openstreetmap-website/test/lib/osm_community_index/resource_backend_test.rb
Andy Allan af6fec502a Validate URLs against supply-chain attacks
Unfortunately validates_url gem doesn't support mailto or xmpp urls,
so we need to write our own validation.
2022-11-02 18:21:00 +00:00

15 lines
476 B
Ruby

require "test_helper"
class ResourceBackendTest < ActiveSupport::TestCase
def test_valid_url
klass = OsmCommunityIndex::ResourceBackend
assert klass.valid_url?(nil)
assert klass.valid_url?("http://example.com")
assert klass.valid_url?("mailto:bob@example.com?subject=Foo%20Bar")
assert klass.valid_url?("xmpp:osm@jabber.example.org?join")
assert_not klass.valid_url?("javascript:doSomething()")
assert_not klass.valid_url?("foo:[]")
end
end