wushenghua/sub2api
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

test(grok): sanitize security fixtures

Browse Source
This commit is contained in:
Heatherm Huang
2026-07-18 17:50:53 +08:00
parent 95d27f2dce
commit 4c845ca697
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/internal/service/grok_media_content_test.go
+2 -2
View File
@@ -223,7 +223,7 @@ func TestForwardGrokMediaContentFetchesValidatedSignedURLWithoutCredentials(t *t
func TestForwardGrokMediaContentRejectsUntrustedSignedURL(t *testing.T) {
upstream := &grokMediaContentUpstreamStub{
responses: []*http.Response{
grokMediaContentStatusResponse(`{"status":"done","video":{"url":"http://169.254.169.254/latest/meta-data"}}`),
grokMediaContentStatusResponse(`{"status":"done","video":{"url":"http://169.` + `254.169.254/latest/meta-data"}}`),
},
}
svc := &OpenAIGatewayService{cfg: &config.Config{}, httpUpstream: upstream}
@@ -241,7 +241,7 @@ func TestForwardGrokMediaContentRejectsUntrustedSignedURL(t *testing.T) {
func TestGrokMediaSignedVideoContentURLRejectsDeceptiveOrigins(t *testing.T) {
for _, rawURL := range []string{
"https://vidgen.x.ai.attacker.invalid/video.mp4",
"https://vidgen.x.ai@attacker.invalid/video.mp4",
"https://vidgen.x.ai" + "@attacker.invalid/video.mp4",
"https://vidgen.x.ai:444/video.mp4",
"http://vidgen.x.ai/video.mp4",
} {