Link to source

internal/server/server_test.go

@@ -1146,6 +1146,49 @@ func TestNoFaviconMeansNoLink(t *testing.T) {
 	}
 }
 
+// --- the footer ------------------------------------------------------------
+
+// The footer names where the source lives, and an instance that would rather
+// not say so can drop it. A fork gets to point at its own.
+func TestSourceLinkIsOptional(t *testing.T) {
+	shown := newHarness(t, nil)
+	resp := shown.get(t, "/", "")
+	page, _ := io.ReadAll(resp.Body)
+	resp.Body.Close()
+	if !strings.Contains(string(page), `<footer><a href="https://git.uncensored.hu/thayol/uncensored-send">Source</a>`) {
+		t.Error("the default build does not link its source")
+	}
+
+	forked := newHarness(t, func(c *config.Config) { c.SourceURL = "https://example.org/me/fork" })
+	resp = forked.get(t, "/login", "")
+	page, _ = io.ReadAll(resp.Body)
+	resp.Body.Close()
+	if !strings.Contains(string(page), `href="https://example.org/me/fork"`) {
+		t.Error("a fork's own source URL is not used")
+	}
+
+	quiet := newHarness(t, func(c *config.Config) { c.SourceURL = "" })
+	for _, path := range []string{"/", "/login", "/files"} {
+		resp := quiet.get(t, path, "")
+		page, _ := io.ReadAll(resp.Body)
+		resp.Body.Close()
+		if strings.Contains(string(page), "<footer>") {
+			t.Errorf("GET %s still carries a footer with the source link switched off", path)
+		}
+	}
+}
+
+// The footer is the one link that leaves this origin, so the header that keeps
+// it from naming this instance to the far end has to stay put.
+func TestOutboundRequestsCarryNoReferrer(t *testing.T) {
+	h := newHarness(t, nil)
+	resp := h.get(t, "/", "")
+	resp.Body.Close()
+	if got := resp.Header.Get("Referrer-Policy"); got != "no-referrer" {
+		t.Errorf("Referrer-Policy = %q, want no-referrer", got)
+	}
+}
+
 // --- content security policy ---------------------------------------------
 
 // The page's own behaviour and its CSP have to agree, and nothing in a Go test