fleet/frontend/utilities/scripts_encoding.tests.ts

import { encodeScriptBase64, SCRIPTS_ENCODED_HEADER } from "./scripts_encoding";

describe("scripts_encoding", () => {
  describe("SCRIPTS_ENCODED_HEADER", () => {
    it("should have the expected value", () => {
      expect(SCRIPTS_ENCODED_HEADER).toBe("X-Fleet-Scripts-Encoded");
    });
  });

  describe("encodeScriptBase64", () => {
    it("should return undefined for undefined input", () => {
      expect(encodeScriptBase64(undefined)).toBeUndefined();
    });

    it("should return empty string for empty input", () => {
      expect(encodeScriptBase64("")).toBe("");
    });

    it("should encode simple strings correctly", () => {
      const encoded = encodeScriptBase64("Hello World");
      // "Hello World" in base64 is "SGVsbG8gV29ybGQ="
      expect(encoded).toBe("SGVsbG8gV29ybGQ=");
    });

    it("should encode PowerShell patterns with dollar brace", () => {
      // eslint-disable-next-line no-template-curly-in-string
      const encoded = encodeScriptBase64("${env:TEMP}");
      // "${env:TEMP}" in base64 is "JHtlbnY6VEVNUH0="
      expect(encoded).toBe("JHtlbnY6VEVNUH0=");
    });

    it("should encode PowerShell install script patterns", () => {
      const script = "$installProcess = Start-Process msiexec.exe";
      const encoded = encodeScriptBase64(script);
      // Verify it's valid base64 and decodes back correctly
      expect(atob(encoded!)).toBe(script);
    });

    it("should encode multiline PowerShell scripts", () => {
      const script =
        // eslint-disable-next-line no-template-curly-in-string
        '$logFile = "${env:TEMP}/fleet-install.log"\nStart-Process msiexec.exe';
      const encoded = encodeScriptBase64(script);
      // Verify it's valid base64 and decodes back correctly
      expect(atob(encoded!)).toBe(script);
    });

    it("should handle unicode characters correctly", () => {
      const script = 'echo "Hello World"';
      const encoded = encodeScriptBase64(script);
      // Decode and verify using TextDecoder for proper UTF-8 handling
      const decoded = atob(encoded!);
      expect(decoded).toBe(script);
    });

    it("should produce valid base64 that Go can decode", () => {
      // Test the specific WAF-triggering patterns
      // eslint-disable-next-line no-template-curly-in-string
      const envTemp = "${env:TEMP}";
      // eslint-disable-next-line no-template-curly-in-string
      const envInstallerPath = "${env:INSTALLER_PATH}";
      // eslint-disable-next-line no-template-curly-in-string
      const logFileScript = '$logFile = "${env:TEMP}/fleet-install.log"';
      const testCases = [
        envTemp,
        envInstallerPath,
        "Start-Process msiexec.exe",
        logFileScript,
      ];

      testCases.forEach((script) => {
        const encoded = encodeScriptBase64(script);
        expect(encoded).toBeDefined();
        // Verify it's valid base64 (won't throw)
        expect(() => atob(encoded!)).not.toThrow();
        // Verify it decodes back to original
        expect(atob(encoded!)).toBe(script);
      });
    });
  });
});