--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
tests/backend/test_http_url_guard.py v4.6.0-rc.2 (7bbe9846) Text, 1.77 KB
T8b949e# SPDX-License-Identifier: 0BSD
Tff7b72import T7ee787pytest
Tff7b72from T7ee787meshchatxT7ee787.T7ee787srcT7ee787.T7ee787backendT7ee787.T7ee787http_url_guard Tff7b72import Tb4b4b4(
Te6edf3UnsafeOutboundUrlErrorTb4b4b4,
Te6edf3normalize_loopback_http_service_baseTb4b4b4,
Tb4b4b4)
Tff7b72def Td2a8fftest_normalize_loopback_localhostTb4b4b4(Tb4b4b4)Tb4b4b4:
Tff7b72assert Tb4b4b4(
Te6edf3normalize_loopback_http_service_baseTb4b4b4(Ta5d6ff"Ta5d6ffhttp://localhost:5000Ta5d6ff"Tb4b4b4)
Tff7b72== Ta5d6ff"Ta5d6ffhttp://localhost:5000Ta5d6ff"
Tb4b4b4)
Tff7b72def Td2a8fftest_normalize_loopback_strip_pathTb4b4b4(Tb4b4b4)Tb4b4b4:
Tff7b72assert Tb4b4b4(
Te6edf3normalize_loopback_http_service_baseTb4b4b4(Ta5d6ff"Ta5d6ffhttps://127.0.0.1:5000/v1Ta5d6ff"Tb4b4b4)
Tff7b72== Ta5d6ff"Ta5d6ffhttps://127.0.0.1:5000Ta5d6ff"
Tb4b4b4)
Tff7b72def Td2a8fftest_normalize_loopback_ipv6Tb4b4b4(Tb4b4b4)Tb4b4b4:
Tff7b72assert Tb4b4b4(
Te6edf3normalize_loopback_http_service_baseTb4b4b4(Ta5d6ff"Ta5d6ffhttp://[::1]:8080/Ta5d6ff"Tb4b4b4)
Tff7b72== Ta5d6ff"Ta5d6ffhttp://[::1]:8080Ta5d6ff"
Tb4b4b4)
Tf0883e@pytestTff7b72.Td2a8ffmarkTff7b72.Td2a8ffparametrizeTb4b4b4(
Ta5d6ff"Ta5d6ffbadTa5d6ff"Tb4b4b4,
Tb4b4b4[
Ta5d6ff"Ta5d6ffhttp://192.168.1.1:5000Ta5d6ff"Tb4b4b4,
Ta5d6ff"Ta5d6ffhttp://example.comTa5d6ff"Tb4b4b4,
Ta5d6ff"Ta5d6ffftp://127.0.0.1:1Ta5d6ff"Tb4b4b4,
Ta5d6ff"Ta5d6ffhttp://127.0.0.1.evil.comTa5d6ff"Tb4b4b4,
Ta5d6ff"Ta5d6ffhttp://user:pass@127.0.0.1:1Ta5d6ff"Tb4b4b4,
Tb4b4b4]Tb4b4b4,
Tb4b4b4)
Tff7b72def Td2a8fftest_normalize_rejects_non_loopbackTb4b4b4(Te6edf3badTb4b4b4)Tb4b4b4:
Tff7b72with Te6edf3pytestTff7b72.Td2a8ffraisesTb4b4b4(Te6edf3UnsafeOutboundUrlErrorTb4b4b4)Tb4b4b4:
Te6edf3normalize_loopback_http_service_baseTb4b4b4(Te6edf3badTb4b4b4)
Tf0883e@pytestTff7b72.Td2a8ffmarkTff7b72.Td2a8ffparametrizeTb4b4b4(
Ta5d6ff"Ta5d6ffedgeTa5d6ff"Tb4b4b4,
Tb4b4b4[
Ta5d6ff"Ta5d6ffhttp://127.0.0.1:5000/Ta5d6ff"Tb4b4b4,
Ta5d6ff"Ta5d6ffhttp://127.0.0.1:5000Ta5d6ff"Tb4b4b4,
Ta5d6ff"Ta5d6ffhttps://[::1]:8080/fooTa5d6ff"Tb4b4b4,
Ta5d6ff"Ta5d6ffhttp://localhost:3000/Ta5d6ff"Tb4b4b4,
Tb4b4b4]Tb4b4b4,
Tb4b4b4)
Tff7b72def Td2a8fftest_normalize_accepts_loopback_variantsTb4b4b4(Te6edf3edgeTb4b4b4)Tb4b4b4:
Te6edf3out Tff7b72= Te6edf3normalize_loopback_http_service_baseTb4b4b4(Te6edf3edgeTb4b4b4)
Tff7b72assert Te6edf3outTff7b72.Td2a8ffstartswithTb4b4b4(Ta5d6ff"Ta5d6ffhttp://Ta5d6ff"Tb4b4b4) Tff7b72or Te6edf3outTff7b72.Td2a8ffstartswithTb4b4b4(Ta5d6ff"Ta5d6ffhttps://Ta5d6ff"Tb4b4b4)
Tff7b72assert Ta5d6ff"Ta5d6ff..Ta5d6ff" Tff7b72not Tff7b72in Te6edf3out
Tf0883e@pytestTff7b72.Td2a8ffmarkTff7b72.Td2a8ffparametrizeTb4b4b4(
Ta5d6ff"Ta5d6ffbadTa5d6ff"Tb4b4b4,
Tb4b4b4[
Ta5d6ff"Ta5d6ff"Tb4b4b4,
Ta5d6ff"Ta5d6ff Ta5d6ff"Tb4b4b4,
Ta5d6ff"Ta5d6ffws://127.0.0.1:1Ta5d6ff"Tb4b4b4,
Ta5d6ff"Ta5d6ffhttp+unix://Tffd700%2FTa5d6fftmpTffd700%2FTa5d6ffs.sockTa5d6ff"Tb4b4b4,
Ta5d6ff"Ta5d6ffhttp://127.0.0.1Tffd700%0dTffd700%0aTa5d6ff.evil.com:80/Ta5d6ff"Tb4b4b4,
Tb4b4b4]Tb4b4b4,
Tb4b4b4)
Tff7b72def Td2a8fftest_normalize_rejects_scheme_or_crlf_injectionTb4b4b4(Te6edf3badTb4b4b4)Tb4b4b4:
Tff7b72with Te6edf3pytestTff7b72.Td2a8ffraisesTb4b4b4(Te6edf3UnsafeOutboundUrlErrorTb4b4b4)Tb4b4b4:
Te6edf3normalize_loopback_http_service_baseTb4b4b4(Te6edf3badTb4b4b4)
──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────