public void WillNotAllowLocalhostRedirects(string sourceUrl, string destinationUrl) { var redirectPolicy = new NoLessSecureDestinationRedirectPolicy(); Assert.False(redirectPolicy.IsAllowed(new Uri(sourceUrl), new Uri(destinationUrl))); }
public void WillOnlyAllowSafeRedirects(string sourceUrl, string destinationUrl, bool expectedResult) { var redirectPolicy = new NoLessSecureDestinationRedirectPolicy(); Assert.Equal(expectedResult, redirectPolicy.IsAllowed(new Uri(sourceUrl), new Uri(destinationUrl))); }