fix(oauth2): prevent code injection in OAuth2 callback handling#8360
Closed
abhishekp-bruno wants to merge 26 commits into
Closed
fix(oauth2): prevent code injection in OAuth2 callback handling#8360abhishekp-bruno wants to merge 26 commits into
abhishekp-bruno wants to merge 26 commits into
Annotations
11 errors and 1 notice
|
Detect flaky tests
Process completed with exit code 1.
|
|
Run Playwright tests:
tests/shortcuts/request-actions.spec.ts#L265
6) [default] › tests/shortcuts/request-actions.spec.ts:261:11 › Shortcut Keys - BOUND_ACTIONS › REQUESTS › SHORTCUT: Change Orientation (customized Alt+Shift+Y) › customized Alt+Shift+Y change layout orientation
Error: locator.click: Target page, context or browser has been closed
Call log:
- waiting for getByTestId('keybinding-edit-changeLayout')
- locator resolved to <span class="pencil-icon" title="Customize keys" data-testid="keybinding-edit-changeLayout">…</span>
- attempting click action
- waiting for element to be visible, enabled and stable
- element was detached from the DOM, retrying
263 | const row = page.getByTestId('keybinding-row-changeLayout');
264 | await row.hover();
> 265 | await page.getByTestId('keybinding-edit-changeLayout').click();
| ^
266 | await expect(page.getByTestId('keybinding-input-changeLayout')).toBeVisible();
267 |
268 | await page.keyboard.press('Backspace');
at /home/runner/work/bruno/bruno/tests/shortcuts/request-actions.spec.ts:265:64
|
|
Run Playwright tests:
tests/shortcuts/request-actions.spec.ts#L0
6) [default] › tests/shortcuts/request-actions.spec.ts:261:11 › Shortcut Keys - BOUND_ACTIONS › REQUESTS › SHORTCUT: Change Orientation (customized Alt+Shift+Y) › customized Alt+Shift+Y change layout orientation
Test timeout of 30000ms exceeded.
|
|
Run Playwright tests:
tests/utils/page/runner.ts#L62
5) [default] › tests/runner/runner-configuration.spec.ts:23:7 › Runner Configuration Panel › should display config panel with all requests selected by default › Open runner tab for "bruno-testbench"
Error: locator.click: Target page, context or browser has been closed
Call log:
- waiting for getByTestId('collections').locator('.collection-name').filter({ hasText: 'bruno-testbench' }).locator('.collection-actions').locator('.icon')
- locator resolved to <svg width="18" height="18" fill="none" stroke-width="2" viewBox="0 0 24 24" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" xmlns="http://www.w3.org/2000/svg" class="icon icon-tabler icon-tabler-dots">…</svg>
- attempting click action
2 × waiting for element to be visible, enabled and stable
- element is not visible
- retrying click action
- waiting 20ms
2 × waiting for element to be visible, enabled and stable
- element is not visible
- retrying click action
- waiting 100ms
45 × waiting for element to be visible, enabled and stable
- element is not visible
- retrying click action
- waiting 500ms
at tests/utils/page/runner.ts:62
60 | const icon = actionsContainer.locator('.icon');
61 | await icon.waitFor({ state: 'visible', timeout: 5000 });
> 62 | await icon.click();
| ^
63 |
64 | const runMenuItem = page.getByText('Run', { exact: true });
65 | await runMenuItem.waitFor({ state: 'visible' });
at /home/runner/work/bruno/bruno/tests/utils/page/runner.ts:62:16
at openRunnerTab (/home/runner/work/bruno/bruno/tests/utils/page/runner.ts:48:3)
at /home/runner/work/bruno/bruno/tests/runner/runner-configuration.spec.ts:25:5
|
|
Run Playwright tests:
tests/runner/runner-configuration.spec.ts#L0
5) [default] › tests/runner/runner-configuration.spec.ts:23:7 › Runner Configuration Panel › should display config panel with all requests selected by default › Open runner tab for "bruno-testbench"
Test timeout of 30000ms exceeded.
|
|
Run Playwright tests:
tests/utils/page/actions.ts#L73
4) [default] › tests/request/multipart-form/multipart-form-file-chips.spec.ts:148:7 › Multipart Form - Multiple File Upload › uploading multiple files registers one entry per file
Error: locator.click: Target page, context or browser has been closed
Call log:
- waiting for getByRole('button', { name: 'Discard All and Remove' })
- locator resolved to <button type="button">…</button>
- attempting click action
- scrolling into view if needed
- element was detached from the DOM, retrying
at tests/utils/page/actions.ts:73
71 | // intermittently on slower machines. Use force to skip the stability check;
72 | // visibility is already verified above via waitFor.
