File: safe_url_spec.rb

package info (click to toggle)
gitlab 17.6.5-19
  • links: PTS, VCS
  • area: main
  • in suites: sid
  • size: 629,368 kB
  • sloc: ruby: 1,915,304; javascript: 557,307; sql: 60,639; xml: 6,509; sh: 4,567; makefile: 1,239; python: 406
file content (56 lines) | stat: -rw-r--r-- 1,189 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
# frozen_string_literal: true

require 'spec_helper'

RSpec.describe SafeUrl do
  describe '#safe_url' do
    let(:safe_url_test_class) do
      Class.new do
        include SafeUrl

        attr_reader :url

        def initialize(url)
          @url = url
        end
      end
    end

    let(:test_class) { safe_url_test_class.new(url) }
    let(:url) { 'http://example.com' }

    subject { test_class.safe_url }

    it { is_expected.to eq(url) }

    context 'when URL contains credentials' do
      let(:url) { 'http://foo:bar@example.com' }

      it 'masks username and password' do
        is_expected.to eq('http://*****:*****@example.com')
      end

      context 'when username is allowed' do
        subject { test_class.safe_url(allowed_usernames: usernames) }

        let(:usernames) { %w[foo] }

        it 'masks the password, but not the username' do
          is_expected.to eq('http://foo:*****@example.com')
        end
      end
    end

    context 'when URL is empty' do
      let(:url) { nil }

      it { is_expected.to be_nil }
    end

    context 'when URI raises an error' do
      let(:url) { 123 }

      it { is_expected.to be_nil }
    end
  end
end