💚 add GH workflow

Author: ctcpip

.github/workflows/security-test.yml

@@ -0,0 +1,22 @@
+name: 'jQuery Security Tests'
+
+on: [pull_request, push, workflow_dispatch]
+
+permissions:
+  contents: read
+
+jobs:
+  test-security:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: browser-actions/setup-chrome@v1
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 'lts/*'
+      - run: npm ci
+        working-directory: security/server
+      - run: npm ci
+        working-directory: security/test
+      - run: npm test
+        working-directory: security/test

security/site/main.mjs

@@ -1,7 +1,5 @@
 import { cveMap, getPatchedVersion, jQueryVersions } from './cve-data.mjs'
 
-const dis = this;
-
 function log(txt){
   console.log(txt);
 }

security/test/index.mjs

@@ -18,12 +18,15 @@ const timeout = 5 * 1000;
 let cmd;
 
 if(platform === 'darwin'){
-  cmd = `"/Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome" --headless=old --virtual-time-budget=${timeout} --run-all-compositor-stages-before-draw --dump-dom `;
+  cmd = `"/Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome" `;
 }
 else {
 	// presume *nix
+	cmd = 'chrome ';
 }
 
+cmd += `--headless=old --virtual-time-budget=${timeout} --run-all-compositor-stages-before-draw --dump-dom `;
+
 for (const v of jQueryVersions) {
 	try {
 		test(v);
@@ -46,7 +49,7 @@ function test(version, patched) {
 
 	console.log(`
 --------------------------------------------------------------------------------
-	validating jQuery v${effectiveVersion}
+  validating jQuery v${effectiveVersion}
 --------------------------------------------------------------------------------
 `)