0.3.15-pre.012

crates/ksp-app-raw-transaction-ingest-desk/unit_tests/frontend_logging.rs

@@ -1,5 +1,5 @@
 // file: crates/ksp-app-raw-transaction-ingest-desk/unit_tests/frontend_logging.rs
-// version: 1
+// version: 2
 
 #[test]
 fn frontend_log_levels_are_explicit_and_case_insensitive() {
@@ -38,3 +38,26 @@ fn arbitrary_frontend_log_target_is_rejected() {
     };
     assert_eq!(error.code(), crate::ERROR_CODE_FRONTEND_LOG_TARGET_INVALID);
 }
+
+#[test]
+fn pre_012_frontend_log_ipc_rejects_unknown_fields_and_unbounded_or_control_messages() {
+    let unknown = serde_json::from_value::<crate::FrontendLogPayloadDto>(serde_json::json!({
+        "level": "info",
+        "targetId": "main",
+        "message": "safe",
+        "endpointUrl": "https://forbidden.invalid"
+    }));
+    assert!(unknown.is_err());
+    let oversized = crate::FrontendLogPayloadDto {
+        level: "info".to_owned(),
+        target_id: "main".to_owned(),
+        message: "x".repeat(super::FRONTEND_LOG_MESSAGE_MAX_BYTES + 1),
+    };
+    let result = super::validate_payload_shape(&oversized);
+    assert!(result.is_err());
+    if let std::result::Result::Err(error) = result {
+        assert_eq!(error.code(), crate::ERROR_CODE_FRONTEND_LOG_PAYLOAD_INVALID);
+    }
+    let nul = crate::FrontendLogPayloadDto { level: "info".to_owned(), target_id: "main".to_owned(), message: "safe\0hostile".to_owned() };
+    assert!(super::validate_payload_shape(&nul).is_err());
+}