package captcha_test import ( "testing" foxhound "github.com/sadewadee/foxhound" "github.com/sadewadee/foxhound/captcha" ) func resp(body string) *foxhound.Response { return &foxhound.Response{ StatusCode: 200, Body: []byte(body), URL: "https://example.com/page", } } func TestDetectNone(t *testing.T) { r := resp("

Hello World

") got := captcha.Detect(r) if got.Type != captcha.CaptchaNone { t.Errorf("expected CaptchaNone, got %q", got.Type) } } func TestDetectCloudflareTurnstileByScript(t *testing.T) { body := `
` got := captcha.Detect(resp(body)) if got.Type != captcha.CaptchaCloudflare { t.Errorf("expected CaptchaCloudflare, got %q", got.Type) } } func TestDetectCloudflareTurnstileByCfClass(t *testing.T) { body := `
` got := captcha.Detect(resp(body)) if got.Type != captcha.CaptchaCloudflare { t.Errorf("expected CaptchaCloudflare, got %q", got.Type) } } func TestDetectCloudflareSiteKeyExtraction(t *testing.T) { body := `
` got := captcha.Detect(resp(body)) if got.SiteKey != "0x4AAAAAAAAbcDEFghij" { t.Errorf("expected sitekey %q, got %q", "0x4AAAAAAAAbcDEFghij", got.SiteKey) } } func TestDetectRecaptchaByGoogleScript(t *testing.T) { body := `
` got := captcha.Detect(resp(body)) if got.Type != captcha.CaptchaRecaptcha { t.Errorf("expected CaptchaRecaptcha, got %q", got.Type) } } func TestDetectRecaptchaBygRecaptchaClass(t *testing.T) { body := `
` got := captcha.Detect(resp(body)) if got.Type != captcha.CaptchaRecaptcha { t.Errorf("expected CaptchaRecaptcha, got %q", got.Type) } } func TestDetectRecaptchaByGrecaptchaJS(t *testing.T) { body := `` got := captcha.Detect(resp(body)) if got.Type != captcha.CaptchaRecaptcha { t.Errorf("expected CaptchaRecaptcha, got %q", got.Type) } } func TestDetectRecaptchaSiteKeyExtraction(t *testing.T) { body := `
` got := captcha.Detect(resp(body)) if got.SiteKey != "6LcExtractMeXXX" { t.Errorf("expected sitekey %q, got %q", "6LcExtractMeXXX", got.SiteKey) } } func TestDetectHCaptchaByScript(t *testing.T) { body := `
` got := captcha.Detect(resp(body)) if got.Type != captcha.CaptchaHCaptcha { t.Errorf("expected CaptchaHCaptcha, got %q", got.Type) } } func TestDetectHCaptchaByClass(t *testing.T) { body := `
` got := captcha.Detect(resp(body)) if got.Type != captcha.CaptchaHCaptcha { t.Errorf("expected CaptchaHCaptcha, got %q", got.Type) } } func TestDetectHCaptchaSiteKeyExtraction(t *testing.T) { body := `
` got := captcha.Detect(resp(body)) if got.SiteKey != "hcap-sitekey-abc123" { t.Errorf("expected sitekey %q, got %q", "hcap-sitekey-abc123", got.SiteKey) } } func TestDetectGeeTestByScript(t *testing.T) { body := ` initGeetest({gt: 'abc123', challenge: 'xyz'});` got := captcha.Detect(resp(body)) if got.Type != captcha.CaptchaGeeTest { t.Errorf("expected CaptchaGeeTest, got %q", got.Type) } } func TestDetectGeeTestByGtCaptchaElement(t *testing.T) { body := `
` got := captcha.Detect(resp(body)) if got.Type != captcha.CaptchaGeeTest { t.Errorf("expected CaptchaGeeTest, got %q", got.Type) } } func TestDetectPageURLPreserved(t *testing.T) { r := &foxhound.Response{ StatusCode: 403, Body: []byte(`
`), URL: "https://target.example.com/protected", } got := captcha.Detect(r) if got.PageURL != "https://target.example.com/protected" { t.Errorf("expected PageURL %q, got %q", "https://target.example.com/protected", got.PageURL) } } func TestDetectEmptyBodyReturnsNone(t *testing.T) { r := &foxhound.Response{Body: []byte{}, URL: "https://example.com"} got := captcha.Detect(r) if got.Type != captcha.CaptchaNone { t.Errorf("expected CaptchaNone for empty body, got %q", got.Type) } } func TestDetectNilBodyReturnsNone(t *testing.T) { r := &foxhound.Response{Body: nil, URL: "https://example.com"} got := captcha.Detect(r) if got.Type != captcha.CaptchaNone { t.Errorf("expected CaptchaNone for nil body, got %q", got.Type) } } // --- PerimeterX detection tests --- func TestDetectPerimeterX_PxCaptchaElement(t *testing.T) { // Minimal HTML matching the px-captcha element signature used on Walmart. body := `
` got := captcha.Detect(resp(body)) if got.Type != captcha.CaptchaPerimeterX { t.Errorf("expected CaptchaPerimeterX, got %q", got.Type) } } func TestDetectPerimeterX_PressAndHoldText(t *testing.T) { // Some PX variants use "press and hold" instruction text without the // px-captcha element ID (A/B test variants observed in production). body := `

Press and hold the button until you confirm you are human

` got := captcha.Detect(resp(body)) if got.Type != captcha.CaptchaPerimeterX { t.Errorf("expected CaptchaPerimeterX for press-and-hold text, got %q", got.Type) } } func TestDetectPerimeterX_NegativeCase(t *testing.T) { // A normal page that happens to contain "press" but not the full pattern. body := `

Press enter to continue.

` got := captcha.Detect(resp(body)) if got.Type == captcha.CaptchaPerimeterX { t.Errorf("false positive: expected no PerimeterX, got CaptchaPerimeterX") } }