Skip to content

feature: add sandbox e2e test#7236

Open
janicduplessis wants to merge 19 commits intodevelopfrom
@janic/sandbox-e2e-test
Open

feature: add sandbox e2e test#7236
janicduplessis wants to merge 19 commits intodevelopfrom
@janic/sandbox-e2e-test

Conversation

@janicduplessis
Copy link
Contributor

@janicduplessis janicduplessis commented Mar 10, 2026

No description provided.

@github-actions
Copy link

Launch in simulator or device for aead192

@github-actions
Copy link

github-actions bot commented Mar 10, 2026

🧪 Flashlight Performance Report (AWS Device Farm)

🔀 Commit: 9c4af76

📎 View Artifacts

Metric Current Δ vs Baseline
Time to Interactive (TTI) 5571 ms ⚪ -25.8 ms (-0.5%)
Average FPS 56.84 ⚪ +0.1 (+0.2%)
Average RAM 391.1 MB ⚪ -0.1 MB (-0.0%)
@janicduplessis janicduplessis changed the title feature: add sandbox security e2e test feature: add sandbox e2e test Mar 10, 2026
@github-actions
Copy link

Launch in simulator or device for 6f7d49e

@janicduplessis janicduplessis force-pushed the @janic/sandbox-e2e-test branch from 0dae5cc to 0229901 Compare March 19, 2026 07:58
@github-actions
Copy link

Launch in simulator or device for dd0710e

@github-actions
Copy link

Launch in simulator or device for c8fb112

@github-actions
Copy link

Launch in simulator or device for 9b16969

@github-actions
Copy link

Launch in simulator or device for 9932e12

@github-actions
Copy link

Launch in simulator or device for 317c99d

@github-actions
Copy link

Launch in simulator or device for 06f1edc

@github-actions
Copy link

Launch in simulator or device for f5cde07

Adds automated Maestro tests that verify the sandbox correctly blocks unauthorized HTTP and WebSocket connections while allowing approved domains. Moves TestDeeplinkHandler to features/e2e/ domain structure.
- Native module test: verifies NativeModules proxy blocks access from non-whitelisted files - WebView initial load test: loads blocked URL directly, asserts onError - WebView JS navigation test: loads allowed page, attempts JS navigation to blocked URL, verifies URL didn't change via postMessage - Simplified Maestro assertions to just check overall pass/fail
…dbox Checks out @janic/sandbox-e2e-test branch of rainbow-scripts (includes webview fork override + SANDBOX_BRANCH support) and sets SANDBOX_BRANCH to @janic/emit-close-on-blocked-ws for react-native-sandbox iOS fixes.
Configures git to use the token for HTTPS GitHub URLs. This allows override_deps.sh (yarn install of private webview fork) and any other HTTPS-based private repo access to authenticate without needing per-repo SSH deploy keys.
Use a single fine-grained PAT to authenticate all private repo access (git clone, yarn install of GitHub deps) via HTTPS git config insteadOf rules. Removes per-repo SSH key setup steps.
Replace SSH deploy keys and git insteadOf with gh CLI credential helper. Uses GH_TOKEN + gh auth setup-git for HTTPS auth, plus insteadOf to rewrite git@github.com: SSH URLs to HTTPS.
gh CLI requires GH_TOKEN on every step. Use git clone with HTTPS URLs instead, which works with the gh auth setup-git credential helper.
gh auth setup-git writes keys with leading spaces which breaks yarn's internal git clone. Strip leading whitespace from ~/.gitconfig after setup.
Root cause found: Yarn 4.2.2 + Git 2.52.0 incompatibility, fixed in rainbow-scripts by using yarn 4.12.0 in override_deps.sh.
@janicduplessis janicduplessis force-pushed the @janic/sandbox-e2e-test branch from fc2334e to 8b4179e Compare March 20, 2026 10:01
@github-actions
Copy link

Launch in simulator or device for 9c4af76

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

1 participant