debian-mirror-gitlab/spec/lib/uploaded_file_spec.rb

228 lines
7 KiB
Ruby
Raw Normal View History

2019-12-04 20:38:33 +05:30
# frozen_string_literal: true
2018-05-09 12:01:36 +05:30
require 'spec_helper'
2020-07-28 23:09:34 +05:30
RSpec.describe UploadedFile do
2018-11-08 19:23:39 +05:30
let(:temp_dir) { Dir.tmpdir }
2020-05-01 12:34:13 +05:30
let(:temp_file) { Tempfile.new(%w[test test], temp_dir) }
2018-05-09 12:01:36 +05:30
2018-11-08 19:23:39 +05:30
before do
FileUtils.touch(temp_file)
end
2018-05-09 12:01:36 +05:30
2018-11-08 19:23:39 +05:30
after do
FileUtils.rm_f(temp_file)
end
2020-11-24 15:15:51 +05:30
context 'from_params functions' do
RSpec.shared_examples 'using the file path' do |filename:, content_type:, sha256:, path_suffix:|
it { is_expected.not_to be_nil }
it 'sets properly the attributes' do
expect(subject.original_filename).to eq(filename)
expect(subject.content_type).to eq(content_type)
expect(subject.sha256).to eq(sha256)
expect(subject.remote_id).to be_nil
expect(subject.path).to end_with(path_suffix)
end
it 'handles a blank path' do
2021-03-08 18:12:59 +05:30
params['path'] = ''
2020-11-24 15:15:51 +05:30
# Not a real file, so can't determine size itself
2021-03-08 18:12:59 +05:30
params['size'] = 1.byte
2018-05-09 12:01:36 +05:30
2021-03-08 18:12:59 +05:30
expect { described_class.from_params(params, upload_path) }
2020-11-24 15:15:51 +05:30
.not_to raise_error
end
2018-05-09 12:01:36 +05:30
end
2020-11-24 15:15:51 +05:30
RSpec.shared_examples 'using the remote id' do |filename:, content_type:, sha256:, size:, remote_id:|
it { is_expected.not_to be_nil }
it 'sets properly the attributes' do
expect(subject.original_filename).to eq(filename)
expect(subject.content_type).to eq('application/octet-stream')
expect(subject.sha256).to eq('sha256')
expect(subject.path).to be_nil
expect(subject.size).to eq(123456)
expect(subject.remote_id).to eq('1234567890')
end
2018-11-08 19:23:39 +05:30
end
2021-03-08 18:12:59 +05:30
describe '.from_params' do
2020-11-24 15:15:51 +05:30
let(:upload_path) { nil }
2018-05-09 12:01:36 +05:30
2020-11-24 15:15:51 +05:30
after do
FileUtils.rm_r(upload_path) if upload_path
end
2018-05-09 12:01:36 +05:30
2020-11-24 15:15:51 +05:30
subject do
2021-03-08 18:12:59 +05:30
described_class.from_params(params, [upload_path, Dir.tmpdir])
2018-05-09 12:01:36 +05:30
end
2020-11-24 15:15:51 +05:30
context 'when valid file is specified' do
context 'only local path is specified' do
let(:params) { { 'path' => temp_file.path } }
2020-05-01 12:34:13 +05:30
2020-11-24 15:15:51 +05:30
it { is_expected.not_to be_nil }
2020-05-01 12:34:13 +05:30
2020-11-24 15:15:51 +05:30
it 'generates filename from path' do
expect(subject.original_filename).to eq(::File.basename(temp_file.path))
2020-05-01 12:34:13 +05:30
end
2018-05-09 12:01:36 +05:30
end
2020-11-24 15:15:51 +05:30
context 'all parameters are specified' do
context 'with a filepath' do
let(:params) do
{ 'path' => temp_file.path,
'name' => 'dir/my file&.txt',
'type' => 'my/type',
'sha256' => 'sha256' }
end
it_behaves_like 'using the file path',
filename: 'my_file_.txt',
content_type: 'my/type',
sha256: 'sha256',
path_suffix: 'test'
2020-05-01 12:34:13 +05:30
end
2020-11-24 15:15:51 +05:30
context 'with a remote id' do
let(:params) do
{
'name' => 'dir/my file&.txt',
'sha256' => 'sha256',
'remote_url' => 'http://localhost/file',
'remote_id' => '1234567890',
'etag' => 'etag1234567890',
'size' => '123456'
}
end
it_behaves_like 'using the remote id',
filename: 'my_file_.txt',
content_type: 'application/octet-stream',
sha256: 'sha256',
size: 123456,
remote_id: '1234567890'
end
