IntenseWebs/discourse
3
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2024-11-25 10:20:58 -06:00
Code Issues Packages Projects Releases Wiki Activity

Add extra protection in Upload#get_from_url.

Browse Source 
In case the extension goes missing from the URL.
This commit is contained in:
Guo Xiang Tan 2018-09-12 00:12:14 -07:00
parent b3469bea2d
commit 3884e99e88
2 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/models/upload.rb
View File

@ -177,7 +177,7 @@ class Upload < ActiveRecord::Base
end
return if uri&.path.blank?
data = uri.path.match(/(\/original\/\dX[\/\.\w]*\/([a-zA-Z0-9]+)[\.\w]+)/)
data = uri.path.match(/(\/original\/\dX[\/\.\w]*\/([a-zA-Z0-9]+)[\.\w]*)/)
return if data.blank?
sha1 = data[2]
upload = nil

9
spec/models/upload_spec.rb
View File

@ -82,9 +82,16 @@ describe Upload do
expect(Upload.get_from_url(upload.url)).to eq(upload)
end
describe 'for an extensionless url' do
let(:url) { "/uploads/default/original/1X/#{sha1}" }
it 'should return the right upload' do
expect(Upload.get_from_url(upload.url)).to eq(upload)
end
end
describe 'for a url without a tree' do
let(:url) { "/uploads/default/original/1X/#{sha1}.png" }
let(:upload) { Fabricate(:upload, url: url, sha1: sha1) }
it 'should return the right upload' do
expect(Upload.get_from_url(upload.url)).to eq(upload)