94 lines
2.2 KiB
Ruby
94 lines
2.2 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
RSpec.shared_examples 'url validator examples' do |schemes|
|
|
describe '#validate' do
|
|
let(:validator) { described_class.new(attributes: [:link_url], **options) }
|
|
let(:badge) { build(:badge, link_url: 'http://www.example.com') }
|
|
|
|
subject { validator.validate(badge) }
|
|
|
|
context 'with no options' do
|
|
let(:options) { {} }
|
|
|
|
it "allows #{schemes.join(',')} schemes by default" do
|
|
expect(validator.options[:schemes]).to eq schemes
|
|
end
|
|
|
|
it 'checks that the url structure is valid' do
|
|
badge.link_url = "#{badge.link_url}:invalid_port"
|
|
|
|
subject
|
|
|
|
expect(badge.errors).to be_present
|
|
end
|
|
end
|
|
|
|
context 'with schemes' do
|
|
let(:options) { { schemes: %w(http) } }
|
|
|
|
it 'allows urls with the defined schemes' do
|
|
subject
|
|
|
|
expect(badge.errors).to be_empty
|
|
end
|
|
|
|
it 'add error if the url scheme does not match the selected ones' do
|
|
badge.link_url = 'https://www.example.com'
|
|
|
|
subject
|
|
|
|
expect(badge.errors).to be_present
|
|
end
|
|
end
|
|
end
|
|
end
|
|
|
|
RSpec.shared_examples 'public url validator examples' do |setting|
|
|
let(:validator) { described_class.new(attributes: [:link_url]) }
|
|
let(:badge) { build(:badge, link_url: 'http://www.example.com') }
|
|
|
|
subject { validator.validate(badge) }
|
|
|
|
context 'by default' do
|
|
it 'blocks urls pointing to localhost' do
|
|
badge.link_url = 'https://127.0.0.1'
|
|
|
|
subject
|
|
|
|
expect(badge.errors).to be_present
|
|
end
|
|
|
|
it 'blocks urls pointing to the local network' do
|
|
badge.link_url = 'https://192.168.1.1'
|
|
|
|
subject
|
|
|
|
expect(badge.errors).to be_present
|
|
end
|
|
end
|
|
|
|
context 'when local requests are allowed' do
|
|
let!(:settings) { create(:application_setting) }
|
|
|
|
before do
|
|
stub_application_setting(setting)
|
|
end
|
|
|
|
it 'does not block urls pointing to localhost' do
|
|
badge.link_url = 'https://127.0.0.1'
|
|
|
|
subject
|
|
|
|
expect(badge.errors).not_to be_present
|
|
end
|
|
|
|
it 'does not block urls pointing to the local network' do
|
|
badge.link_url = 'https://192.168.1.1'
|
|
|
|
subject
|
|
|
|
expect(badge.errors).not_to be_present
|
|
end
|
|
end
|
|
end
|