(() => {
+ /* Deliberately pending fixture. */
+ });
+ });
+ await page.locator("#compare-profile").setInputFiles({
+ name: "replacement.json",
+ mimeType: "application/json",
+ buffer: Buffer.from(JSON.stringify(earlier))
+ });
+ await expect(page.locator("#profile-message")).toContainText("Reading the earlier evaluation");
+ await expect(page.locator("#profile-comparison")).toBeHidden();
+ const downloading = page.waitForEvent("download");
+ await page.locator("#export-engineering-report").click();
+ const path = await (await downloading).path();
+ if (!path) throw new Error("Missing local report download");
+ expect(await readFile(path, "utf8")).not.toContain("Earlier snapshot");
+});
+
+test("bounded export and Blob failures reach the live status and recover without a download @workflow", async ({
+ page
+}) => {
+ await page.goto("/planner/");
+ await page.getByRole("button", { name: "Load example" }).click();
+ await page.getByRole("button", { name: "Check support" }).click();
+ const downloads: string[] = [];
+ page.on("download", (download) => downloads.push(download.suggestedFilename()));
+ await page.evaluate(() => {
+ const descriptor = Object.getOwnPropertyDescriptor(TextEncoder.prototype, "encode");
+ if (!descriptor) throw new Error("Missing native encoder");
+ TextEncoder.prototype.encode = function () {
+ Object.defineProperty(TextEncoder.prototype, "encode", descriptor);
+ return new Uint8Array(512 * 1024 + 1);
+ };
+ });
+ await page.locator("#export-profile").click();
+ await expect(page.locator("#profile-message")).toHaveAttribute("role", "status");
+ await expect(page.locator("#profile-message")).toContainText("exceeds the 524288-byte limit");
+ expect(downloads).toEqual([]);
+ await page.evaluate(() => {
+ const create = URL.createObjectURL.bind(URL);
+ URL.createObjectURL = () => {
+ URL.createObjectURL = create;
+ throw new Error("Synthetic Blob creation failure");
+ };
+ });
+ await page.locator("#export-profile").click();
+ await expect(page.locator("#profile-message")).toContainText("Synthetic Blob creation failure");
+ expect(downloads).toEqual([]);
+ const downloading = page.waitForEvent("download");
+ await page.locator("#export-profile").click();
+ expect((await downloading).suggestedFilename()).toBe("controlcurrent-profile.json");
+ await expect(page.locator("#profile-message")).toContainText("generated locally");
+});
+
+test("file-drop input stays local and never executes supplied markup @workflow", async ({
+ page
+}) => {
+ const external: string[] = [];
+ await page.route("**/*", async (route) => {
+ if (new URL(route.request().url()).hostname !== "127.0.0.1") {
+ external.push(route.request().url());
+ await route.abort();
+ } else await route.continue();
+ });
+ await page.goto("/assess/");
+ await page.locator(".advanced-assessment > summary").click();
+ await page.getByRole("button", { name: "Load redacted example" }).last().click();
+ const example: unknown = JSON.parse(await page.locator("#bundle-block").inputValue());
+ if (!example || typeof example !== "object") throw new Error("Missing fixture");
+ const fixture = {
+ ...example,
+ htmlDocuments: [
+ {
+ schemaVersion: 1,
+ name: "Synthetic markup",
+ surfaceId: "sign-in",
+ html: '`,
