torrust-actix 4.2.3

A rich, fast and efficient Bittorrent Tracker.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90

#![allow(clippy::module_inception)]

#[cfg(test)]
mod security_tests {
    use crate::security::security::*;

    #[test]
    fn test_generate_api_key_length() {
        let key = generate_secure_api_key();
        assert!(key.len() >= 32);
    }

    #[test]
    fn test_api_key_strength_valid() {
        assert!(validate_api_key_strength("ThisIsAVeryStrongKey123!@#abcXYZ456"));
        assert!(validate_api_key_strength("abc123DEF456ghi789JKLmnopqrsTUV1234!"));
    }

    #[test]
    fn test_api_key_weak() {
        assert!(!validate_api_key_strength("weak"));
        assert!(!validate_api_key_strength("aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"));
    }

    #[test]
    fn test_constant_time_eq_equal() {
        assert!(constant_time_eq("test_key", "test_key"));
    }

    #[test]
    fn test_constant_time_eq_not_equal() {
        assert!(!constant_time_eq("test_key", "different_key"));
    }

    #[test]
    fn test_constant_time_eq_different_length() {
        assert!(!constant_time_eq("test", "test_key"));
    }

    #[test]
    fn test_validate_file_path_reject_traversal() {
        assert!(validate_file_path("../../../etc/passwd").is_err());
        assert!(validate_file_path("./config").is_err());
        assert!(validate_file_path(".\\config").is_err());
    }

    #[test]
    fn test_validate_file_path_reject_absolute() {
        assert!(validate_file_path("/etc/cert.pem").is_err());
        assert!(validate_file_path("C:\\certs\\cert.pem").is_err());
    }

    #[test]
    fn test_validate_file_path_accept_valid() {
        assert!(validate_file_path("certs/cert.pem").is_ok());
        assert!(validate_file_path("cert.pem").is_ok());
    }

    #[test]
    fn test_validate_peer_message_size() {
        let large_message = "A".repeat(300_000);
        assert!(validate_peer_message(&large_message).is_err());
    }

    #[test]
    fn test_validate_peer_message_content() {
        assert!(validate_peer_message("normal message").is_ok());
        assert!(validate_peer_message("v=0\r\no=- 0 0 IN IP4 127.0.0.1\r\n").is_ok());
    }

    #[test]
    fn test_validate_peer_message_suspicious() {
        assert!(validate_peer_message("<script>alert('xss')</script>").is_err());
        assert!(validate_peer_message("javascript:alert(1)").is_err());
    }

    #[test]
    fn test_validate_info_hash() {
        assert!(validate_info_hash_hex("3b245504cf5f11bb3ee84da598e4e5b78e5c2dde").is_ok());
        assert!(validate_info_hash_hex("invalid!hash").is_err());
    }

    #[test]
    fn test_validate_remote_ip() {
        assert!(validate_remote_ip("192.168.1.1", false).is_err());
        assert!(validate_remote_ip("127.0.0.1", false).is_err());
        assert!(validate_remote_ip("8.8.8.8", false).is_ok());
        assert!(validate_remote_ip("192.168.1.1", true).is_ok());
    }
}