2019-03-14 19:02:48 +00:00
|
|
|
# Pleroma: A lightweight social networking server
|
2021-01-13 06:49:20 +00:00
|
|
|
# Copyright © 2017-2021 Pleroma Authors <https://pleroma.social/>
|
2019-03-14 19:02:48 +00:00
|
|
|
# SPDX-License-Identifier: AGPL-3.0-only
|
|
|
|
|
2020-06-23 15:16:47 +00:00
|
|
|
defmodule Pleroma.Web.Plugs.UploadedMediaPlugTest do
|
2020-12-21 11:21:40 +00:00
|
|
|
use Pleroma.Web.ConnCase, async: true
|
2019-03-14 19:02:48 +00:00
|
|
|
alias Pleroma.Upload
|
|
|
|
|
2019-03-14 19:26:54 +00:00
|
|
|
defp upload_file(context) do
|
|
|
|
Pleroma.DataCase.ensure_local_uploader(context)
|
2019-03-14 19:02:48 +00:00
|
|
|
File.cp!("test/fixtures/image.jpg", "test/fixtures/image_tmp.jpg")
|
|
|
|
|
|
|
|
file = %Plug.Upload{
|
2020-10-13 15:37:24 +00:00
|
|
|
content_type: "image/jpeg",
|
2019-03-14 19:02:48 +00:00
|
|
|
path: Path.absname("test/fixtures/image_tmp.jpg"),
|
|
|
|
filename: "nice_tf.jpg"
|
|
|
|
}
|
|
|
|
|
|
|
|
{:ok, data} = Upload.store(file)
|
|
|
|
[%{"href" => attachment_url} | _] = data["url"]
|
|
|
|
[attachment_url: attachment_url]
|
|
|
|
end
|
|
|
|
|
2019-03-14 19:26:54 +00:00
|
|
|
setup_all :upload_file
|
|
|
|
|
2019-03-14 19:02:48 +00:00
|
|
|
test "does not send Content-Disposition header when name param is not set", %{
|
|
|
|
attachment_url: attachment_url
|
|
|
|
} do
|
|
|
|
conn = get(build_conn(), attachment_url)
|
|
|
|
refute Enum.any?(conn.resp_headers, &(elem(&1, 0) == "content-disposition"))
|
|
|
|
end
|
|
|
|
|
|
|
|
test "sends Content-Disposition header when name param is set", %{
|
|
|
|
attachment_url: attachment_url
|
|
|
|
} do
|
|
|
|
conn = get(build_conn(), attachment_url <> "?name=\"cofe\".gif")
|
|
|
|
|
|
|
|
assert Enum.any?(
|
|
|
|
conn.resp_headers,
|
2023-04-17 19:07:08 +00:00
|
|
|
&(&1 == {"content-disposition", "inline; filename=\"\\\"cofe\\\".gif\""})
|
2019-03-14 19:02:48 +00:00
|
|
|
)
|
|
|
|
end
|
2022-11-10 11:54:12 +00:00
|
|
|
|
|
|
|
test "removes control characters from the Content-Disposition header", %{
|
|
|
|
attachment_url: attachment_url
|
|
|
|
} do
|
|
|
|
conn = get(build_conn(), attachment_url <> "?name=\"cofe\".gif\\r\\n")
|
|
|
|
|
|
|
|
assert Enum.any?(
|
|
|
|
conn.resp_headers,
|
2023-04-17 19:07:08 +00:00
|
|
|
&(&1 == {"content-disposition", ~s[inline; filename="\\"cofe\\".gif"]})
|
2022-11-10 11:54:12 +00:00
|
|
|
)
|
|
|
|
end
|
2019-03-14 19:02:48 +00:00
|
|
|
end
|