+ ...(properties ? [properties] : []),
...cases,
" ",
""
@@ -172,6 +183,11 @@ export function renderPolicyDriftMarkdown(input: unknown): string {
`- Review: ${String(comparison.summary.review)}`,
`- Information: ${String(comparison.summary.information)}`,
`- Expiring exceptions: ${String(comparison.summary.expiringExceptions)}`,
+ ...(comparison.summary.truncated
+ ? [
+ `- Displayed events: ${String(comparison.summary.emittedEvents)} of ${String(comparison.summary.totalEvents)}; full totals determine the gate.`
+ ]
+ : []),
"",
...(rows.length
? ["| Classification | Change | Summary |", "| --- | --- | --- |", ...rows]
@@ -190,11 +206,26 @@ export function renderPolicyDriftJunit(input: unknown): string {
item.summary
)
);
+ const visibleFailures = comparison.events.filter((item) => item.severity === "regression").length;
+ const visibleReview = comparison.events.filter((item) => item.severity === "review").length;
+ const hiddenFailures = comparison.summary.regressions - visibleFailures;
+ const hiddenReview = comparison.summary.review - visibleReview;
+ const omitted = comparison.summary.truncated === true;
+ if (omitted)
+ cases.push(
+ junitCase(
+ "Omitted bounded events",
+ "browser policy",
+ hiddenFailures > 0 ? "fail" : hiddenReview > 0 ? "review" : "pass",
+ `${String(hiddenFailures)} adverse and ${String(hiddenReview)} review events were omitted; full totals still determine the gate.`
+ )
+ );
return junitSuite(
`${comparison.beforeProfileName} to ${comparison.afterProfileName}`,
cases,
- comparison.summary.regressions,
- comparison.summary.review
+ visibleFailures + (omitted && hiddenFailures > 0 ? 1 : 0),
+ visibleReview + (omitted && hiddenFailures <= 0 && hiddenReview > 0 ? 1 : 0),
+ `${Object.entries(properties)
+ .map(([name, value]) => ` `
);
}
diff --git a/src/collector.ts b/src/collector.ts
index ac44bb6..d67b463 100644
--- a/src/collector.ts
+++ b/src/collector.ts
@@ -10,6 +10,12 @@ export const MAX_COLLECTOR_MANIFEST_BYTES = 64 * 1_024;
export const MAX_COLLECTOR_BODY_BYTES = 128 * 1_024;
export const MAX_COLLECTOR_REDIRECTS = 5;
export const COLLECTOR_TIMEOUT_MS = 10_000;
+export const MAX_COLLECTOR_RESPONSES = 16;
+export const MAX_COLLECTOR_TOTAL_HTML_BYTES = 512 * 1_024;
+
+function labelledId(id: string, suffix: string): string {
+ return `${id.slice(0, 80 - suffix.length)}${suffix}`;
+}
const opaqueIdSchema = z.string().regex(/^[a-z0-9][a-z0-9._-]{0,79}$/u);
const pathSchema = z
@@ -100,7 +106,7 @@ export const collectorManifestSchema = z
.optional(),
producerId: opaqueIdSchema,
completeness: z.enum(["complete", "unknown"]),
- surfaces: z.array(collectorSurfaceSchema).min(1).max(32)
+ surfaces: z.array(collectorSurfaceSchema).min(1).max(MAX_COLLECTOR_RESPONSES)
})
.strict()
.superRefine((manifest, context) => {
@@ -154,29 +160,35 @@ export async function collectEvidenceBundle(
const startedAt = clock().toISOString();
const responses: EvidenceBundleInput["responses"] = [];
const htmlDocuments: EvidenceBundleInput["htmlDocuments"] = [];
+ let htmlBytes = 0;
- for (const surface of manifest.surfaces) {
+ for (const [index, surface] of manifest.surfaces.entries()) {
+ // Reserve a response slot for each remaining surface before permitting redirects.
