[freenet-cvs] r20949 - trunk/freenet/test/freenet/clients/http/filter

[nextg...@freenetproject.org]

Author: nextgens
Date: 2008-07-03 06:58:50 +0000 (Thu, 03 Jul 2008)
New Revision: 20949

Modified:
   trunk/freenet/test/freenet/clients/http/filter/ContentFilterTest.java
Log:
Extend ContentFilterTest

Modified: trunk/freenet/test/freenet/clients/http/filter/ContentFilterTest.java
===================================================================
--- trunk/freenet/test/freenet/clients/http/filter/ContentFilterTest.java       
2008-07-03 03:58:26 UTC (rev 20948)
+++ trunk/freenet/test/freenet/clients/http/filter/ContentFilterTest.java       
2008-07-03 06:58:50 UTC (rev 20949)
@@ -15,22 +15,53 @@
  * @author Florent Daignière <nextgens at freenetproject.org>
  */
 public class ContentFilterTest extends TestCase {
+       private static final String BASE_URI_PROTOCOL = "http";
+       private static final String BASE_URI_CONTENT = "localhost:8888";
+       private static final String BASE_URI = 
BASE_URI_PROTOCOL+"://"+BASE_URI_CONTENT+'/';
+       
+       private static final String EXTERNAL_LINK = "www.evilwebsite.gov";
+       private static final String EXTERNAL_LINK_OK = "<a />";
+       // check that external links are not allowed
+       private static final String EXTERNAL_LINK_CHECK1 = "<a 
href=\""+EXTERNAL_LINK+"\"/>";
+       private static final String EXTERNAL_LINK_CHECK2 = "<a 
href=\""+BASE_URI_PROTOCOL+"://"+EXTERNAL_LINK+"\"/>";
+       private static final String EXTERNAL_LINK_CHECK3 = "<a 
href=\""+BASE_URI_CONTENT+"@http://"+EXTERNAL_LINK+"\"/>";
+       
+       private static final String INTERNAL_RELATIVE_LINK = "<a href=\"/KSK at 
gpl.txt\" />";
+       private static final String INTERNAL_ABSOLUTE_LINK = "<a 
href=\""+BASE_URI+"KSK at gpl.txt\" />";
+       
        // @see bug #710
        private static final String ANCHOR_TEST = "<a href=\"#test\" />";
        // @see bug #2451
        private static final String POUNT_CHARACTER_ENCODING_TEST = "<a 
href=\"/CHK at 
nvrrZF-qG7gInnxb2PUFNcNfgmdg2QHFQUsJGUzvUdE,nzsrkOSwJDP5lMod~kNDChDh96f1vIqGejOcMZpmIq0,AAEC--8/Ward
 Churchill - [2001] In a Pig's Eye - CD 2 - 07 - #1 Security Threat.ogg\" />";
        private static final String POUNT_CHARACTER_ENCODING_TEST_RESULT = "<a 
href=\"/CHK at 
nvrrZF-qG7gInnxb2PUFNcNfgmdg2QHFQUsJGUzvUdE,nzsrkOSwJDP5lMod~kNDChDh96f1vIqGejOcMZpmIq0,AAEC--8/Ward%20Churchill%20-%20%5b2001%5d%20In%20a%20Pig%27s%20Eye%20-%20CD%202%20-%2007%20-%20%231%20Security%20Threat.ogg\"
 />";
+       // @see bug #2297
+       private static final String PREVENT_FPROXY_ACCESS = "<a 
href=\""+BASE_URI+"\"/>";
+       private static final String WHITELIST_STATIC_CONTENT = "<a 
href=\"/static/themes/clean/theme.css\" />";

        private final BucketFactory bf = new ArrayBucketFactory();

        public void testHTMLFilter() throws Exception {
+               // General sanity checks
+               // is "relativization" working?
+               assertEquals(INTERNAL_RELATIVE_LINK, 
HTMLFilter(INTERNAL_RELATIVE_LINK));
+               assertEquals(INTERNAL_RELATIVE_LINK, 
HTMLFilter(INTERNAL_ABSOLUTE_LINK));
+               // are external links stripped out ?
+               
assertTrue(HTMLFilter(EXTERNAL_LINK_CHECK1).startsWith(EXTERNAL_LINK_OK));
+               
assertTrue(HTMLFilter(EXTERNAL_LINK_CHECK2).contains(GenericReadFilterCallback.magicHTTPEscapeString));
+               
assertTrue(HTMLFilter(EXTERNAL_LINK_CHECK3).startsWith(EXTERNAL_LINK_OK));
+               
+               // regression testing
                assertEquals(ANCHOR_TEST, HTMLFilter(ANCHOR_TEST));
+               
                assertEquals(POUNT_CHARACTER_ENCODING_TEST_RESULT, 
HTMLFilter(POUNT_CHARACTER_ENCODING_TEST));
+               
+               
assertTrue(HTMLFilter(PREVENT_FPROXY_ACCESS).contains(GenericReadFilterCallback.magicHTTPEscapeString));
+               assertEquals(WHITELIST_STATIC_CONTENT, 
HTMLFilter(WHITELIST_STATIC_CONTENT));
        }

        private String HTMLFilter(String data) throws Exception {
                String typeName = "text/html";
-               URI baseURI = new URI("http://localhost:8888/";);
+               URI baseURI = new URI(BASE_URI);

                return ContentFilter.filter(new 
ArrayBucket(data.getBytes("UTF-8")), bf, typeName, baseURI, 
null).data.toString();
        }