insert copyright headers for images

test/copyright.test.js

@@ -0,0 +1,28 @@
+import assert from 'node:assert/strict';
+import path from 'node:path';
+import test from 'node:test';
+import { APP_IMAGE_COPYRIGHT_NOTICE, GROUP_SYMBOL_COPYRIGHT_NOTICE, UPLOAD_COPYRIGHT_NOTICE, COPYRIGHT_HEADER_LIMITS, ENVATO_SYMBOL_SOURCE, setAppImageCopyright } from '../src/services/copyright.js';
+
+test('image notices distinguish Envato symbols from other assets and skip non-image files', () => {
+  const headers = new Map();
+  const res = { setHeader: (name, value) => headers.set(name, value) };
+  for (const extension of ['png', 'jpg', 'jpeg', 'webp', 'gif', 'svg', 'ico', 'avif', 'PNG']) {
+    headers.clear();
+    setAppImageCopyright(res, path.join('public', 'assets', `graphic.${extension}`));
+    assert.equal(headers.get('X-Copyright'), APP_IMAGE_COPYRIGHT_NOTICE);
+    assert.equal(headers.get('X-Copyright-Notice'), COPYRIGHT_HEADER_LIMITS);
+    assert.equal(headers.has('X-Copyright-Source'), false);
+  }
+  setAppImageCopyright(res, path.join('public', 'images', 'group-symbols', '🐦.png'));
+  assert.equal(headers.get('X-Copyright'), GROUP_SYMBOL_COPYRIGHT_NOTICE);
+  assert.equal(headers.get('X-Copyright-Notice'), COPYRIGHT_HEADER_LIMITS);
+  assert.equal(headers.get('X-Copyright-Source'), ENVATO_SYMBOL_SOURCE);
+  for (const extension of ['js', 'css', 'html', 'txt', 'mp3']) {
+    headers.clear();
+    setAppImageCopyright(res, path.join('public', 'assets', `file.${extension}`));
+    assert.equal(headers.has('X-Copyright'), false);
+  }
+  for (const value of [APP_IMAGE_COPYRIGHT_NOTICE, GROUP_SYMBOL_COPYRIGHT_NOTICE, UPLOAD_COPYRIGHT_NOTICE, COPYRIGHT_HEADER_LIMITS, ENVATO_SYMBOL_SOURCE]) {
+    assert.match(value, /^[\x20-\x7e]+$/, 'Header values must not contain Unicode or line breaks');
+  }
+});