aboutsummaryrefslogtreecommitdiffstats
path: root/spec/scansion
diff options
context:
space:
mode:
authorKim Alvefur <zash@zash.se>2021-01-26 14:52:37 +0100
committerKim Alvefur <zash@zash.se>2021-01-26 14:52:37 +0100
commitea3b09dea83fd372f471dd01b87ef36566773a84 (patch)
treeabc5cd2ce959966cd704d304a4b6879ed46a8fe8 /spec/scansion
parent62f77b9ac97454a783a003c47c84761100c37237 (diff)
downloadprosody-ea3b09dea83fd372f471dd01b87ef36566773a84.tar.gz
prosody-ea3b09dea83fd372f471dd01b87ef36566773a84.zip
mod_http_file_share: Validate that filename does not contain '/'
Diffstat (limited to 'spec/scansion')
-rw-r--r--spec/scansion/http_upload.scs13
1 files changed, 13 insertions, 0 deletions
diff --git a/spec/scansion/http_upload.scs b/spec/scansion/http_upload.scs
index a683483e..ed4f1bca 100644
--- a/spec/scansion/http_upload.scs
+++ b/spec/scansion/http_upload.scs
@@ -21,6 +21,19 @@ Romeo receives:
</slot>
</iq>
+Romeo sends:
+ <iq to='upload.localhost' type='get' id='ac56d83f-a627-4732-8399-60492d1210b6' xml:lang='en'>
+ <request content-type='text/plain' filename='invalid/filename.dat' xmlns='urn:xmpp:http:upload:0' size='1000'/>
+ </iq>
+
+Romeo receives:
+ <iq id='ac56d83f-a627-4732-8399-60492d1210b6' from='upload.localhost' type='error'>
+ <error type='modify'>
+ <bad-request xmlns='urn:ietf:params:xml:ns:xmpp-stanzas'/>
+ <text xmlns='urn:ietf:params:xml:ns:xmpp-stanzas'>Invalid filename</text>
+ </error>
+ </iq>
+
Romeo disconnects
# recording ended on 2021-01-27T22:10:46Z