silverstripe-framework/tests/php/Forms/HTMLEditor/HTMLEditorFieldToolbarTest.php

<?php

namespace SilverStripe\Forms\Tests\HTMLEditor;

use SilverStripe;
use SilverStripe\Assets\File;
use SilverStripe\Assets\Image;
use SilverStripe\Assets\Tests\Storage\AssetStoreTest\TestAssetStore;
use SilverStripe\Control\HTTPResponse_Exception;
use SilverStripe\Dev\SapphireTest;
use SilverStripe\Forms\HTMLEditor\HTMLEditorField_Toolbar;
use SilverStripe\Forms\Tests\HTMLEditor\HTMLEditorFieldToolbarTest\Toolbar;

class HTMLEditorFieldToolbarTest extends SapphireTest
{

    protected static $fixture_file = 'HTMLEditorFieldToolbarTest.yml';

    /**
     * @return Toolbar
     */
    protected function getToolbar()
    {
        return new Toolbar(null, '/');
    }

    public function setUp()
    {
        parent::setUp();

        HTMLEditorField_Toolbar::config()->set('fileurl_scheme_whitelist', array('http'));
        HTMLEditorField_Toolbar::config()->set('fileurl_domain_whitelist', array('example.com'));

        // Filesystem mock
        TestAssetStore::activate(__CLASS__);

        // Load up files
        /** @var File $file1 */
        $file1 = $this->objFromFixture(File::class, 'example_file');
        $file1->setFromString(str_repeat('x', 1000), $file1->Name);
        $file1->write();

        /** @var Image $image1 */
        $image1 = $this->objFromFixture(Image::class, 'example_image');
        $image1->setFromLocalFile(
            __DIR__ . '/HTMLEditorFieldTest/images/example.jpg',
            'folder/subfolder/example.jpg'
        );
        $image1->write();
    }

    public function testValidLocalReference()
    {
        /** @var File $exampleFile */
        $exampleFile = $this->objFromFixture(File::class, 'example_file');
        $expectedUrl = $exampleFile->AbsoluteLink();
        HTMLEditorField_Toolbar::config()->set(
            'fileurl_domain_whitelist',
            [
                'example.com',
                strtolower(parse_url($expectedUrl, PHP_URL_HOST))
            ]
        );

        list(, $url) = $this->getToolbar()->viewfile_getRemoteFileByURL($exampleFile->AbsoluteLink());
        $this->assertEquals($expectedUrl, $url);
    }

    public function testValidScheme()
    {
        list(, $url) = $this->getToolbar()->viewfile_getRemoteFileByURL('http://example.com/test.pdf');
        $this->assertEquals($url, 'http://example.com/test.pdf');
    }

    public function testInvalidScheme()
    {
        $this->setExpectedException(HTTPResponse_Exception::class);
        $this->getToolbar()->viewfile_getRemoteFileByURL('nosuchscheme://example.com/test.pdf');
    }

    public function testValidDomain()
    {
        list(, $url) = $this->getToolbar()->viewfile_getRemoteFileByURL('http://example.com/test.pdf');
        $this->assertEquals($url, 'http://example.com/test.pdf');
    }

    public function testInvalidDomain()
    {
        $this->setExpectedException(HTTPResponse_Exception::class);
        $this->getToolbar()->viewfile_getRemoteFileByURL('http://evil.com/test.pdf');
    }
}