mirror of
https://github.com/rails/rails.git
synced 2022-11-09 12:12:34 -05:00
9330d01ada
git-subtree-dir: activestorage git-subtree-mainline:0d58e7e478git-subtree-split:3f4a7218a4
36 lines
1.3 KiB
Ruby
36 lines
1.3 KiB
Ruby
require "test_helper"
|
||
|
||
class ActiveStorage::FilenameTest < ActiveSupport::TestCase
|
||
test "sanitize" do
|
||
"%$|:;/\t\r\n\\".each_char do |character|
|
||
filename = ActiveStorage::Filename.new("foo#{character}bar.pdf")
|
||
assert_equal "foo-bar.pdf", filename.sanitized
|
||
assert_equal "foo-bar.pdf", filename.to_s
|
||
end
|
||
end
|
||
|
||
test "sanitize transcodes to valid UTF-8" do
|
||
{ "\xF6".force_encoding(Encoding::ISO8859_1) => "ö",
|
||
"\xC3".force_encoding(Encoding::ISO8859_1) => "Ã",
|
||
"\xAD" => "<EFBFBD>",
|
||
"\xCF" => "<EFBFBD>",
|
||
"\x00" => "",
|
||
}.each do |actual, expected|
|
||
assert_equal expected, ActiveStorage::Filename.new(actual).sanitized
|
||
end
|
||
end
|
||
|
||
test "strips RTL override chars used to spoof unsafe executables as docs" do
|
||
# Would be displayed in Windows as "evilexe.pdf" due to the right-to-left
|
||
# (RTL) override char!
|
||
assert_equal "evil-fdp.exe", ActiveStorage::Filename.new("evil\u{202E}fdp.exe").sanitized
|
||
end
|
||
|
||
test "compare case-insensitively" do
|
||
assert_operator ActiveStorage::Filename.new("foobar.pdf"), :==, ActiveStorage::Filename.new("FooBar.PDF")
|
||
end
|
||
|
||
test "compare sanitized" do
|
||
assert_operator ActiveStorage::Filename.new("foo-bar.pdf"), :==, ActiveStorage::Filename.new("foo\tbar.pdf")
|
||
end
|
||
end
|