coolify/tests/Feature/Livewire/ApplicationGeneralDockerRegistryImageValidationTest.php

<?php

use App\Livewire\Project\Application\General;

it('uses safe domain validation rules in the application general form', function () {
    $component = new General;
    $method = new ReflectionMethod($component, 'rules');
    $rules = $method->invoke($component);

    $validator = validator([
        'fqdn' => 'http://$(whoami).example.com',
    ], [
        'fqdn' => $rules['fqdn'],
    ]);

    expect($validator->fails())->toBeTrue()
        ->and($validator->errors()->has('fqdn'))->toBeTrue();
});

it('uses safe docker compose service domain validation rules in the application general form', function () {
    $component = new General;
    $method = new ReflectionMethod($component, 'rules');
    $rules = $method->invoke($component);

    $validator = validator([
        'parsedServiceDomains' => [
            'app' => [
                'domain' => 'http://$(whoami).example.com',
            ],
        ],
    ], [
        'parsedServiceDomains.*.domain' => $rules['parsedServiceDomains.*.domain'],
    ]);

    expect($validator->fails())->toBeTrue()
        ->and($validator->errors()->has('parsedServiceDomains.app.domain'))->toBeTrue();
});

it('uses safe docker registry image validation rules in the application general form', function () {
    $component = new General;
    $method = new ReflectionMethod($component, 'rules');
    $rules = $method->invoke($component);

    $validator = validator([
        'dockerRegistryImageName' => 'coolify/poc$(touch /tmp/pwned)',
        'dockerRegistryImageTag' => 'latest$(touch /tmp/pwned)',
    ], [
        'dockerRegistryImageName' => $rules['dockerRegistryImageName'],
        'dockerRegistryImageTag' => $rules['dockerRegistryImageTag'],
    ]);

    expect($validator->fails())->toBeTrue()
        ->and($validator->errors()->has('dockerRegistryImageName'))->toBeTrue()
        ->and($validator->errors()->has('dockerRegistryImageTag'))->toBeTrue();
});