4e14ccc74d
Instiki now runs on the Rails 2.3.0 Candidate Release. Among other improvements, this means that it now automagically selects between WEBrick and Mongrel. Just run ./instiki --daemon
64 lines
1.6 KiB
Ruby
64 lines
1.6 KiB
Ruby
require 'test/spec'
|
|
|
|
require 'rack/file'
|
|
require 'rack/lint'
|
|
|
|
require 'rack/mock'
|
|
|
|
context "Rack::File" do
|
|
DOCROOT = File.expand_path(File.dirname(__FILE__))
|
|
|
|
specify "serves files" do
|
|
res = Rack::MockRequest.new(Rack::Lint.new(Rack::File.new(DOCROOT))).
|
|
get("/cgi/test")
|
|
|
|
res.should.be.ok
|
|
res.should =~ /ruby/
|
|
end
|
|
|
|
specify "sets Last-Modified header" do
|
|
res = Rack::MockRequest.new(Rack::Lint.new(Rack::File.new(DOCROOT))).
|
|
get("/cgi/test")
|
|
|
|
path = File.join(DOCROOT, "/cgi/test")
|
|
|
|
res.should.be.ok
|
|
res["Last-Modified"].should.equal File.mtime(path).httpdate
|
|
end
|
|
|
|
specify "serves files with URL encoded filenames" do
|
|
res = Rack::MockRequest.new(Rack::Lint.new(Rack::File.new(DOCROOT))).
|
|
get("/cgi/%74%65%73%74") # "/cgi/test"
|
|
|
|
res.should.be.ok
|
|
res.should =~ /ruby/
|
|
end
|
|
|
|
specify "does not allow directory traversal" do
|
|
res = Rack::MockRequest.new(Rack::Lint.new(Rack::File.new(DOCROOT))).
|
|
get("/cgi/../test")
|
|
|
|
res.should.be.forbidden
|
|
end
|
|
|
|
specify "does not allow directory traversal with encoded periods" do
|
|
res = Rack::MockRequest.new(Rack::Lint.new(Rack::File.new(DOCROOT))).
|
|
get("/%2E%2E/README")
|
|
|
|
res.should.be.forbidden
|
|
end
|
|
|
|
specify "404s if it can't find the file" do
|
|
res = Rack::MockRequest.new(Rack::Lint.new(Rack::File.new(DOCROOT))).
|
|
get("/cgi/blubb")
|
|
|
|
res.should.be.not_found
|
|
end
|
|
|
|
specify "detects SystemCallErrors" do
|
|
res = Rack::MockRequest.new(Rack::Lint.new(Rack::File.new(DOCROOT))).
|
|
get("/cgi")
|
|
|
|
res.should.be.not_found
|
|
end
|
|
end
|