from app.reporting import content_disposition, safe_report_filename


def test_report_filenames_are_safe_and_support_unicode() -> None:
    filename = safe_report_filename('repo/evil\r\n"<é>', "html")
    disposition = content_disposition(filename)

    assert filename.startswith("repopulse-repo_evil___")
    assert "\r" not in disposition
    assert "\n" not in disposition
    assert 'filename="' in disposition
    assert "filename*=UTF-8''" in disposition