invisible_playwright/.github/workflows
feder-cr 8bf72da40c test(webrtc): realness sentinels + e2e behind a fake TCP-only SOCKS proxy
Unit sentinels (run in CI) assert the rules a real WebRTC profile must meet:
host candidate is mDNS .local (never a raw LAN IP), the synthetic srflx carries
the egress IP with a genuine nICEr priority (rejecting the old local_pref
0xFFFF) and a foundation distinct from the host one, and CreepJS's resolver
returns the egress (and reads a host-only SDP as blocked).

e2e tests launch the binary and check the live gather. "Behind a proxy" is
reproduced without any external proxy: an in-process SOCKS5 server relays TCP
CONNECT but refuses UDP ASSOCIATE (a TCP-only residential proxy), and the
egress IP is injected as an RFC 5737 TEST-NET address.
test_not_blocked_behind_tcp_only_socks guards the gather-fails-behind-proxy bug.

webrtc-e2e.yml runs the e2e on demand (needs a binary that carries the fixes).
2026-06-06 18:39:03 +02:00
..
firefox-launch-matrix.yml ci: fix firefox --version check (stdout match, not exit code) 2026-05-25 07:25:23 -07:00
tests.yml tests: add/update .github/workflows/tests.yml 2026-05-15 20:01:59 -07:00
webrtc-e2e.yml test(webrtc): realness sentinels + e2e behind a fake TCP-only SOCKS proxy 2026-06-06 18:39:03 +02:00