public RedirectionUriValidator(IProvidesApplicationBaseUri baseUriProvider)
{
if (baseUriProvider == null)
{
throw new ArgumentNullException(nameof(baseUriProvider));
}
this.baseUriProvider = baseUriProvider;
uriParser = new RedirectUriParser();
}
public void IsValid_returns_false_if_uri_string_is_outside_base_url_path([Frozen] IProvidesApplicationBaseUri baseUriProvider,
RedirectionUriValidator sut)
{
// Arrange
Mock.Get(baseUriProvider)
.Setup(x => x.GetBaseUri())
.Returns(new Uri("http://example.com/site_root/"));
// Act
var result = sut.IsValid("/bad/path");
// Assert
Assert.That(result, Is.False);
}
public void IsValid_returns_false_if_uri_string_is_not_relative_to_base([Frozen] IProvidesApplicationBaseUri baseUriProvider,
RedirectionUriValidator sut)
{
// Arrange
Mock.Get(baseUriProvider)
.Setup(x => x.GetBaseUri())
.Returns(new Uri("http://example.com/"));
// Act
var result = sut.IsValid("http://badwebsite.com/attack_page");
// Assert
Assert.That(result, Is.False);
}
public void IsValid_returns_true_if_uri_string_is_a_domain_relative_uri([Frozen] IProvidesApplicationBaseUri baseUriProvider,
RedirectionUriValidator sut)
{
// Arrange
Mock.Get(baseUriProvider)
.Setup(x => x.GetBaseUri())
.Returns(new Uri("http://example.com/"));
// Act
var result = sut.IsValid("/nice/uri");
// Assert
Assert.That(result, Is.True);
}
public TicketUriProvider(UrlHelper helper, ILog logger, IProvidesApplicationBaseUri baseUriProvider)
{
if (baseUriProvider == null)
{
throw new ArgumentNullException(nameof(baseUriProvider));
}
if (logger == null)
{
throw new ArgumentNullException(nameof(logger));
}
if (helper == null)
{
throw new ArgumentNullException(nameof(helper));
}
this.helper = helper;
this.logger = logger;
this.baseUriProvider = baseUriProvider;
}
