laravel-at / laravel-image-sanitize

tests/RequestHandlerTest.php

<?php

namespace LaravelAt\ImageSanitize\Tests;

use Illuminate\Http\Request;
use Illuminate\Http\UploadedFile;
use LaravelAt\ImageSanitize\ImageSanitize;
use LaravelAt\ImageSanitize\RequestHandler;

class RequestHandlerTest extends TestCase
{
    /**
     * @var RequestHandler
     */
    protected $handler;
    /**
     * @var ImageSanitize
     */
    protected $sanitizer;

    protected function setUp(): void
    {
        parent::setUp();

        $this->handler = $this->app->make(RequestHandler::class);

The method make() does not exist on null.

        $this->sanitizer = $this->app->make(ImageSanitize::class);
    }

    /** @test */
    public function it_detects_images_in_the_request(): void
    {
        $request = new Request;

        $request->files->set('image', UploadedFile::fake()->image('image.jpeg'));
        $request->files->set('pdf', UploadedFile::fake()->create('document.pdf'));

        $this->assertArrayHasKey(
            'image',
            $this->handler->getImages($request->allFiles())
        );
        $this->assertArrayNotHasKey(
            'pdf',
            $this->handler->getImages($request->allFiles())
        );
    }

    /** @test */
    public function it_swaps_the_file_content_with_the_sanitized_string(): void
    {
        $uploadedFile = UploadedFile::fake()->image('malicious.jpeg', '100', '100');
        file_put_contents($uploadedFile->getPathname(), file_get_contents(__DIR__.'/stubs/exploit.jpeg'));

        $request = new Request;
        $request->files->set('image', $uploadedFile);

        $maliciousImageContent = $request->file('image')->get();
        $this->handler->handle($request);

        $sanitizedImageContent = $request->file('image')->get();
        $this->assertNotEquals(
            $maliciousImageContent,
            $sanitizedImageContent
        );
        $this->assertFalse($this->sanitizer->detect($sanitizedImageContent));
    }
}