013fb73068
Use hostmacher to replace matchlist. And we introduce a better DialContext to do a full host/IP check, otherwise the attackers can still bypass the allow/block list by a 302 redirection.
23 lines
489 B
Go
23 lines
489 B
Go
// Copyright 2021 The Gitea Authors. All rights reserved.
|
|
// Use of this source code is governed by a MIT-style
|
|
// license that can be found in the LICENSE file.
|
|
|
|
package lfs
|
|
|
|
import (
|
|
"net/url"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
)
|
|
|
|
func TestNewClient(t *testing.T) {
|
|
u, _ := url.Parse("file:///test")
|
|
c := NewClient(u, nil)
|
|
assert.IsType(t, &FilesystemClient{}, c)
|
|
|
|
u, _ = url.Parse("https://test.com/lfs")
|
|
c = NewClient(u, nil)
|
|
assert.IsType(t, &HTTPClient{}, c)
|
|
}
|