test: add test of policy about parse error

PR-URL: #26873
Reviewed-By: Ruben Bridgewater <ruben@bridgewater.de>
Reviewed-By: Rich Trott <rtrott@gmail.com>

Author: sasurau4

test/parallel/test-policy-parse-integrity.js

@@ -0,0 +1,86 @@
+'use strict';
+
+constcommon=require('../common');
+if(!common.hasCrypto)common.skip('missing crypto');
+
+consttmpdir=require('../common/tmpdir');
+constassert=require('assert');
+const{ spawnSync }=require('child_process');
+constcrypto=require('crypto');
+constfs=require('fs');
+constpath=require('path');
+const{ pathToFileURL }=require('url');
+
+tmpdir.refresh();
+
+functionhash(algo,body){
+consth=crypto.createHash(algo);
+h.update(body);
+returnh.digest('base64');
+}
+
+constpolicyFilepath=path.join(tmpdir.path,'policy');
+
+constparentFilepath=path.join(tmpdir.path,'parent.js');
+constparentBody="require('./dep.js')";
+
+constdepFilepath=path.join(tmpdir.path,'dep.js');
+constdepURL=pathToFileURL(depFilepath);
+constdepBody='';
+
+fs.writeFileSync(parentFilepath,parentBody);
+fs.writeFileSync(depFilepath,depBody);
+
+consttmpdirURL=pathToFileURL(tmpdir.path);
+if(!tmpdirURL.pathname.endsWith('/')){
+tmpdirURL.pathname+='/';
+}
+
+functiontest({ shouldFail, integrity }){
+constresources={
+[depURL]: {
+body: depBody,
+ integrity
+}
+};
+constmanifest={
+resources: {},
+};
+for(const[url,{ body, integrity }]ofObject.entries(resources)){
+manifest.resources[url]={
+ integrity,
+};
+fs.writeFileSync(newURL(url,tmpdirURL.href),body);
+}
+fs.writeFileSync(policyFilepath,JSON.stringify(manifest,null,2));
+const{ status }=spawnSync(process.execPath,[
+'--experimental-policy',
+policyFilepath,
+depFilepath
+]);
+if(shouldFail){
+assert.notStrictEqual(status,0);
+}else{
+assert.strictEqual(status,0);
+}
+}
+
+test({
+shouldFail: false,
+integrity: `sha256-${hash('sha256',depBody)}`,
+});
+test({
+shouldFail: true,
+integrity: `1sha256-${hash('sha256',depBody)}`,
+});
+test({
+shouldFail: true,
+integrity: 'hoge',
+});
+test({
+shouldFail: true,
+integrity: `sha256-${hash('sha256',depBody)}sha256-${hash(
+'sha256',
+depBody
+)}`,
+});