12 lines
399 B
Go
12 lines
399 B
Go
package backend
|
|
|
|
import "testing"
|
|
|
|
func TestCleanMailHeaderRejectsLineBreaks(t *testing.T) {
|
|
if _, err := cleanMailHeader("Betreff\r\nBcc: attacker@example.com"); err == nil {
|
|
t.Fatal("expected CRLF header injection to be rejected")
|
|
}
|
|
if got, err := cleanMailHeader(" Normaler Betreff "); err != nil || got != "Normaler Betreff" {
|
|
t.Fatalf("cleanMailHeader returned %q, %v", got, err)
|
|
}
|
|
}
|