import { test } from 'node:test'; import assert from 'node:assert/strict'; import vm from 'node:vm'; import { readFileSync } from 'node:fs'; import { fileURLToPath } from 'node:url'; import { dirname, join } from 'node:path'; import { vpClass, cleanPath, refHost, cssPath, contactKind, readConsent, contrastOk, escapeHtml, } from '../client/core.js'; import { buildAll } from '../client/build.js'; const DIST = join(dirname(fileURLToPath(import.meta.url)), '..', 'client', 'dist'); // ---------- core ---------- test('vpClass', () => { assert.equal(vpClass(0), 'm'); assert.equal(vpClass(767), 'm'); assert.equal(vpClass(768), 't'); assert.equal(vpClass(1023), 't'); assert.equal(vpClass(1024), 'd'); assert.equal(vpClass(NaN), 'd'); }); test('cleanPath', () => { assert.equal(cleanPath('https://x.de/a/b?q=1#h'), '/a/b'); assert.equal(cleanPath('/über%20uns?x=1'), '/über uns'); assert.equal(cleanPath('/%E0%A4%A'), '/%E0%A4%A'); // kaputtes Encoding bleibt roh assert.equal(cleanPath('https://x.de'), '/'); assert.equal(cleanPath(''), '/'); assert.equal(cleanPath('/' + 'a'.repeat(400)).length, 300); assert.equal(cleanPath(null), '/'); }); test('refHost', () => { assert.equal(refHost('https://www.google.com/search?q=x', 'mein.de'), 'www.google.com'); assert.equal(refHost('https://mein.de/a', 'mein.de'), ''); assert.equal(refHost('https://www.mein.de/a', 'mein.de'), ''); assert.equal(refHost('', 'mein.de'), ''); assert.equal(refHost('kein url', 'mein.de'), ''); assert.equal(refHost('android-app://com.x', 'mein.de'), ''); assert.equal(refHost('HTTPS://Foo.DE/x', 'mein.de'), 'foo.de'); }); function el(tag, o = {}) { const e = { tagName: tag.toUpperCase(), id: o.id || '', parentNode: o.parent || null, attrs: { class: o.cls || '' }, getAttribute(n) { return this.attrs[n] ?? null; }, classList: (o.cls || '').split(/\s+/).filter(Boolean) }; return e; } test('cssPath', () => { const body = el('body'); const div = el('div', { parent: body, cls: 'hero main' }); const btn = el('button', { parent: div, cls: 'cta' }); assert.equal(cssPath(btn), 'body > div.hero.main > button.cta'); const withId = el('section', { parent: body, id: 'kontakt' }); const a = el('a', { parent: withId }); assert.equal(cssPath(a), 'section#kontakt > a'); // generierte IDs/Klassen werden uebersprungen const gen = el('div', { parent: body, id: 'ember12345', cls: 'css-1a2b3c x9f8e7d6c5b4a ok' }); assert.equal(cssPath(gen), 'body > div.ok'); // max. 5 Ebenen let p = el('div'); const first = p; for (let i = 0; i < 9; i++) p = el('span', { parent: p }); assert.equal(cssPath(p).split(' > ').length, 5); assert.ok(first); // <= 200 const long = el('div', { parent: body, cls: Array.from({ length: 40 }, (_, i) => 'klasse' + 'x'.repeat(i % 5 + 3)).join(' ') }); assert.ok(cssPath(long).length <= 200); assert.equal(cssPath(null), ''); }); test('contactKind', () => { const k = (href) => contactKind({ href }, 'mein.de'); assert.equal(k('tel:+49123'), 'tel'); assert.equal(k('TEL:+49123'), 'tel'); assert.equal(k('mailto:a@b.de'), 'mail'); assert.equal(k('https://wa.me/49123'), 'wa'); assert.equal(k('https://api.whatsapp.com/send?phone=1'), 'wa'); assert.equal(k('whatsapp://send?text=x'), 'wa'); assert.equal(k('https://anders.de/x'), 'out'); assert.equal(k('https://mein.de/x'), null); assert.equal(k('https://www.mein.de/x'), null); assert.equal(k('/kontakt'), null); assert.equal(k('#top'), null); assert.equal(k('javascript:void(0)'), null); assert.equal(k(''), null); assert.equal(contactKind(null, 