reactive-mail-server/backend/src/test/java/com/mailserver/controller/MailControllerTest.java

package com.mailserver.controller;

import org.junit.jupiter.api.Test;

import static org.assertj.core.api.Assertions.assertThat;

class MailControllerTest {

    @Test
    void attachmentNameCannotLeaveTheFolder() {
        assertThat(MailController.safeFilename("../../etc/passwd")).isEqualTo("passwd");
        assertThat(MailController.safeFilename("..\\..\\boot.ini")).isEqualTo("boot.ini");
        assertThat(MailController.safeFilename("..")).isEqualTo("file");
        assertThat(MailController.safeFilename("a\"b\r\n.txt")).isEqualTo("ab.txt");
        assertThat(MailController.safeFilename(null)).isEqualTo("file");
        assertThat(MailController.safeFilename("report 2026.pdf")).isEqualTo("report 2026.pdf");
    }
}