0
0
Fork 0

Raise an error for remote url in StatusFinder (#4776)

* Raise an error for remote url in StatusFinder

Previous implementation had allowed remote url with status id which also exists on local.

Then that bug leads /api/web/embed to return wrong embed url.

* Fix oembed_controller_spec
This commit is contained in:
unarist 2017-09-03 00:42:47 +09:00 committed by Eugen Rochko
parent bfa7f9ebf2
commit 6a4e2db661
3 changed files with 13 additions and 0 deletions

View file

@ -34,6 +34,16 @@ describe StatusFinder do
end
end
context 'with a remote url even if id exists on local' do
let(:status) { Fabricate(:status) }
let(:url) { "https://example.com/users/test/statuses/#{status.id}" }
subject { described_class.new(url) }
it 'raises an error' do
expect { subject.status }.to raise_error(ActiveRecord::RecordNotFound)
end
end
context 'with a plausible url' do
let(:url) { 'https://example.com/users/test/updates/123/embed' }
subject { described_class.new(url) }