Miroslav Pejic
72 lines
3.4 KiB
JavaScript
72 lines
3.4 KiB
JavaScript
'use strict';
|
|
|
|
// npx mocha test-validator.js
|
|
|
|
require('should');
|
|
|
|
const checkValidator = require('../app/src/validate');
|
|
|
|
describe('test-validate', () => {
|
|
describe('1. Handling invalid room name', () => {
|
|
it('should return false for non-string inputs', () => {
|
|
checkValidator.isValidRoomName(123).should.be.false();
|
|
checkValidator.isValidRoomName({}).should.be.false();
|
|
checkValidator.isValidRoomName([]).should.be.false();
|
|
checkValidator.isValidRoomName(null).should.be.false();
|
|
checkValidator.isValidRoomName(undefined).should.be.false();
|
|
});
|
|
|
|
it('should return false for xss injection inputs', () => {
|
|
checkValidator.isValidRoomName('<script>alert("xss")</script>').should.be.false();
|
|
});
|
|
|
|
it('should return true for valid room name', () => {
|
|
checkValidator.isValidRoomName('Room1').should.be.true();
|
|
checkValidator.isValidRoomName('ConferenceRoom').should.be.true();
|
|
checkValidator.isValidRoomName('Room_123').should.be.true();
|
|
checkValidator.isValidRoomName('30521HungryHat').should.be.true();
|
|
checkValidator.isValidRoomName('dbc4a9d9-6879-479a-b8fe-cedaad176b0d').should.be.true();
|
|
});
|
|
|
|
it('should return false for room name with path traversal', () => {
|
|
checkValidator.isValidRoomName('../etc/passwd').should.be.false();
|
|
checkValidator.isValidRoomName('..\\etc\\passwd').should.be.false();
|
|
checkValidator.isValidRoomName('Room/../../etc').should.be.false();
|
|
checkValidator.isValidRoomName('Room\\..\\..\\etc').should.be.false();
|
|
});
|
|
|
|
it('should return true for room names with special characters that do not imply path traversal', () => {
|
|
checkValidator.isValidRoomName('Room_@!#$%^&*()').should.be.true();
|
|
checkValidator.isValidRoomName('Room-Name').should.be.true();
|
|
checkValidator.isValidRoomName('Room.Name').should.be.true();
|
|
});
|
|
});
|
|
|
|
describe('3. Handle path traversal', () => {
|
|
it('should return false for strings without path traversal', () => {
|
|
checkValidator.hasPathTraversal('Room1').should.be.false();
|
|
checkValidator.hasPathTraversal('Rec_Test.webm').should.be.false();
|
|
checkValidator.hasPathTraversal('simple/path').should.be.false();
|
|
});
|
|
|
|
it('should return true for strings with path traversal', () => {
|
|
checkValidator.hasPathTraversal('../etc/passwd').should.be.true();
|
|
checkValidator.hasPathTraversal('..\\etc\\passwd').should.be.true();
|
|
checkValidator.hasPathTraversal('Room/../../etc').should.be.true();
|
|
checkValidator.hasPathTraversal('Room\\..\\..\\etc').should.be.true();
|
|
});
|
|
|
|
it('should return false for strings with ".." that do not indicate path traversal', () => {
|
|
checkValidator.hasPathTraversal('Room..').should.be.false();
|
|
checkValidator.hasPathTraversal('Rec..webm').should.be.false();
|
|
checkValidator.hasPathTraversal('NoPathTraversalHere..').should.be.false();
|
|
});
|
|
|
|
it('should return true for complex path traversal patterns', () => {
|
|
checkValidator.hasPathTraversal('....//').should.be.true();
|
|
checkValidator.hasPathTraversal('..\\..\\').should.be.true();
|
|
checkValidator.hasPathTraversal('.../../').should.be.true();
|
|
});
|
|
});
|
|
});
|