+ const slots =
+ MAX_COLLECTOR_RESPONSES - responses.length - (manifest.surfaces.length - index - 1);
const hops = await transport.collect({
baseOrigin: manifest.baseOrigin,
path: surface.path,
- maximumBodyBytes: MAX_COLLECTOR_BODY_BYTES,
- maximumRedirects: MAX_COLLECTOR_REDIRECTS,
+ maximumBodyBytes: surface.requiredEvidence.includes("html")
+ ? Math.min(MAX_COLLECTOR_BODY_BYTES, MAX_COLLECTOR_TOTAL_HTML_BYTES - htmlBytes)
+ : MAX_COLLECTOR_BODY_BYTES,
+ maximumRedirects: Math.min(MAX_COLLECTOR_REDIRECTS, slots - 1),
timeoutMs: COLLECTOR_TIMEOUT_MS
});
- if (hops.length === 0 || hops.length > MAX_COLLECTOR_REDIRECTS + 1) {
+ if (hops.length === 0 || hops.length > Math.min(MAX_COLLECTOR_REDIRECTS + 1, slots)) {
throw new Error(`Collector returned an invalid hop count for ${surface.id}.`);
}
const redirectChainId = hops.some((hop) => hop.outcome === "redirect")
- ? `${surface.id}-redirect`
+ ? labelledId(surface.id, "-redirect")
: undefined;
for (const [sequence, hop] of hops.entries()) {
responses.push({
schemaVersion: 2,
- name: `${surface.id} response ${String(sequence + 1)}`,
+ name: labelledId(surface.id, ` response ${String(sequence + 1)}`),
surfaceId: surface.id,
context: {
schemaVersion: 1,
- variantId: `${surface.id}-${surface.authentication}`,
+ variantId: labelledId(surface.id, `-${surface.authentication}`),
sequence,
outcome: hop.outcome,
status: hop.status,
@@ -195,9 +207,16 @@ export async function collectEvidenceBundle(
hop.body !== undefined &&
surface.requiredEvidence.includes("html")
) {
+ htmlBytes += new TextEncoder().encode(hop.body).byteLength;
+ if (
+ htmlBytes > MAX_COLLECTOR_TOTAL_HTML_BYTES ||
+ new TextEncoder().encode(hop.body).byteLength > MAX_COLLECTOR_BODY_BYTES
+ ) {
+ throw new Error("Collector HTML budget exhausted; no complete bundle was produced.");
+ }
htmlDocuments.push({
schemaVersion: 1,
- name: `${surface.id} document`,
+ name: labelledId(surface.id, " document"),
surfaceId: surface.id,
html: hop.body
});
@@ -228,7 +247,7 @@ export async function collectEvidenceBundle(
},
scopeInventory: {
schemaVersion: 1,
- name: `${manifest.name} collector scope`,
+ name: labelledId(manifest.name, " collector scope"),
kind: "authorised_crawl",
generatedAt: startedAt,
completeness: manifest.completeness,
diff --git a/src/components/ControlCard.astro b/src/components/ControlCard.astro
index 52578b5..0561ae1 100644
--- a/src/components/ControlCard.astro
+++ b/src/components/ControlCard.astro
@@ -42,11 +42,9 @@ const searchText = [
{control.category}
- {
- control.mappingState === "active"
- ? `${control.bcdPaths.length} browser data record${control.bcdPaths.length === 1 ? "" : "s"}`
- : "Browser data unavailable"
- }
+ {control.mappingState === "active"
+ ? `${control.bcdPaths.length} browser data record${control.bcdPaths.length === 1 ? "" : "s"}`
+ : "Browser data unavailable"}
@@ -57,13 +55,11 @@ const searchText = [
{control.summary}
- {
- evaluations.map((evaluation) => (
-
- {browserNames[evaluation.browser]}
-
- ))
- }
+ {evaluations.map((evaluation) => (
+
+ {browserNames[evaluation.browser]}
+
+ ))}
diff --git a/src/components/EvidenceBundleInspector.astro b/src/components/EvidenceBundleInspector.astro
index 4a0cdcd..ecdf5a5 100644
--- a/src/components/EvidenceBundleInspector.astro
+++ b/src/components/EvidenceBundleInspector.astro
@@ -47,12 +47,18 @@ import { selectedSnapshot } from "../data";
the file.
- Review evidence file
- Load redacted example
+
+ Review evidence file
+
+
+ Load redacted example
+
Export privacy-reduced report
- Clear
+
+ Clear
+
@@ -88,7 +94,9 @@ import { selectedSnapshot } from "../data";
Earlier privacy-reduced report JSON
@@ -28,9 +28,15 @@ X-Content-Type-Options: nosniff"
If redirects produced several blocks, only the final response is checked.
- Review headers
-
-
+
+ Review headers
+
+
+
diff --git a/src/components/Layout.astro b/src/components/Layout.astro
index f42ecc8..e3b98d3 100644
--- a/src/components/Layout.astro
+++ b/src/components/Layout.astro
@@ -72,7 +72,9 @@ const pathWithBase = (path: string) => `${base}${path}`;
its own browser tab before entering any redacted evidence.
- Skip to content
+
+ Skip to content
+