Network Storage - Game Backend
Released
Player-hosted, P2P or dedicated. Server-validated saves, rewards and combat, with game values shared by game and server.
UnitTests/SyncToolSecretTransportTests.cs
Unit test class for SyncToolConfig. Verifies that the IsSecretSafeBaseUrl method correctly validates and restricts secret transport to secure or local loopback addresses.
🌐 api.sboxcool.com
using Sandbox;
[TestClass]
public class SyncToolSecretTransportTests
{
[TestMethod]
public void SecretIsSentToHttpsAndLoopbackOnly()
{
Assert.IsTrue( SyncToolConfig.IsSecretSafeBaseUrl( "https://api.sboxcool.com" ) );
Assert.IsTrue( SyncToolConfig.IsSecretSafeBaseUrl( "HTTPS://api.sboxcool.com" ) );
Assert.IsTrue( SyncToolConfig.IsSecretSafeBaseUrl( "http://localhost:8080" ) );
Assert.IsTrue( SyncToolConfig.IsSecretSafeBaseUrl( "http://127.0.0.1:5000" ) );
Assert.IsTrue( SyncToolConfig.IsSecretSafeBaseUrl( "http://[::1]:5000" ) );
}
[TestMethod]
public void SecretIsRefusedForPlainHttpNonLoopbackAndMalformedUrls()
{
Assert.IsFalse( SyncToolConfig.IsSecretSafeBaseUrl( "http://api.sboxcool.com" ) );
Assert.IsFalse( SyncToolConfig.IsSecretSafeBaseUrl( "http://192.168.1.10:8080" ) );
Assert.IsFalse( SyncToolConfig.IsSecretSafeBaseUrl( "ftp://api.sboxcool.com" ) );
Assert.IsFalse( SyncToolConfig.IsSecretSafeBaseUrl( "api.sboxcool.com" ) );
Assert.IsFalse( SyncToolConfig.IsSecretSafeBaseUrl( "" ) );
Assert.IsFalse( SyncToolConfig.IsSecretSafeBaseUrl( null ) );
}
[TestMethod]
public void SecretIsRefusedForNonHttpSchemesEvenOnLoopbackHosts()
{
Assert.IsFalse( SyncToolConfig.IsSecretSafeBaseUrl( "file:///tmp" ) );
Assert.IsFalse( SyncToolConfig.IsSecretSafeBaseUrl( "file://localhost/tmp" ) );
Assert.IsFalse( SyncToolConfig.IsSecretSafeBaseUrl( "ftp://localhost" ) );
Assert.IsFalse( SyncToolConfig.IsSecretSafeBaseUrl( "ftp://localhost:21" ) );
Assert.IsFalse( SyncToolConfig.IsSecretSafeBaseUrl( "ws://127.0.0.1:8080" ) );
}
}