about summary refs log tree commit diff
path: root/spec/services/verify_link_service_spec.rb
diff options
context:
space:
mode:
authorClaire <claire.github-309c@sitedethib.com>2023-01-25 21:58:31 +0100
committerGitHub <noreply@github.com>2023-01-25 21:58:31 +0100
commit7acf26e7778f8bb2b62c61904547dec75723c203 (patch)
tree036948c5d0eb01bf9ae18d612d965ac9c9b89fae /spec/services/verify_link_service_spec.rb
parent368d6fe54f94ad2ecd2a1c1e7e5a2359dc37ad30 (diff)
parent20934363492db6a33bf89726444c7a41eaa8d854 (diff)
Merge pull request #2094 from ClearlyClaire/glitch-soc/merge-upstream
Merge upstream changes
Diffstat (limited to 'spec/services/verify_link_service_spec.rb')
-rw-r--r--spec/services/verify_link_service_spec.rb22
1 files changed, 22 insertions, 0 deletions
diff --git a/spec/services/verify_link_service_spec.rb b/spec/services/verify_link_service_spec.rb
index 391560f1c..8f65f3a84 100644
--- a/spec/services/verify_link_service_spec.rb
+++ b/spec/services/verify_link_service_spec.rb
@@ -150,5 +150,27 @@ RSpec.describe VerifyLinkService, type: :service do
         expect(field.verified?).to be true
       end
     end
+
+    context 'when the link contains a link with a missing protocol slash' do
+      # This was seen in the wild where a user had three pages:
+      # 1. their mastodon profile, which linked to github and the personal website
+      # 2. their personal website correctly linking back to mastodon
+      # 3. a github profile that was linking to the personal website, but with
+      #    a malformed protocol of http:/
+      #
+      # This caused link verification between the mastodon profile and the
+      # website to fail.
+      #
+      # apparently github allows the user to enter website URLs with a single
+      # slash and makes no attempts to correct that.
+      let(:html) { '<a href="http:/unrelated.example">Hello</a>' }
+
+      it 'does not crash' do
+        # We could probably put more effort into perhaps auto-correcting the
+        # link and following it anyway, but at the very least we shouldn't let
+        # exceptions bubble up
+        expect(field.verified?).to be false
+      end
+    end
   end
 end