> 73 | await page.getByRole('button', { name: 'Discard All and Remove' }).click({ force: true });
| ^
74 | } else {
75 | // Regular modal - click the submit button
76 | await page.locator('.bruno-modal-footer .submit').click();
at /home/runner/work/bruno/bruno/tests/utils/page/actions.ts:73:76
at closeAllCollections (/home/runner/work/bruno/bruno/tests/utils/page/actions.ts:46:3)
at /home/runner/work/bruno/bruno/tests/request/multipart-form/multipart-form-file-chips.spec.ts:65:5
|
|
Run Playwright tests:
tests/request/multipart-form/multipart-form-file-chips.spec.ts#L58
4) [default] › tests/request/multipart-form/multipart-form-file-chips.spec.ts:148:7 › Multipart Form - Multiple File Upload › uploading multiple files registers one entry per file
"afterAll" hook timeout of 30000ms exceeded.
56 | });
57 |
> 58 | test.afterAll(async ({ page, electronApp }) => {
| ^
59 | await electronApp.evaluate(({ dialog }) => {
60 | if ((dialog as any).__originalShowOpenDialog) {
61 | dialog.showOpenDialog = (dialog as any).__originalShowOpenDialog;
at /home/runner/work/bruno/bruno/tests/request/multipart-form/multipart-form-file-chips.spec.ts:58:8
|
|
Run Playwright tests:
tests/utils/page/actions.ts#L484
3) [default] › tests/import/postman/import-many-issues-collection.spec.ts:12:7 › Import Postman Collection with many issues (URL too long warning) › should show URL-too-long warning when include failed request data is checked › Import collection from "/home/runner/work/bruno/bruno/tests/import/postman/fixtures/postman-with-many-import-issues.json"
Error: locator.click: Target page, context or browser has been closed
Call log:
- waiting for getByTestId('collections-header-add-menu')
- locator resolved to <button tabindex="-1" aria-expanded="false" data-tabindex="inline" title="Add new collection" data-testid="collections-header-add-menu" class="StyledWrapper-iYvzMB btWNSr action-icon">…</button>
- attempting click action
2 × waiting for element to be visible, enabled and stable
- element is visible, enabled and stable
- scrolling into view if needed
- done scrolling
- <div class="bruno-modal-backdrop"></div> from <div class="StyledWrapper__Wrapper-jjqtyM DwvBf">…</div> subtree intercepts pointer events
- retrying click action
- waiting 20ms
2 × waiting for element to be visible, enabled and stable
- element is visible, enabled and stable
- scrolling into view if needed
- done scrolling
- <div class="bruno-modal-backdrop"></div> from <div class="StyledWrapper__Wrapper-jjqtyM DwvBf">…</div> subtree intercepts pointer events
- retrying click action
- waiting 100ms
58 × waiting for element to be visible, enabled and stable
- element is visible, enabled and stable
- scrolling into view if needed
- done scrolling
- <div class="bruno-modal-backdrop"></div> from <div class="StyledWrapper__Wrapper-jjqtyM DwvBf">…</div> subtree intercepts pointer events
- retrying click action
- waiting 500ms
at tests/utils/page/actions.ts:484
482 | const locators = buildCommonLocators(page);
483 |
> 484 | await page.getByTestId('collections-header-add-menu').click();
| ^
485 | await page.locator('.tippy-box .dropdown-item').filter({ hasText: 'Import collection' }).click();
486 |
487 | // Wait for import modal
at /home/runner/work/bruno/bruno/tests/utils/page/actions.ts:484:59
at importCollection (/home/runner/work/bruno/bruno/tests/utils/page/actions.ts:481:14)
at /home/runner/work/bruno/bruno/tests/import/postman/import-many-issues-collection.spec.ts:17:27
|
|
Run Playwright tests:
tests/import/postman/import-many-issues-collection.spec.ts#L0
3) [default] › tests/import/postman/import-many-issues-collection.spec.ts:12:7 › Import Postman Collection with many issues (URL too long warning) › should show URL-too-long warning when include failed request data is checked › Import collection from "/home/runner/work/bruno/bruno/tests/import/postman/fixtures/postman-with-many-import-issues.json"
Test timeout of 30000ms exceeded.
