mirror of
https://github.com/KeygraphHQ/juice-shop.git
synced 2026-11-10 10:41:36 -10:00
41 lines
1.0 KiB
TypeScript
41 lines
1.0 KiB
TypeScript
/*
|
|
* Copyright (c) 2014-2025 Bjoern Kimminich & the OWASP Juice Shop contributors.
|
|
* SPDX-License-Identifier: MIT
|
|
*/
|
|
|
|
import sinon from 'sinon'
|
|
import chai from 'chai'
|
|
import sinonChai from 'sinon-chai'
|
|
import { serveKeyFiles } from '../../routes/keyServer'
|
|
const expect = chai.expect
|
|
chai.use(sinonChai)
|
|
|
|
describe('keyServer', () => {
|
|
let req: any
|
|
let res: any
|
|
let next: any
|
|
|
|
beforeEach(() => {
|
|
req = { params: { } }
|
|
res = { sendFile: sinon.spy(), status: sinon.spy() }
|
|
next = sinon.spy()
|
|
})
|
|
|
|
it('should serve requested file from folder /encryptionkeys', () => {
|
|
req.params.file = 'test.file'
|
|
|
|
serveKeyFiles()(req, res, next)
|
|
|
|
expect(res.sendFile).to.have.been.calledWith(sinon.match(/encryptionkeys[/\\]test.file/))
|
|
})
|
|
|
|
it('should raise error for slashes in filename', () => {
|
|
req.params.file = '../../../../nice.try'
|
|
|
|
serveKeyFiles()(req, res, next)
|
|
|
|
expect(res.sendFile).to.have.not.been.calledWith(sinon.match.any)
|
|
expect(next).to.have.been.calledWith(sinon.match.instanceOf(Error))
|
|
})
|
|
})
|