aboutsummaryrefslogtreecommitdiffstats
path: root/activestorage/test/models/filename_test.rb
blob: 88405e41c0decb3f79e8ee3abbcb0a3b8301bdd1 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
# frozen_string_literal: true

require "test_helper"

class ActiveStorage::FilenameTest < ActiveSupport::TestCase
  test "base" do
    assert_equal "racecar", ActiveStorage::Filename.new("racecar.jpg").base
    assert_equal "race.car", ActiveStorage::Filename.new("race.car.jpg").base
    assert_equal "racecar", ActiveStorage::Filename.new("racecar").base
  end

  test "extension with delimiter" do
    assert_equal ".jpg", ActiveStorage::Filename.new("racecar.jpg").extension_with_delimiter
    assert_equal ".jpg", ActiveStorage::Filename.new("race.car.jpg").extension_with_delimiter
    assert_equal "", ActiveStorage::Filename.new("racecar").extension_with_delimiter
  end

  test "extension without delimiter" do
    assert_equal "jpg", ActiveStorage::Filename.new("racecar.jpg").extension_without_delimiter
    assert_equal "jpg", ActiveStorage::Filename.new("race.car.jpg").extension_without_delimiter
    assert_equal "", ActiveStorage::Filename.new("racecar").extension_without_delimiter
  end

  test "sanitize" do
    "%$|:;/\t\r\n\\".each_char do |character|
      filename = ActiveStorage::Filename.new("foo#{character}bar.pdf")
      assert_equal "foo-bar.pdf", filename.sanitized
      assert_equal "foo-bar.pdf", filename.to_s
    end
  end

  test "sanitize transcodes to valid UTF-8" do
    { "\xF6".dup.force_encoding(Encoding::ISO8859_1) => "ö",
      "\xC3".dup.force_encoding(Encoding::ISO8859_1) => "Ã",
      "\xAD" => "�",
      "\xCF" => "�",
      "\x00" => "",
    }.each do |actual, expected|
      assert_equal expected, ActiveStorage::Filename.new(actual).sanitized
    end
  end

  test "strips RTL override chars used to spoof unsafe executables as docs" do
    # Would be displayed in Windows as "evilexe.pdf" due to the right-to-left
    # (RTL) override char!
    assert_equal "evil-fdp.exe", ActiveStorage::Filename.new("evil\u{202E}fdp.exe").sanitized
  end

  test "compare case-insensitively" do
    assert_operator ActiveStorage::Filename.new("foobar.pdf"), :==, ActiveStorage::Filename.new("FooBar.PDF")
  end

  test "compare sanitized" do
    assert_operator ActiveStorage::Filename.new("foo-bar.pdf"), :==, ActiveStorage::Filename.new("foo\tbar.pdf")
  end
end