'mein.de'), null); }); test('readConsent', () => { const now = 1_700_000_000_000; const day = 86400000; const st = (v) => ({ getItem: () => v }); assert.deepEqual(readConsent(st(JSON.stringify({ v: 1, a: 'accept', t: now - 10 * day })), now), { v: 1, a: 'accept', t: now - 10 * day }); assert.equal(readConsent(st(JSON.stringify({ v: 1, a: 'reject', t: now - 182 * day })), now).a, 'reject'); assert.equal(readConsent(st(JSON.stringify({ v: 1, a: 'accept', t: now - 183 * day })), now), null); assert.equal(readConsent(st(JSON.stringify({ v: 2, a: 'accept', t: now })), now), null); assert.equal(readConsent(st(JSON.stringify({ v: 1, a: 'maybe', t: now })), now), null); assert.equal(readConsent(st(JSON.stringify({ v: 1, a: 'accept', t: 'x' })), now), null); assert.equal(readConsent(st(JSON.stringify({ v: 1, a: 'accept', t: now + day })), now), null); assert.equal(readConsent(st('kaputt{'), now), null); assert.equal(readConsent(st(null), now), null); assert.equal(readConsent({ getItem() { throw new Error('blocked'); } }, now), null); assert.equal(readConsent(null, now), null); }); test('contrastOk', () => { assert.equal(contrastOk('#111111'), true); assert.equal(contrastOk('#ffffff'), false); assert.equal(contrastOk('#ffff00'), false); assert.equal(contrastOk('#767676'), true); // 4.54 assert.equal(contrastOk('#777777'), false); // 4.48 assert.equal(contrastOk('#00F'), false); // ungueltig assert.equal(contrastOk(undefined), false); }); test('escapeHtml', () => { assert.equal(escapeHtml(`&'`), '<a href="x">&'</a>'); assert.equal(escapeHtml(null), ''); }); // ---------- dist ---------- test('dist ist aktuell', () => { const b = buildAll(); assert.equal(readFileSync(join(DIST, 'w.js'), 'utf8'), b.w); assert.equal(readFileSync(join(DIST, 'h.js'), 'utf8'), b.h); assert.ok(!/^\s*(import|export)\s/m.test(b.w + b.h)); }); // ---------- Verhalten von w.js (Fake-DOM) ---------- function makeEl(tag) { const e = { tagName: String(tag).toUpperCase(), attrs: {}, children: [], listeners: {}, style: {}, parentNode: null, id: '', textContent: '', focused: false, removed: false, setAttribute(n, v) { this.attrs[n] = String(v); if (n === 'id') this.id = String(v); }, getAttribute(n) { return n in this.attrs ? this.attrs[n] : null; }, appendChild(c) { c.parentNode = this; this.children.push(c); return c; }, append(...cs) { cs.forEach((c) => this.appendChild(c)); }, addEventListener(t, f) { (this.listeners[t] ||= []).push(f); }, removeEventListener(t, f) { this.listeners[t] = (this.listeners[t] || []).filter((x) => x !== f); }, focus() { this.focused = true; }, remove() { this.removed = true; if (this.parentNode) this.parentNode.children = this.parentNode.children.filter((c) => c !== this); }, closest(sel) { const attr = /^\[([\w-]+)\]$/.exec(sel); for (let n = this; n; n = n.parentNode) if (attr && n.attrs && attr[1] in n.attrs) return n; return null; }, attachShadow() { const r = makeEl('shadow'); r.isShadow = true; this.shadow = r; return r; }, click(extra = {}) { fire(this, 'click', { target: this, ...extra }); }, }; Object.defineProperty(e, 'href', { get() { return this.attrs.href || ''; } }); Object.defineProperty(e, 'className', { set(v) { this.attrs.class = v; }, get() { return this.attrs.class || ''; } }); return e; } function fire(node, type, ev) { for (const f of [...