reject .acl with bad contentType

Author: bourgeoa

lib/ldp.js

@@ -143,6 +143,12 @@ class LDP {
       if (slug.match(/\/|\||:/)) {
         throw error(400, 'The name of new file POSTed may not contain : | or /')
       }
+      // not to break pod ACL must have text/turtle contentType
+      if (slug.endsWith(this.suffixAcl) || extension === this.suffixAcl) {
+        if (contentType !== this.aclContentType) {
+          throw error(415, 'POST contentType for ACL must be text/turtle')
+        }
+      }
     }
     // Containers should not receive an extension
     if (container) {
@@ -214,6 +220,11 @@ class LDP {
         'PUT request require a valid content type via the Content-Type header')
     }
 
+    // not to break pod : url ACL must have text/turtle contentType
+    if ((url.url || url).endsWith(this.suffixAcl) && contentType !== this.aclContentType) {
+      throw error(415, 'PUT contentType for ACL must be text-turtle')
+    }
+
     // First check if we are above quota
     let isOverQuota
     try {