TestContextRenderAndEscapeAttachment() — gin Function Reference

Architecture documentation for the TestContextRenderAndEscapeAttachment() function in context_test.go from the gin codebase.

Function go GinCore Context

Entity Profile

GinCore→ Context→ TestContextRenderAndEscapeAttachment() — gin Function Reference

Dependency Diagram

graph TD
  f09875c2_6c7b_9553_efe1_d2d930c55826["TestContextRenderAndEscapeAttachment()"]
  ebe0ae48_a62b_a38f_5bac_5bbbd96fc508["context_test.go"]
  f09875c2_6c7b_9553_efe1_d2d930c55826 -->|defined in| ebe0ae48_a62b_a38f_5bac_5bbbd96fc508
  style f09875c2_6c7b_9553_efe1_d2d930c55826 fill:#6366f1,stroke:#818cf8,color:#fff

Relationship Graph

Source Code

context_test.go lines 1458–1470

func TestContextRenderAndEscapeAttachment(t *testing.T) {
	w := httptest.NewRecorder()
	c, _ := CreateTestContext(w)
	maliciousFilename := "tampering_field.sh\"; \\\"; dummy=.go"
	actualEscapedResponseFilename := "tampering_field.sh\\\"; \\\\\\\"; dummy=.go"

	c.Request, _ = http.NewRequest(http.MethodGet, "/", nil)
	c.FileAttachment("./gin.go", maliciousFilename)

	assert.Equal(t, 200, w.Code)
	assert.Contains(t, w.Body.String(), "func New(opts ...OptionFunc) *Engine {")
	assert.Equal(t, fmt.Sprintf("attachment; filename=\"%s\"", actualEscapedResponseFilename), w.Header().Get("Content-Disposition"))
}