(node.listeners[type] || [])]) f({ type, preventDefault() {}, ...ev }); } function walk(n, fn) { fn(n); for (const c of n.children || []) walk(c, fn); if (n.shadow) walk(n.shadow, fn); } function findAll(root, pred) { const out = []; walk(root, (n) => { if (pred(n)) out.push(n); }); return out; } const btn = (root, label) => findAll(root, (n) => n.tagName === 'BUTTON' && n.textContent === label)[0]; function harness({ gpc, dnt, stored, search = '', src = 'https://project.webklar.com/a/w.js', withConsentLink = false } = {}) { const sent = []; const store = {}; let now = 1_700_000_000_000; if (stored) store['wk-consent'] = JSON.stringify(stored); const body = makeEl('body'); const html = makeEl('html'); const timers = []; const script = makeEl('script'); script.setAttribute('src', src); script.setAttribute('data-site', 'abcdef0123456789abcd'); script.setAttribute('data-color', '#0a5a8a'); script.src = src; const docL = {}; const winL = {}; const link = withConsentLink ? makeEl('a') : null; if (link) link.setAttribute('data-webklar-consent', ''); const injected = []; if (link) link.click = () => { for (const f of [...(docL.click || [])]) f({ type: 'click', target: link, preventDefault() {} }); }; const document = { currentScript: script, referrer: 'https://www.google.com/', visibilityState: 'visible', documentElement: Object.assign(html, { scrollWidth: 1000, scrollHeight: 2000 }), body, head: makeEl('head'), createElement: makeEl, activeElement: null, querySelector(s) { return s === '[data-webklar-consent]' ? link : null; }, addEventListener(t, f) { (docL[t] ||= []).push(f); }, removeEventListener(t, f) { docL[t] = (docL[t] || []).filter((x) => x !== f); }, }; body.appendChild = function (c) { c.parentNode = this; this.children.push(c); if (c.attrs.src) injected.push(c); return c; }; document.head.appendChild = body.appendChild; const history = { pushState() {}, replaceState(s, t, u) { this.replaced = u; } }; const win = { innerWidth: 1200, innerHeight: 800, scrollX: 0, scrollY: 300, document, history, location: { hostname: 'mein.de', pathname: '/start', search, href: 'https://mein.de/start' + search, hash: '' }, addEventListener(t, f) { (winL[t] ||= []).push(f); }, removeEventListener(t, f) { winL[t] = (winL[t] || []).filter((x) => x !== f); }, }; const sandbox = { window: win, document, history, location: win.location, URL, URLSearchParams, JSON, Math, Date: { now: () => now }, String, Number, Array, Object, RegExp, Error, parseInt, navigator: { globalPrivacyControl: gpc, doNotTrack: dnt, sendBeacon(u, d) { sent.push({ u, d: JSON.parse(d) }); return true; } }, localStorage: { getItem: (k) => (k in store ? store[k] : null), setItem: (k, v) => { store[k] = String(v); } }, setTimeout: (f, ms) => { timers.push(f); return timers.length; }, clearTimeout() {}, setInterval: () => 0, clearInterval() {}, Blob: class {}, fetch: () => Promise.resolve(), }; win.localStorage = sandbox.localStorage; sandbox.globalThis = sandbox; vm.createContext(sandbox); vm.runInContext(readFileSync(join(DIST, 'w.js'), 'utf8'), sandbox); const types = () => sent.map((s) => s.d.t + (s.d.a ? ':' + s.d.a : '')); const ck = (target, ev = {}) => { for (const f of [...(docL.click || [])]) f({ type: 'click', target, pageX: 500, pageY: 1000, clientX: 500, clientY: 700, preventDefault() {}, ...ev }); }; const leave = () => { for (const f of [...(winL.pagehide || [])]) f({}); document.visibilityState = 'hidden'; for (const f of [...