  it "rejects a file if named .html and is as HTML, but we're told JPG" do
    file = File.open(fixture_file("empty.html"))
    assert Paperclip::MediaTypeSpoofDetector.using(file, "empty.html", "image/jpg").spoofed?
  end
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.