2024-02-09 09:56:03 +01:00
|
|
|
|
describe Champs::EmailChamp do
|
|
|
|
|
describe 'validation' do
|
2024-02-15 09:45:20 +01:00
|
|
|
|
let(:champ) { build(:champ_email, value: value) }
|
|
|
|
|
|
2024-02-19 15:11:16 +01:00
|
|
|
|
subject { champ.validate(:champs_public_value) }
|
|
|
|
|
|
|
|
|
|
context 'when nil' do
|
|
|
|
|
let(:value) { nil }
|
|
|
|
|
|
|
|
|
|
it { is_expected.to be_truthy }
|
|
|
|
|
end
|
2024-02-09 09:56:03 +01:00
|
|
|
|
|
|
|
|
|
context 'when value is username' do
|
|
|
|
|
let(:value) { 'username' }
|
|
|
|
|
# what we allowed but it was a mistake
|
2024-02-19 15:11:16 +01:00
|
|
|
|
it { is_expected.to be_falsey }
|
2024-02-09 09:56:03 +01:00
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
context 'when value does not contain extension' do
|
|
|
|
|
let(:value) { 'username@mailserver' }
|
|
|
|
|
# what we allowed but it was a mistake
|
2024-02-19 15:11:16 +01:00
|
|
|
|
it { is_expected.to be_falsey }
|
2024-02-09 09:56:03 +01:00
|
|
|
|
end
|
|
|
|
|
|
2024-03-04 17:55:20 +01:00
|
|
|
|
context 'when value comes from pentesters with \u0022' do
|
|
|
|
|
let(:value) { "testing@example.com\u0022onmouseover=uzcc(96363)\u0022" }
|
|
|
|
|
# what we allowed but it was a mistake
|
|
|
|
|
it { is_expected.to be_falsey }
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
context 'when value comes from pentesters with script' do
|
|
|
|
|
let(:value) { "testing@example.com<script>alert('ok')</script>" }
|
|
|
|
|
# what we allowed but it was a mistake
|
|
|
|
|
it { is_expected.to be_falsey }
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
context 'when value comes from pentesters with ?' do
|
|
|
|
|
let(:value) { "testing@example.com?test" }
|
|
|
|
|
# what we allowed but it was a mistake
|
|
|
|
|
it { is_expected.to be_falsey }
|
|
|
|
|
end
|
|
|
|
|
|
2024-02-09 09:56:03 +01:00
|
|
|
|
context 'when value include an alias' do
|
|
|
|
|
let(:value) { 'username+alias@mailserver.fr' }
|
|
|
|
|
it { is_expected.to be_truthy }
|
|
|
|
|
end
|
|
|
|
|
|
2024-03-04 17:55:20 +01:00
|
|
|
|
context 'when value include an dash in domain' do
|
|
|
|
|
let(:value) { 'username+alias@demarches-simplifiees.fr' }
|
|
|
|
|
it { is_expected.to be_truthy }
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
context 'when value include an dash in domain' do
|
|
|
|
|
let(:value) { 'username+alias@demarches-simplifiees-v2.fr' }
|
|
|
|
|
it { is_expected.to be_truthy }
|
|
|
|
|
end
|
|
|
|
|
|
2024-02-09 09:56:03 +01:00
|
|
|
|
context 'when value includes accents' do
|
|
|
|
|
let(:value) { 'tech@démarches.gouv.fr' }
|
|
|
|
|
it { is_expected.to be_truthy }
|
|
|
|
|
end
|
|
|
|
|
|
2024-03-12 11:12:30 +01:00
|
|
|
|
context 'when value includes accents' do
|
|
|
|
|
let(:value) { 'prenom.nom@etu.univ-rouen.fr' }
|
|
|
|
|
it { is_expected.to be_truthy }
|
|
|
|
|
end
|
|
|
|
|
|
2024-02-09 09:56:03 +01:00
|
|
|
|
context 'when value is the classic standard user@domain.ext' do
|
|
|
|
|
let(:value) { 'username@mailserver.domain' }
|
|
|
|
|
it { is_expected.to be_truthy }
|
|
|
|
|
end
|
2024-02-15 09:45:20 +01:00
|
|
|
|
|
|
|
|
|
context 'when value contains white spaces plus a standard email' do
|
|
|
|
|
let(:value) { "\r\n\t username@mailserver.domain\r\n\t " }
|
|
|
|
|
it { is_expected.to be_truthy }
|
|
|
|
|
it 'normalize value' do
|
|
|
|
|
expect { subject }.to change { champ.value }.from(value).to('username@mailserver.domain')
|
|
|
|
|
end
|
|
|
|
|
end
|
2024-02-09 09:56:03 +01:00
|
|
|
|
end
|
|
|
|
|
end
|