harn-lint 0.10.78

Linter for the Harn programming language
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61

//! Capability-attenuation boundaries.

use super::*;

const ATTENUATION_RULE: &str = "capability-attenuation";

/// The falsifier: an ordinary helper with the same body must still be
/// reported. Without this the `@host_entry` assertion below would also pass
/// against a lint that had simply stopped firing.
#[test]
fn undeclared_helper_using_two_capabilities_is_reported() {
    let diagnostics = lint_source(
        "pub fn dispatch(harness: Harness, args: dict) -> dict {\n\
         \x20 const rows = harness.postgres.query(args.url, \"select 1\")\n\
         \x20 harness.net.post(args.sink, rows)\n\
         \x20 return {status: \"ok\"}\n\
         }\n",
    );
    assert!(
        has_rule(&diagnostics, ATTENUATION_RULE),
        "expected an attenuation diagnostic: {diagnostics:?}"
    );
}

#[test]
fn host_entry_suppresses_the_attenuation_diagnostic() {
    let diagnostics = lint_source(
        "@host_entry\n\
         pub fn dispatch(harness: Harness, args: dict) -> dict {\n\
         \x20 const rows = harness.postgres.query(args.url, \"select 1\")\n\
         \x20 harness.net.post(args.sink, rows)\n\
         \x20 return {status: \"ok\"}\n\
         }\n",
    );
    assert!(
        !has_rule(&diagnostics, ATTENUATION_RULE),
        "a host-entered signature is not ours to narrow: {diagnostics:?}"
    );
}

/// The attribute declares a boundary for the *attributed* function only. A
/// module-wide suppression would silently freeze every helper beside it.
#[test]
fn host_entry_does_not_suppress_a_sibling_helper() {
    let diagnostics = lint_source(
        "@host_entry\n\
         pub fn dispatch(harness: Harness, args: dict) -> dict {\n\
         \x20 const rows = harness.postgres.query(args.url, \"select 1\")\n\
         \x20 harness.net.post(args.sink, rows)\n\
         \x20 return {status: \"ok\"}\n\
         }\n\n\
         fn summarize(harness: Harness, url: string) -> dict {\n\
         \x20 return harness.postgres.query(url, \"select 2\")\n\
         }\n",
    );
    assert_eq!(
        count_rule(&diagnostics, ATTENUATION_RULE),
        1,
        "only the sibling helper should be reported: {diagnostics:?}"
    );
}