(docL.visibilitychange || [])]) f({}); }; return { sent, store, types, ck, leave, body, docL, winL, win, injected, history, timers, setNow: (n) => { now = n; }, link, document }; } const target = () => { const b = makeEl('button'); b.parentNode = makeEl('body'); b.attrs.class = 'cta'; return b; }; const hostEl = (h) => h.body.children.find((c) => c.shadow && findAll(c.shadow, (n) => n.attrs && n.attrs.role === 'dialog').length); test('w.js: ohne Einwilligung nur pv + bn shown, keine ck/ct/en', () => { const h = harness(); assert.deepEqual(h.types(), ['pv', 'bn:shown']); assert.equal(h.sent[0].u, 'https://project.webklar.com/a/e'); assert.deepEqual(h.sent[0].d, { t: 'pv', site: 'abcdef0123456789abcd', path: '/start', ref: 'www.google.com', vp: 'd' }); assert.deepEqual(h.sent[1].d, { t: 'bn', site: 'abcdef0123456789abcd', a: 'shown' }); h.ck(target()); h.leave(); assert.deepEqual(h.types(), ['pv', 'bn:shown']); assert.equal((h.docL.click || []).length, 0); }); test('w.js: Banner-Aufbau (Dialog, Texte, gleiche Buttons, Akzent nur Annehmen)', () => { const h = harness(); const host = hostEl(h); assert.ok(host, 'Banner im Shadow Root'); const dlg = findAll(host.shadow, (n) => n.attrs.role === 'dialog')[0]; assert.equal(dlg.attrs['aria-label'], 'Cookie-Einstellungen'); const all = findAll(host.shadow, () => true); const text = all.map((n) => n.textContent).join(' '); assert.match(text, /Wir möchten mit deiner Zustimmung anonym auswerten/); const a = all.find((n) => n.tagName === 'A'); assert.equal(a.attrs.href, '/datenschutz-analyse.html'); assert.equal(a.textContent, 'Datenschutz-Info'); const css = all.filter((n) => n.tagName === 'STYLE').map((n) => n.textContent).join(''); assert.match(css, /#0a5a8a/); assert.match(css, /max-width:\s*767px/); const buttons = all.filter((n) => n.tagName === 'BUTTON'); assert.deepEqual(buttons.map((b) => b.textContent), ['Ablehnen', 'Annehmen']); assert.ok(buttons[0].focused, 'erster Button fokussiert'); assert.equal(host.style.zIndex, '2147483647'); // Escape schliesst nicht fire(dlg, 'keydown', { key: 'Escape' }); fire(host, 'keydown', { key: 'Escape' }); assert.ok(!host.removed); }); test('w.js: Annehmen => bn accept, Speicher, ck/ct/en; Widerruf stoppt sofort', () => { const h = harness(); const bh = hostEl(h); btn(bh.shadow, 'Annehmen').click(); assert.equal(h.types().at(-1), 'bn:accept'); assert.deepEqual(JSON.parse(h.store['wk-consent']), { v: 1, a: 'accept', t: 1_700_000_000_000 }); assert.ok(bh.removed && !hostEl(h)); const t = target(); h.ck(t); const ck = h.sent.at(-1).d; assert.deepEqual(ck, { t: 'ck', site: 'abcdef0123456789abcd', path: '/start', vp: 'd', x: 0.5, y: 0.5, sel: 'body > button.cta' }); // Kontakt-Link: ck + ct (Kind-Element in ) const a = makeEl('a'); a.setAttribute('href', 'tel:+4912'); a.parentNode = makeEl('body'); const span = makeEl('span'); span.parentNode = a; const n = h.sent.length; h.ck(span); assert.deepEqual(h.sent.slice(n).map((s) => s.d.t), ['ck', 'ct']); assert.deepEqual(h.sent.at(-1).d, { t: 'ct', site: 'abcdef0123456789abcd', path: '/start', kind: 'tel' }); const out = makeEl('a'); out.setAttribute('href', 'https://anders.de/x'); out.parentNode = makeEl('body'); h.ck(out); assert.deepEqual(h.sent.at(-1).d, { t: 'ct', site: 'abcdef0123456789abcd', path: '/start', kind: 'out', host: 'anders.de' }); // en einmal h.leave(); h.leave(); const en = h.sent.filter((s) => s.d.t === 'en'); assert.equal(en.length, 1); assert.equal(en[0].d.scroll, 