aboutsummaryrefslogtreecommitdiffstats
path: root/tests
diff options
context:
space:
mode:
Diffstat (limited to 'tests')
-rw-r--r--tests/archive.rs28
1 files changed, 28 insertions, 0 deletions
diff --git a/tests/archive.rs b/tests/archive.rs
index b8def22..e6d0263 100644
--- a/tests/archive.rs
+++ b/tests/archive.rs
@@ -56,3 +56,31 @@ fn test_tar_archives(#[with(&["-g"])] server: TestServer) -> Result<(), Error> {
Ok(())
}
+
+#[rstest]
+#[case(server(&["--disable-indexing", "--enable-tar-gz", "--enable-tar", "--enable-zip"]))]
+fn archives_are_disabled_when_indexing_disabled(#[case] server: TestServer) -> Result<(), Error> {
+ // Ensure the links to the archives are not present
+ let body = reqwest::blocking::get(server.url())?;
+ let parsed = Document::from_read(body)?;
+ assert!(parsed
+ .find(Text)
+ .all(|x| x.text() != "Download .tar.gz" && x.text() != "Download .tar"));
+
+ // Try to download anyway, ensure it's forbidden
+ // We assert for not found to make sure we aren't leaking information about directories that do exist.
+ assert_eq!(
+ reqwest::blocking::get(server.url().join("?download=tar_gz")?)?.status(),
+ StatusCode::NOT_FOUND
+ );
+ assert_eq!(
+ reqwest::blocking::get(server.url().join("?download=tar")?)?.status(),
+ StatusCode::NOT_FOUND
+ );
+ assert_eq!(
+ reqwest::blocking::get(server.url().join("?download=zip")?)?.status(),
+ StatusCode::NOT_FOUND
+ );
+
+ Ok(())
+}