Add test/hk_browser_capability_tests.erl

test/hk_browser_capability_tests.erl

@@ -0,0 +1,26 @@
+-module(hk_browser_capability_tests).
+-include_lib("eunit/include/eunit.hrl").
+
+bare_atom_grant_permits_operation_test() ->
+    ?assert(hk_browser_capability:is_granted([read_page, click], read_page)),
+    ?assertNot(hk_browser_capability:is_granted([read_page], click)).
+
+navigate_domain_scoped_grant_test() ->
+    Caps = [{navigate, #{allowed_domains => [<<"example.com">>]}}],
+    ?assert(hk_browser_capability:is_granted(Caps, {navigate, #{url => <<"https://example.com/x">>}})),
+    ?assertNot(hk_browser_capability:is_granted(Caps, {navigate, #{url => <<"https://evil.example/">>}})).
+
+unrestricted_navigate_grant_permits_any_domain_test() ->
+    ?assert(hk_browser_capability:is_granted([navigate], {navigate, #{url => <<"https://anything.example/">>}})).
+
+validate_args_rejects_non_http_scheme_test() ->
+    ?assertMatch({error, _}, hk_browser_capability:validate_args(navigate, #{url => <<"javascript:alert(1)">>})),
+    ?assertMatch({ok, _}, hk_browser_capability:validate_args(navigate, #{url => <<"https://example.com">>})).
+
+validate_args_rejects_oversized_selector_test() ->
+    Huge = binary:copy(<<"a">>, 3000),
+    ?assertMatch({error, _}, hk_browser_capability:validate_args(click, #{selector => Huge})).
+
+validate_args_requires_text_for_type_test() ->
+    ?assertMatch({error, missing_text}, hk_browser_capability:validate_args(type, #{selector => <<"#x">>})),
+    ?assertMatch({ok, _}, hk_browser_capability:validate_args(type, #{selector => <<"#x">>, text => <<"hi">>})).