1 files changed, 129 insertions, 0 deletions
diff --git a/tests/lib/Files/PathVerificationTest.php b/tests/lib/Files/PathVerificationTest.php
new file mode 100644
index 00000000000..e13dbe4f207
--- /dev/null
+++ b/tests/lib/Files/PathVerificationTest.php
@@ -0,0 +1,129 @@
+<?php
+
+/**
+ * SPDX-FileCopyrightText: 2016-2024 Nextcloud GmbH and Nextcloud contributors
+ * SPDX-FileCopyrightText: 2016 ownCloud, Inc.
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace Test\Files;
+
+use OC\Files\Storage\Local;
+use OC\Files\View;
+use OCP\Files\InvalidPathException;
+use OCP\IDBConnection;
+use OCP\Server;
+
+/**
+ * Class PathVerificationTest
+ *
+ * @group DB
+ *
+ * @package Test\Files
+ */
+class PathVerificationTest extends \Test\TestCase {
+	/**
+	 * @var View
+	 */
+	private $view;
+
+	protected function setUp(): void {
+		parent::setUp();
+		$this->view = new View();
+	}
+
+
+	public function testPathVerificationFileNameTooLong(): void {
+		$this->expectException(InvalidPathException::class);
+		$this->expectExceptionMessage('Filename is too long');
+
+		$fileName = str_repeat('a', 500);
+		$this->view->verifyPath('', $fileName);
+	}
+
+
+	#[\PHPUnit\Framework\Attributes\DataProvider('providesEmptyFiles')]
+	public function testPathVerificationEmptyFileName($fileName): void {
+		$this->expectException(InvalidPathException::class);
+		$this->expectExceptionMessage('Empty filename is not allowed');
+
+		$this->view->verifyPath('', $fileName);
+	}
+
+	public static function providesEmptyFiles(): array {
+		return [
+			[''],
+			[' '],
+		];
+	}
+
+	#[\PHPUnit\Framework\Attributes\DataProvider('providesDotFiles')]
+	public function testPathVerificationDotFiles($fileName): void {
+		$this->expectException(InvalidPathException::class);
+		$this->expectExceptionMessage('Dot files are not allowed');
+
+		$this->view->verifyPath('', $fileName);
+	}
+
+	public static function providesDotFiles(): array {
+		return [
+			['.'],
+			['..'],
+			[' .'],
+			[' ..'],
+			['. '],
+			['.. '],
+			[' . '],
+			[' .. '],
+		];
+	}
+
+	#[\PHPUnit\Framework\Attributes\DataProvider('providesAstralPlane')]
+	public function testPathVerificationAstralPlane($fileName): void {
+		$connection = Server::get(IDBConnection::class);
+
+		if (!$connection->supports4ByteText()) {
+			$this->expectException(InvalidPathException::class);
+			$this->expectExceptionMessage('File name contains at least one invalid character');
+		} else {
+			$this->addToAssertionCount(1);
+		}
+
+		$this->view->verifyPath('', $fileName);
+	}
+
+	public static function providesAstralPlane(): array {
+		return [
+			// this is the monkey emoji - http://en.wikipedia.org/w/index.php?title=%F0%9F%90%B5&redirect=no
+			['🐵'],
+			['🐵.txt'],
+			['txt.💩'],
+			['💩🐵.txt'],
+			['💩🐵'],
+		];
+	}
+
+	#[\PHPUnit\Framework\Attributes\DataProvider('providesValidPosixPaths')]
+	public function testPathVerificationValidPaths($fileName): void {
+		$storage = new Local(['datadir' => '']);
+
+		self::invokePrivate($storage, 'verifyPosixPath', [$fileName]);
+		// nothing thrown
+		$this->addToAssertionCount(1);
+	}
+
+	public static function providesValidPosixPaths(): array {
+		return [
+			['simple'],
+			['simple.txt'],
+			['\''],
+			['`'],
+			['%'],
+			['()'],
+			['[]'],
+			['!'],
+			['$'],
+			['_'],
+		];
+	}
+}