mirror of
https://github.com/go-gitea/gitea
synced 2024-11-05 13:49:10 +01:00
b71cb7acdc
Follow #23290 Network error won't make content lost. And this is a much better approach than "loading-button". The UI is not perfect and there are still some TODOs, they can be done in following PRs, not a must in this PR's scope. <details>  </details>
38 lines
727 B
Go
38 lines
727 B
Go
// Copyright 2023 The Gitea Authors. All rights reserved.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package httplib
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"code.gitea.io/gitea/modules/setting"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
)
|
|
|
|
func TestIsRiskyRedirectURL(t *testing.T) {
|
|
setting.AppURL = "http://localhost:3000/"
|
|
tests := []struct {
|
|
input string
|
|
want bool
|
|
}{
|
|
{"", false},
|
|
{"foo", false},
|
|
{"/", false},
|
|
{"/foo?k=%20#abc", false},
|
|
|
|
{"//", true},
|
|
{"\\\\", true},
|
|
{"/\\", true},
|
|
{"\\/", true},
|
|
{"mail:a@b.com", true},
|
|
{"https://test.com", true},
|
|
{setting.AppURL + "/foo", false},
|
|
}
|
|
for _, tt := range tests {
|
|
t.Run(tt.input, func(t *testing.T) {
|
|
assert.Equal(t, tt.want, IsRiskyRedirectURL(tt.input))
|
|
})
|
|
}
|
|
}
|