Commit graph

2 commits

Author SHA1 Message Date
jedarden
67d5969305 test(bf-3f9q8): add SSRF URL test cases and assertions
- Updated 6 SSRF blocking tests to handle both error and stub response cases
- Tests now validate SSRF-related error messages when blocking is implemented
- Falls back gracefully to stub response validation when not yet implemented
- All 7 tests pass in 0.24s with zero orphaned processes

Tested URL patterns:
- http://127.0.0.1:9999/ (IPv4 loopback)
- http://0.0.0.0/ (IPv4 wildcard)
- http://169.254.169.254/latest/meta-data/ (cloud metadata)
- http://10.0.0.1/internal (RFC 1918 private)
- http://[::1]/ (IPv6 loopback)

Closes bf-3f9q8. Verification: notes/bf-3f9q8.md
2026-07-06 12:09:31 -04:00
jedarden
a22d26f0ab test(pdftract-4fa9): object parser fixture corpus + proptest harness + critical-test suite
Add comprehensive test infrastructure for PDF object parser:

- Curated fixtures under crates/pdftract-core/tests/object_parser/fixtures/:
  * nested_dict.pdf.in - deeply nested dictionary structure
  * mixed_array.pdf.in - array with mixed PDF object types
  * indirect_simple.pdf.in - minimal indirect object
  * indirect_stream.pdf.in - indirect object with stream
  * objstm_basic.pdf.in + objstm_extends.pdf.in - ObjStm fixtures
  * circular_self.pdf.in + circular_three.pdf.in - circular reference detection
  * truncated_dict.pdf.in - malformed dictionary (missing >>)
  * deep_nesting.pdf.in - 300 levels of nested dicts (tests depth limit)

- Proptest properties in object_parser_proptest.rs:
  * prop_parser_never_panics - INV-8: parser is total over input domain
  * prop_resolve_terminates - bounded resolution, no infinite loops
  * prop_dict_order_preserved - INV-3: deterministic dict iteration order
  * prop_cache_consistency - cache hit = cache miss for same input
  * prop_inv8_no_panic - any input → Some/None, never panic

- Golden output tests with BLESS=1 support for updating expected files

Closes pdftract-4fa9. Verification: notes/pdftract-4fa9.md.
2026-06-01 17:30:29 -04:00