snipe-it/tests/Feature/Importing/Ui/ImportTest.php

<?php

namespace Tests\Feature\Importing\Ui;

use App\Models\User;
use Illuminate\Http\UploadedFile;
use PHPUnit\Framework\Attributes\Test;
use Tests\TestCase;

class ImportTest extends TestCase
{
    public function test_page_renders()
    {
        $this->actingAs(User::factory()->superuser()->create())
            ->get(route('imports.index'))
            ->assertOk();
    }

    public function test_store_international_asset(): void
    {
        $evil_string = 'це'; // cyrillic - windows-1251 (ONE)
        $csv_contents = "a,b,c\n$evil_string,$evil_string,$evil_string\n";

        // now, deliberately transform our UTF-8 into Windows-1251 so we can test out the character-set detection
        $transliterated_contents = iconv('UTF-8', 'WINDOWS-1251', $csv_contents);
        // \Log::error("RAW TRANSLITERATED CONTENTS: $transliterated_contents"); // should show 'unicode missing glyph' symbol in logs.

        $this->actingAsForApi(User::factory()->superuser()->create());
        $results = $this->post(route('api.imports.store'), ['files' => [UploadedFile::fake()->createWithContent('myname.csv', $transliterated_contents)]])
            ->assertOk()
            ->assertJsonStructure([
                'files' => [
                    [
                        'created_at',
                        'field_map',
                        'file_path',
                        'filesize',
                        'first_row',
                        'header_row',
                        'id',
                        'import_type',
                        'name',
                    ],
                ],
            ]);
        $this->assertEquals($evil_string, $results->json()['files'][0]['first_row'][0]);
    }

    public function test_store_international_asset_misparse(): void
    {
        $evil_maker = function ($arr) {
            $results = '';
            foreach ($arr as $thing) {
                $results .= chr($thing);
            }

            return $results;
        };

        // 0xC0 makes it 'not unicode', and 0xFF makes it 'likely WINDOWS-1251', and 0x98 at the end makes it 'not-valid-Windows-1251'
        $evil_content = $evil_maker([0xC0, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0x00, 0x01, 0x02, 0x03, 0x98]);

        $this->actingAsForApi(User::factory()->superuser()->create());
        $results = $this->post(route('api.imports.store'), ['files' => [UploadedFile::fake()->createWithContent('myname.csv', $evil_content)]])
            ->assertStatus(422)
            ->assertStatusMessageIs('error')
            ->assertMessagesAre(trans('admin/hardware/message.import.transliterate_failure', ['encoding' => 'windows-1251']));
    }
}