2020-05-01 12:34:13 +05:30
2020-11-24 15:15:51 +05:30
context 'with a path and a remote id' do
let(:params) do
{
'path' => temp_file.path,
'name' => 'dir/my file&.txt',
'sha256' => 'sha256',
'remote_url' => 'http://localhost/file',
'remote_id' => '1234567890',
'etag' => 'etag1234567890',
'size' => '123456'
}
end
it_behaves_like 'using the remote id',
filename: 'my_file_.txt',
content_type: 'application/octet-stream',
sha256: 'sha256',
size: 123456,
remote_id: '1234567890'
2020-05-01 12:34:13 +05:30
end
2018-05-09 12:01:36 +05:30
end
2020-11-24 15:15:51 +05:30
end
2018-05-09 12:01:36 +05:30
2020-11-24 15:15:51 +05:30
context 'when no params are specified' do
let(:params) { {} }
it 'does not return an object' do
is_expected.to be_nil
2020-05-01 12:34:13 +05:30
end
2020-11-24 15:15:51 +05:30
end
2020-05-01 12:34:13 +05:30
2020-11-24 15:15:51 +05:30
context 'when verifying allowed paths' do
let(:params) { { 'path' => temp_file.path } }
context 'when file is stored in system temporary folder' do
let(:temp_dir) { Dir.tmpdir }
2020-05-01 12:34:13 +05:30
it { is_expected.not_to be_nil }
2020-11-24 15:15:51 +05:30
end
context 'when file is stored in user provided upload path' do
let(:upload_path) { Dir.mktmpdir }
let(:temp_dir) { upload_path }
2020-05-01 12:34:13 +05:30
2020-11-24 15:15:51 +05:30
it { is_expected.not_to be_nil }
2020-05-01 12:34:13 +05:30
end
2020-11-24 15:15:51 +05:30
context 'when file is stored outside of user provided upload path' do
let!(:generated_dir) { Dir.mktmpdir }
let!(:temp_dir) { Dir.mktmpdir }
2020-05-01 12:34:13 +05:30
2020-11-24 15:15:51 +05:30
before do
# We overwrite default temporary path
allow(Dir).to receive(:tmpdir).and_return(generated_dir)
2020-05-01 12:34:13 +05:30
end
2020-11-24 15:15:51 +05:30
it 'raises an error' do
expect { subject }.to raise_error(UploadedFile::InvalidPathError, /insecure path used/)
end
2018-05-09 12:01:36 +05:30
end
2020-11-24 15:15:51 +05:30
end
end
2018-05-09 12:01:36 +05:30
end
2018-11-08 19:23:39 +05:30
2019-12-21 20:55:43 +05:30
describe '.initialize' do
context 'when no size is provided' do
it 'determine size from local path' do
file = described_class.new(temp_file.path)
expect(file.size).to eq(temp_file.size)
end
it 'raises an exception if is a remote file' do
expect do
described_class.new(nil, remote_id: 'id')
end.to raise_error(UploadedFile::UnknownSizeError, 'Unable to determine file size')
end
end
context 'when size is a number' do
let_it_be(:size) { 1.gigabyte }
it 'is overridden by the size of the local file' do
file = described_class.new(temp_file.path, size: size)
expect(file.size).to eq(temp_file.size)
end
it 'is respected if is a remote file' do
file = described_class.new(nil, remote_id: 'id', size: size)
expect(file.size).to eq(size)
end
end
context 'when size is a string' do
it 'is converted to a number' do
file = described_class.new(nil, remote_id: 'id', size: '1')
expect(file.size).to eq(1)
end
it 'raises an exception if does not represent a number' do
expect do
described_class.new(nil, remote_id: 'id', size: 'not a number')
end.to raise_error(UploadedFile::UnknownSizeError, 'Unable to determine file size')
end
end
end
2018-11-08 19:23:39 +05:30
describe '#sanitize_filename' do
it { expect(described_class.new(temp_file.path).sanitize_filename('spaced name')).to eq('spaced_name') }
it { expect(described_class.new(temp_file.path).sanitize_filename('#$%^&')).to eq('_____') }
it { expect(described_class.new(temp_file.path).sanitize_filename('..')).to eq('_..') }
it { expect(described_class.new(temp_file.path).sanitize_filename('')).to eq('unnamed') }
end
2018-05-09 12:01:36 +05:30
end