using System.Reflection; using JobTrackerApi.Controllers; using Xunit; namespace JobTrackerApi.Tests; public sealed class AttachmentsControllerTests { [Fact] public void Allowed_extensions_include_common_document_and_image_formats() { var field = typeof(AttachmentsController).GetField("AllowedExtensions", BindingFlags.NonPublic | BindingFlags.Static); Assert.NotNull(field); var allowed = Assert.IsAssignableFrom(field!.GetValue(null)); var values = allowed.Cast().ToHashSet(StringComparer.OrdinalIgnoreCase); Assert.Contains(".pdf", values); Assert.Contains(".docx", values); Assert.Contains(".png", values); Assert.DoesNotContain(".exe", values); } }