect(publicAssetUrlToStorageKey("/public/upload/z.webp")).toBe("z.webp");
  });
});