|
|
Run Playwright tests:
tests/import/insomnia/import-insomnia-v5-environments.spec.ts#L80
2) [default] › tests/import/insomnia/import-insomnia-v5-environments.spec.ts:19:7 › Import Insomnia v5 Collection - Environment Import › Import Insomnia v5 collection with nested environments and verify flattening › Test Base Environment - verify flattened keys
TimeoutError: locator.waitFor: Timeout 15000ms exceeded.
Call log:
- waiting for locator('input[value="config.debug"]') to be visible
78 | // key here guarantees every shallower input is also in DOM by the
79 | // time the per-input asserts below run.
> 80 | await page.locator('input[value="config.debug"]').waitFor({ state: 'visible', timeout: 15000 });
| ^
81 |
82 | // **Assertion 1: Basic Variables (Top-level keys)**
83 | // Verifies that simple key-value pairs from the base environment are imported correctly
at /home/runner/work/bruno/bruno/tests/import/insomnia/import-insomnia-v5-environments.spec.ts:80:57
at /home/runner/work/bruno/bruno/tests/import/insomnia/import-insomnia-v5-environments.spec.ts:67:5
|
|
Run Playwright tests:
tests/import/insomnia/import-insomnia-v4-environments.spec.ts#L83
1) [default] › tests/import/insomnia/import-insomnia-v4-environments.spec.ts:19:7 › Import Insomnia v4 Collection - Environment Import › Import Insomnia v4 collection with nested environments and verify flattening › Test Base Environment - verify flattened keys
TimeoutError: locator.waitFor: Timeout 15000ms exceeded.
Call log:
- waiting for locator('input[value="user.roles[1]"]') to be visible
81 | // Waiting on the deepest asserted key here guarantees every shallower
82 | // input is also in DOM by the time the per-input asserts below run.
> 83 | await page.locator('input[value="user.roles[1]"]').waitFor({ state: 'visible', timeout: 15000 });
| ^
84 |
85 | // **Assertion 1: Basic Variables (Top-level keys)**
86 | // Verifies that simple key-value pairs from the base environment are imported correctly
at /home/runner/work/bruno/bruno/tests/import/insomnia/import-insomnia-v4-environments.spec.ts:83:58
at /home/runner/work/bruno/bruno/tests/import/insomnia/import-insomnia-v4-environments.spec.ts:70:5
|
|
Run Playwright tests
6 flaky
[default] › tests/import/insomnia/import-insomnia-v4-environments.spec.ts:19:7 › Import Insomnia v4 Collection - Environment Import › Import Insomnia v4 collection with nested environments and verify flattening
[default] › tests/import/insomnia/import-insomnia-v5-environments.spec.ts:19:7 › Import Insomnia v5 Collection - Environment Import › Import Insomnia v5 collection with nested environments and verify flattening
[default] › tests/import/postman/import-many-issues-collection.spec.ts:12:7 › Import Postman Collection with many issues (URL too long warning) › should show URL-too-long warning when include failed request data is checked
[default] › tests/request/multipart-form/multipart-form-file-chips.spec.ts:148:7 › Multipart Form - Multiple File Upload › uploading multiple files registers one entry per file
[default] › tests/runner/runner-configuration.spec.ts:23:7 › Runner Configuration Panel › should display config panel with all requests selected by default
[default] › tests/shortcuts/request-actions.spec.ts:261:11 › Shortcut Keys - BOUND_ACTIONS › REQUESTS › SHORTCUT: Change Orientation (customized Alt+Shift+Y) › customized Alt+Shift+Y change layout orientation
9 skipped
872 passed (56.0m)
|
background
wait
wait-all
cancel
parallel
Loading