diff options
author | David Heinemeier Hansson <david@loudthinking.com> | 2017-07-04 17:04:40 +0200 |
---|---|---|
committer | David Heinemeier Hansson <david@loudthinking.com> | 2017-07-04 17:04:40 +0200 |
commit | bbfc73ae5a84a11dc10642c37bcac1d7530a88e6 (patch) | |
tree | f5eaa94c7e6abfe3feb6ec386c79597bddd2bb29 /test/filename_test.rb | |
parent | f5d663708bb1a4e56014ad8e3f5441803a5bd3a9 (diff) | |
download | rails-bbfc73ae5a84a11dc10642c37bcac1d7530a88e6.tar.gz rails-bbfc73ae5a84a11dc10642c37bcac1d7530a88e6.tar.bz2 rails-bbfc73ae5a84a11dc10642c37bcac1d7530a88e6.zip |
Test filename
Diffstat (limited to 'test/filename_test.rb')
-rw-r--r-- | test/filename_test.rb | 36 |
1 files changed, 36 insertions, 0 deletions
diff --git a/test/filename_test.rb b/test/filename_test.rb new file mode 100644 index 0000000000..c42ae8ca54 --- /dev/null +++ b/test/filename_test.rb @@ -0,0 +1,36 @@ +require "test_helper" + +class ActiveFile::FilenameTest < ActiveSupport::TestCase + test "sanitize" do + "%$|:;/\t\r\n\\".each_char do |character| + filename = ActiveFile::Filename.new("foo#{character}bar.pdf") + assert_equal 'foo-bar.pdf', filename.sanitized + assert_equal 'foo-bar.pdf', filename.to_s + end + end + + test "sanitize transcodes to valid UTF-8" do + { "\xF6".force_encoding(Encoding::ISO8859_1) => "ö", + "\xC3".force_encoding(Encoding::ISO8859_1) => "Ã", + "\xAD" => "�", + "\xCF" => "�", + "\x00" => "", + }.each do |actual, expected| + assert_equal expected, ActiveFile::Filename.new(actual).sanitized + end + end + + test "strips RTL override chars used to spoof unsafe executables as docs" do + # Would be displayed in Windows as "evilexe.pdf" due to the right-to-left + # (RTL) override char! + assert_equal 'evil-fdp.exe', ActiveFile::Filename.new("evil\u{202E}fdp.exe").sanitized + end + + test "compare case-insensitively" do + assert_operator ActiveFile::Filename.new('foobar.pdf'), :==, ActiveFile::Filename.new('FooBar.PDF') + end + + test "compare sanitized" do + assert_operator ActiveFile::Filename.new('foo-bar.pdf'), :==, ActiveFile::Filename.new("foo\tbar.pdf") + end +end |