diff --git a/test/customembed.js b/test/customembed.js
new file mode 100644
index 00000000..80d7482e
--- /dev/null
+++ b/test/customembed.js
@@ -0,0 +1,21 @@
+const customembed = require('../lib/customembed');
+const assert = require('assert');
+
+describe('customembed', () => {
+    describe('#filter', () => {
+        it('rejects plain-HTTP <embed> inputs', () => {
+            const input = '<embed src="http://foo.bar/baz.swf" type="application/x-shockwave-flash"></embed>';
+            assert.throws(() => { customembed.filter(input) }, /must be HTTPS/);
+        });
+
+        it('rejects plain-HTTP <object> inputs', () => {
+            const input = '<object data="http://foo.bar/baz.swf" type="application/x-shockwave-flash"></object>';
+            assert.throws(() => { customembed.filter(input) }, /must be HTTPS/);
+        });
+
+        it('rejects plain-HTTP <iframe> inputs', () => {
+            const input = '<iframe src="http://foo.bar/baz.swf"></iframe>';
+            assert.throws(() => { customembed.filter(input) }, /must be HTTPS/);
+        });
+    });
+});
diff --git a/test/ffmpeg.js b/test/ffmpeg.js
new file mode 100644
index 00000000..dea913e0
--- /dev/null
+++ b/test/ffmpeg.js
@@ -0,0 +1,16 @@
+const assert = require('assert');
+const ffmpeg = require('../lib/ffmpeg');
+const Config = require('../lib/config');
+
+describe('ffmpeg', () => {
+    describe('#query', () => {
+        it('rejects plain http links', done => {
+            Config.set('ffmpeg.enabled', true);
+            ffmpeg.query('http://foo.bar/baz.mp4', err => {
+                assert(/begins with 'https:/.test(err),
+                        `Expected error due to plain HTTP but got "${err}"`);
+                done();
+            });
+        });
+    });
+});