diff --git a/Makefile b/Makefile index 1a8f2d22..c479a7c2 100644 --- a/Makefile +++ b/Makefile @@ -152,6 +152,7 @@ NO_CONCURRENCY=false # health # libreoffice # libreoffice-convert +# libreoffice-ssrf # output-filename # pdfengines # pdfengines-convert diff --git a/test/integration/README.md b/test/integration/README.md index 97007ab6..d6d99aa2 100644 --- a/test/integration/README.md +++ b/test/integration/README.md @@ -26,7 +26,7 @@ Available tags: | Group | Tags | | ----------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Chromium | `chromium`, `chromium-concurrent`, `chromium-convert-html`, `chromium-convert-markdown`, `chromium-convert-url`, `chromium-screenshot-html`, `chromium-screenshot-markdown`, `chromium-screenshot-url`, `chromium-ssrf` | -| LibreOffice | `libreoffice`, `libreoffice-convert` | +| LibreOffice | `libreoffice`, `libreoffice-convert`, `libreoffice-ssrf` | | PDF Engines | `pdfengines`, `pdfengines-convert`, `pdfengines-merge`, `merge`, `pdfengines-split`, `split`, `pdfengines-flatten`, `flatten`, `pdfengines-rotate`, `rotate`, `pdfengines-embed`, `embed`, `pdfengines-encrypt`, `encrypt`, `pdfengines-watermark`, `watermark`, `pdfengines-stamp`, `stamp`, `pdfengines-metadata`, `metadata`, `pdfengines-bookmarks`, `bookmarks` | | Infra | `health`, `debug`, `root`, `version`, `output-filename`, `prometheus-metrics`, `webhook`, `download-from` | diff --git a/test/integration/features/libreoffice_convert.feature b/test/integration/features/libreoffice_convert.feature index cc9c4fc7..4edce46b 100644 --- a/test/integration/features/libreoffice_convert.feature +++ b/test/integration/features/libreoffice_convert.feature @@ -942,7 +942,7 @@ Feature: /forms/libreoffice/convert # An embedded image is stored inside the document, not linked, so blocking # untrusted linked content leaves it untouched. Guards against over-blocking. - @libreoffice-linked-content + @libreoffice-ssrf Scenario: POST /forms/libreoffice/convert (Embedded Image Survives) Given I have a default Gotenberg container When I make a "POST" request to Gotenberg at the "/forms/libreoffice/convert" endpoint with the following form data and header(s): @@ -955,7 +955,7 @@ Feature: /forms/libreoffice/convert # An uploaded document always loads from an untrusted location, so soffice # refuses to resolve any content it links (absolute file:// path or external # URL). Closes the SSRF and local-file-read vector. - @libreoffice-linked-content + @libreoffice-ssrf Scenario: POST /forms/libreoffice/convert (Linked External Resource Blocked) Given I have a default Gotenberg container When I make a "POST" request to Gotenberg at the "/forms/libreoffice/convert" endpoint with the following form data and header(s):