# Pleroma: A lightweight social networking server # Copyright © 2017-2022 Pleroma Authors # SPDX-License-Identifier: AGPL-3.0-only defmodule Pleroma.Web.Plugs.UploadedMediaPlugTest do use Pleroma.Web.ConnCase, async: true alias Pleroma.Upload defp upload_file(context) do Pleroma.DataCase.ensure_local_uploader(context) File.cp!("test/fixtures/image.jpg", "test/fixtures/image_tmp.jpg") file = %Plug.Upload{ content_type: "image/jpeg", path: Path.absname("test/fixtures/image_tmp.jpg"), filename: "nice_tf.jpg" } {:ok, data} = Upload.store(file) [%{"href" => attachment_url} | _] = data["url"] [attachment_url: attachment_url] end setup_all :upload_file test "does not send Content-Disposition header when name param is not set", %{ attachment_url: attachment_url } do conn = get(build_conn(), attachment_url) refute Enum.any?(conn.resp_headers, &(elem(&1, 0) == "content-disposition")) end test "sends Content-Disposition header when name param is set", %{ attachment_url: attachment_url } do conn = get(build_conn(), attachment_url <> ~s[?name="cofe".gif]) assert Enum.any?( conn.resp_headers, &(&1 == {"content-disposition", ~s[inline; filename="\\"cofe\\".gif"]}) ) end test "denies access to media if wrong Host", %{ attachment_url: attachment_url } do conn = get(build_conn(), attachment_url) assert conn.status == 200 new_media_base = "http://media.localhost:8080" %{scheme: new_media_scheme, host: new_media_host, port: new_media_port} = URI.parse(new_media_base) clear_config([Pleroma.Upload, :base_url], new_media_base) conn = get(build_conn(), attachment_url) expected_url = URI.parse(attachment_url) |> Map.put(:host, new_media_host) |> Map.put(:port, new_media_port) |> Map.put(:scheme, new_media_scheme) |> URI.to_string() assert redirected_to(conn, 302) == expected_url end end