Don't allow PUTS with Content-Range header
This commit is contained in:
parent
fd3293025d
commit
43ff83d26b
@ -130,6 +130,7 @@ module RemoteStorage
|
||||
end
|
||||
|
||||
def put_data(user, directory, key, data, content_type)
|
||||
server.halt 400 if server.env["HTTP_CONTENT_RANGE"]
|
||||
server.halt 409 if has_name_collision?(user, directory, key)
|
||||
|
||||
existing_metadata = redis.hgetall "rs:m:#{user}:#{directory}/#{key}"
|
||||
|
@ -129,6 +129,14 @@ describe "App" do
|
||||
metadata = redis.hgetall "rs:m:phil:food/aguacate/empanado"
|
||||
metadata.must_be_empty
|
||||
end
|
||||
|
||||
it "returns 400 when a Content-Range header is sent" do
|
||||
header "Content-Range", "bytes 0-3/3"
|
||||
|
||||
put "/phil/food/aguacate", "si"
|
||||
|
||||
last_response.status.must_equal 400
|
||||
end
|
||||
end
|
||||
end
|
||||
end
|
||||
|
Loading…
x
Reference in New Issue
Block a user