Hello
', { openPixelUrl: 'https://mail.example/t/o/open-token.gif', createClickUrl(target) { createdTargets.push(target); return 'https://mail.example/t/c/click-token'; } } ); assert.deepEqual(createdTargets, ['https://example.com/reset?token=secret']); assert.match(result.html, /href="https:\/\/mail\.example\/t\/c\/click-token"/); assert.equal((result.html.match(/data-mailhub-open/g) || []).length, 1); assert.match(result.html, /src="https:\/\/mail\.example\/t\/o\/open-token\.gif"/); assert.equal(result.linkCount, 1); assert.equal(result.pixelAdded, true); }); test('skips opt-out and non-http links without duplicating an existing pixel', () => { let calls = 0; const result = instrumentHtml( 'Private' + 'Mail' + 'Relative' + '
',
{
openPixelUrl: 'https://mail.example/t/o/token.gif',
createClickUrl() {
calls += 1;
return 'https://mail.example/t/c/token';
}
}
);
assert.equal(calls, 0);
assert.equal(result.linkCount, 0);
assert.equal(result.pixelAdded, false);
assert.equal((result.html.match(/data-mailhub-open/g) || []).length, 1);
});
test('rewrites encoded HTML MIME parts and preserves attachments', async () => {
const html = 'A';
const attachment = Buffer.from('attachment-bytes').toString('base64');
const raw = [
'From: sender@example.com',
'To: user@example.net',
'Subject: Tracked',
'MIME-Version: 1.0',
'Content-Type: multipart/mixed; boundary="outer"',
'',
'--outer',
'Content-Type: text/html; charset=UTF-8',
'Content-Transfer-Encoding: base64',
'',
Buffer.from(html).toString('base64'),
'--outer',
'Content-Type: application/octet-stream',
'Content-Disposition: attachment; filename="file.bin"',
'Content-Transfer-Encoding: base64',
'',
attachment,
'--outer--',
''
].join('\r\n');
const result = await instrumentRawMime(raw, {
openPixelUrl: 'https://mail.example/t/o/open.gif',
createClickUrl: () => 'https://mail.example/t/c/click'
});
assert.equal(result.tracked, true);
assert.equal(result.linkCount, 1);
assert.match(result.rawMessage, /filename="file\.bin"/);
assert.match(result.rawMessage, new RegExp(attachment));
const encodedHtml = result.rawMessage.match(/Content-Type: text\/html[^]*?\r\n\r\n([A-Za-z0-9+/=\r\n]+?)\r\n--outer/i)?.[1] || '';
const decodedHtml = Buffer.from(encodedHtml.replace(/\s+/g, ''), 'base64').toString('utf8');
assert.match(decodedHtml, /mail\.example\/t\/c\/click/);
assert.match(decodedHtml, /data-mailhub-open/);
});
test('skips signed encrypted and existing-DKIM raw messages', async () => {
const messages = [
'DKIM-Signature: v=1; d=example.com; b=x\r\nContent-Type: text/html\r\n\r\nA\r\n',
'Content-Type: multipart/signed; boundary="s"\r\n\r\n--s--\r\n',
'Content-Type: application/pkcs7-mime\r\n\r\nencrypted\r\n'
];
for (const raw of messages) {
const result = await instrumentRawMime(raw, {
openPixelUrl: 'https://mail.example/t/o/open.gif',
createClickUrl: () => 'https://mail.example/t/c/click'
});
assert.equal(result.tracked, false);
assert.equal(result.rawMessage, raw);
assert.ok(result.skippedReason);
}
});
test('does not rewrite HTML nested inside signed MIME content', async () => {
const raw = [
'From: sender@example.com',
'To: user@example.net',
'MIME-Version: 1.0',
'Content-Type: multipart/mixed; boundary="outer"',
'',
'--outer',
'Content-Type: multipart/signed; boundary="signed"; protocol="application/pgp-signature"',
'',
'--signed',
'Content-Type: text/html; charset=UTF-8',
'',
'Signed',
'--signed',
'Content-Type: application/pgp-signature',
'',
'signature-bytes',
'--signed--',
'--outer--',
''
].join('\r\n');
const result = await instrumentRawMime(raw, {
openPixelUrl: 'https://mail.example/t/o/open.gif',
createClickUrl: () => 'https://mail.example/t/c/click'
});
assert.equal(result.tracked, false);
assert.equal(result.linkCount, 0);
assert.equal(result.pixelAdded, false);
assert.match(result.rawMessage, /https:\/\/example\.com\/signed/);
assert.doesNotMatch(result.rawMessage, /mail\.example\/t\//);
});
test('rewrites non-UTF-8 HTML without corrupting its charset', async () => {
const html = Buffer.from(
'Ol\xE1
A', 'latin1' ); const raw = [ 'From: sender@example.com', 'To: user@example.net', 'MIME-Version: 1.0', 'Content-Type: text/html; charset=iso-8859-1', 'Content-Transfer-Encoding: base64', '', html.toString('base64'), '' ].join('\r\n'); const result = await instrumentRawMime(raw, { openPixelUrl: 'https://mail.example/t/o/open.gif', createClickUrl: () => 'https://mail.example/t/c/click' }); assert.equal(result.tracked, true); assert.match(result.rawMessage, /Content-Type: text\/html; charset=utf-8/i); const encodedHtml = result.rawMessage.split(/\r?\n\r?\n/, 2)[1] || ''; const decodedHtml = Buffer.from(encodedHtml.replace(/\s+/g, ''), 'base64').toString('utf8'); assert.match(decodedHtml, /Ol\u00e1/); assert.match(decodedHtml, /mail\.example\/t\/c\/click/); }); test('removes submission control headers without changing the MIME body', async () => { const raw = [ 'From: sender@example.com', 'X-MailHub-Track: opens,clicks', 'Subject: Hello', 'Content-Type: text/plain; charset=UTF-8', '', 'Body stays intact.', '' ].join('\r\n'); const stripped = await stripRawMimeHeaders(raw, ['x-mailhub-track']); assert.doesNotMatch(stripped, /^X-MailHub-Track:/im); assert.match(stripped, /Body stays intact\.\r\n$/); const signed = `DKIM-Signature: v=1; d=example.com; b=x\r\nX-MailHub-Track: off\r\n\r\nBody\r\n`; assert.equal(await stripRawMimeHeaders(signed, ['x-mailhub-track']), signed); });