diff options
Diffstat (limited to 'test/spec_directory.rb')
| -rw-r--r-- | test/spec_directory.rb | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/test/spec_directory.rb b/test/spec_directory.rb index 6ba0d406..42bdea9f 100644 --- a/test/spec_directory.rb +++ b/test/spec_directory.rb @@ -63,6 +63,13 @@ describe Rack::Directory do assert_match(res, /passed!/) end + it "serve uri with URL encoded null byte (%00) in filenames" do + res = Rack::MockRequest.new(Rack::Lint.new(app)) + .get("/cgi/test%00") + + res.must_be :bad_request? + end + it "not allow directory traversal" do res = Rack::MockRequest.new(Rack::Lint.new(app)). get("/cgi/../test") |