JezK
Edit File: test_handlers.rb
# Copyright (c) 2005 Zed A. Shaw # You can redistribute it and/or modify it under the same terms as Ruby. # # Additional work donated by contributors. See http://mongrel.rubyforge.org/attributions.html # for more information. require 'test/testhelp' class SimpleHandler < Mongrel::HttpHandler def process(request, response) response.start do |head,out| head["Content-Type"] = "text/html" results = "<html><body>Your request:<br /><pre>#{request.params.to_yaml}</pre><a href=\"/files\">View the files.</a></body></html>" out << results end end end class DumbHandler < Mongrel::HttpHandler def process(request, response) response.start do |head,out| head["Content-Type"] = "text/html" out.write("test") end end end def check_status(results, expecting) results.each do |res| assert(res.kind_of?(expecting), "Didn't get #{expecting}, got: #{res.class}") end end class HandlersTest < Test::Unit::TestCase def setup stats = Mongrel::StatisticsFilter.new(:sample_rate => 1) @config = Mongrel::Configurator.new :host => '127.0.0.1', :port => 9998 do listener do uri "/", :handler => SimpleHandler.new uri "/", :handler => stats uri "/404", :handler => Mongrel::Error404Handler.new("Not found") uri "/dumb", :handler => Mongrel::DeflateFilter.new uri "/dumb", :handler => DumbHandler.new, :in_front => true uri "/files", :handler => Mongrel::DirHandler.new("doc") uri "/files_nodir", :handler => Mongrel::DirHandler.new("doc", listing_allowed=false, index_html="none") uri "/status", :handler => Mongrel::StatusHandler.new(:stats_filter => stats) uri "/relative", :handler => Mongrel::DirHandler.new(nil, listing_allowed=false, index_html="none") end end File.open("/tmp/testfile", 'w') do # Do nothing end @config.run end def teardown @config.stop(false, true) File.delete "/tmp/testfile" end def test_more_web_server res = hit([ "http://localhost:9998/test", "http://localhost:9998/dumb", "http://localhost:9998/404", "http://localhost:9998/files/rdoc/index.html", "http://localhost:9998/files/rdoc/nothere.html", "http://localhost:9998/files/rdoc/", "http://localhost:9998/files_nodir/rdoc/", "http://localhost:9998/status", ]) check_status res, String end def test_nil_dirhandler # Camping uses this internally handler = Mongrel::DirHandler.new(nil, false) assert handler.can_serve("/tmp/testfile") # Not a bug! A nil @file parameter is the only circumstance under which # we are allowed to serve any existing file assert handler.can_serve("../../../../../../../../../../tmp/testfile") end def test_non_nil_dirhandler_is_not_vulnerable_to_path_traversal # The famous security bug of Mongrel 1.1.2 handler = Mongrel::DirHandler.new("/doc", false) assert_nil handler.can_serve("/tmp/testfile") assert_nil handler.can_serve("../../../../../../../../../../tmp/testfile") end def test_deflate Net::HTTP.start("localhost", 9998) do |h| # Test that no accept-encoding returns a non-deflated response req = h.get("/dumb") assert( !req['Content-Encoding'] || !req['Content-Encoding'].include?('deflate')) assert_equal "test", req.body req = h.get("/dumb", {"Accept-Encoding" => "deflate"}) # -MAX_WBITS stops zlib from looking for a zlib header inflater = Zlib::Inflate.new(-Zlib::MAX_WBITS) assert req['Content-Encoding'].include?('deflate') assert_equal "test", inflater.inflate(req.body) end end # TODO: find out why this fails on win32 but nowhere else #def test_posting_fails_dirhandler # req = Net::HTTP::Post.new("http://localhost:9998/files/rdoc/") # req.set_form_data({'from'=>'2005-01-01', 'to'=>'2005-03-31'}, ';') # res = hit [["http://localhost:9998/files/rdoc/",req]] # check_status res, Net::HTTPNotFound #end def test_unregister @config.listeners["127.0.0.1:9998"].unregister("/") end end