mirror of
https://github.com/github/rails.git
synced 2026-01-09 14:48:08 -05:00
388d2f8888
Before we were calling to_sym in the mime type, even when it is unknown what can cause denial of service since symbols are not removed by the garbage collector. Fixes: CVE-2014-0082
18 lines
585 B
Ruby
18 lines
585 B
Ruby
require 'abstract_unit'
|
|
|
|
class TextTest < ActiveSupport::TestCase
|
|
test 'formats returns symbol for recognized MIME type' do
|
|
assert_equal [:text], ActionView::Template::Text.new('', :text).formats
|
|
end
|
|
|
|
test 'formats returns string for recognized MIME type when MIME does not have symbol' do
|
|
foo = Mime::Type.lookup("foo")
|
|
assert_nil foo.to_sym
|
|
assert_equal ['foo'], ActionView::Template::Text.new('', foo).formats
|
|
end
|
|
|
|
test 'formats returns string for unknown MIME type' do
|
|
assert_equal ['foo'], ActionView::Template::Text.new('', 'foo').formats
|
|
end
|
|
end
|