55); // (300+800)/2000 assert.equal(typeof en[0].d.sec, 'number'); // Widerruf ueber Einstellungs-Link const settings = findAll(h.body, (x) => x.tagName === 'BUTTON' && x.textContent === 'Cookie-Einstellungen')[0]; assert.ok(settings, 'fester Link'); settings.click(); btn(hostEl(h).shadow, 'Ablehnen').click(); assert.equal(h.types().at(-1), 'bn:reject'); const before = h.sent.length; h.ck(target()); h.leave(); assert.equal(h.sent.length, before); assert.equal((h.docL.click || []).length, 0); assert.equal((h.docL.visibilitychange || []).length, 0); assert.equal((h.winL.pagehide || []).length, 0); }); test('w.js: gespeicherte Einwilligung => kein Banner, kein bn, Tracking an', () => { const h = harness({ stored: { v: 1, a: 'accept', t: 1_700_000_000_000 - 1000 } }); assert.deepEqual(h.types(), ['pv']); assert.equal(hostEl(h), undefined); h.ck(target()); assert.equal(h.sent.at(-1).d.t, 'ck'); }); test('w.js: abgelaufene/abgelehnte Einwilligung', () => { const h = harness({ stored: { v: 1, a: 'reject', t: 1_700_000_000_000 - 5000 } }); assert.deepEqual(h.types(), ['pv']); h.ck(target()); h.leave(); assert.deepEqual(h.types(), ['pv']); const h2 = harness({ stored: { v: 1, a: 'accept', t: 1_700_000_000_000 - 200 * 86400000 } }); assert.deepEqual(h2.types(), ['pv', 'bn:shown']); }); test('w.js: GPC und DNT => nur pv, kein Banner, nie Tracking', () => { for (const o of [{ gpc: true }, { dnt: '1' }, { gpc: true, stored: { v: 1, a: 'accept', t: 1_700_000_000_000 } }]) { const h = harness(o); assert.deepEqual(h.types(), ['pv']); assert.equal(hostEl(h), undefined); assert.equal(findAll(h.body, (x) => x.textContent === 'Cookie-Einstellungen').length, 0); h.ck(target()); h.leave(); assert.deepEqual(h.types(), ['pv']); } }); test('w.js: [data-webklar-consent] oeffnet Banner, kein fester Link', () => { const h = harness({ stored: { v: 1, a: 'reject', t: 1_700_000_000_000 }, withConsentLink: true }); assert.equal(findAll(h.body, (x) => x.textContent === 'Cookie-Einstellungen').length, 0); assert.equal(hostEl(h), undefined); h.link.click(); assert.ok(hostEl(h)); }); test('w.js: Heatmap-Modus sendet nichts, entfernt Parameter, laedt h.js', () => { const h = harness({ search: '?a=1&__wk_heat=TOKEN.sig' }); assert.deepEqual(h.sent, []); assert.equal(hostEl(h), undefined); assert.equal(h.history.replaced, '/start?a=1'); assert.equal(h.injected.length, 1); assert.equal(h.injected[0].attrs.src, 'https://project.webklar.com/a/h.js'); assert.equal(h.injected[0].attrs['data-token'], 'TOKEN.sig'); assert.equal((h.docL.click || []).length, 0); }); test('w.js: SPA-Navigation sendet pv nur bei Pfadwechsel', () => { const h = harness({ gpc: true }); h.win.location.pathname = '/start'; h.history.pushState(null, '', '/start?x=1'); h.timers.splice(0).forEach((f) => f()); assert.equal(h.sent.length, 1); h.win.location.pathname = '/neu'; h.history.pushState(null, '', '/neu'); h.history.pushState(null, '', '/neu'); h.timers.splice(0).forEach((f) => f()); assert.deepEqual(h.sent.map((s) => s.d.path), ['/start', '/neu']); }); test('w.js: wirft nie, auch wenn localStorage/sendBeacon kaputt', () => { assert.doesNotThrow(() => { const sandbox = { window: {}, document: { currentScript: null, querySelector() { throw new Error('x'); } }, navigator: {}, location: {} }; sandbox.window = sandbox; vm.createContext(sandbox); vm.runInContext(readFileSync(join(DIST, 'w.js'), 'utf8'), sandbox); }); });