wire-desktop
wire-desktop copied to clipboard
feat: Add e2e security test suite for context isolation validation
Summary
End-to-end security testing framework using Playwright to validate context isolation and sandbox configurations, helping prevent certain classes of vulnerabilities in the Wire desktop application.
Changes
Test Coverage
- Context Isolation: Validates that renderer processes cannot access Node.js APIs
- Sandbox Validation: Ensures proper sandbox configuration
- Exposure Detection: Tests for potential attack vectors
- Regression Testing: Verifies core app functionality remains intact
Testing
The test suite can be run with:
cd test/e2e-security
yarn test
Notes
- Tests are designed to run in CI/CD pipeline for continuous security validation
- Framework is extensible for additional security test scenarios
- Test artifacts (reports, screenshots) are excluded from version control
Quality Gate passed
Issues
0 New issues
0 Accepted issues
Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code