--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
tests/backend/test_http_url_guard.py v4.7.0-rc.6 (b465eab5) Text, 3.68 KB
T8b949e# SPDX-License-Identifier: 0BSD
Tff7b72import T7ee787pytest
Tff7b72from T7ee787meshchatxT7ee787.T7ee787srcT7ee787.T7ee787backendT7ee787.T7ee787http_url_guard Tff7b72import Tb4b4b4(
Te6edf3UnsafeOutboundUrlErrorTb4b4b4,
Te6edf3normalize_loopback_http_service_baseTb4b4b4,
Te6edf3normalize_libretranslate_http_service_baseTb4b4b4,
Tb4b4b4)
Tff7b72def Td2a8fftest_normalize_loopback_localhostTb4b4b4(Tb4b4b4)Tb4b4b4:
Tff7b72assert Tb4b4b4(
Te6edf3normalize_loopback_http_service_baseTb4b4b4(Ta5d6ff"Ta5d6ffhttp://localhost:5000Ta5d6ff"Tb4b4b4)
Tff7b72== Ta5d6ff"Ta5d6ffhttp://localhost:5000Ta5d6ff"
Tb4b4b4)
Tff7b72def Td2a8fftest_normalize_loopback_strip_pathTb4b4b4(Tb4b4b4)Tb4b4b4:
Tff7b72assert Tb4b4b4(
Te6edf3normalize_loopback_http_service_baseTb4b4b4(Ta5d6ff"Ta5d6ffhttps://127.0.0.1:5000/v1Ta5d6ff"Tb4b4b4)
Tff7b72== Ta5d6ff"Ta5d6ffhttps://127.0.0.1:5000Ta5d6ff"
Tb4b4b4)
Tff7b72def Td2a8fftest_normalize_loopback_ipv6Tb4b4b4(Tb4b4b4)Tb4b4b4:
Tff7b72assert Tb4b4b4(
Te6edf3normalize_loopback_http_service_baseTb4b4b4(Ta5d6ff"Ta5d6ffhttp://[::1]:8080/Ta5d6ff"Tb4b4b4)
Tff7b72== Ta5d6ff"Ta5d6ffhttp://[::1]:8080Ta5d6ff"
Tb4b4b4)
Tf0883e@pytestTff7b72.Td2a8ffmarkTff7b72.Td2a8ffparametrizeTb4b4b4(
Ta5d6ff"Ta5d6ffbadTa5d6ff"Tb4b4b4,
Tb4b4b4[
Ta5d6ff"Ta5d6ffhttp://192.168.1.1:5000Ta5d6ff"Tb4b4b4,
Ta5d6ff"Ta5d6ffhttp://example.comTa5d6ff"Tb4b4b4,
Ta5d6ff"Ta5d6ffftp://127.0.0.1:1Ta5d6ff"Tb4b4b4,
Ta5d6ff"Ta5d6ffhttp://127.0.0.1.evil.comTa5d6ff"Tb4b4b4,
Ta5d6ff"Ta5d6ffhttp://user:pass@127.0.0.1:1Ta5d6ff"Tb4b4b4,
Tb4b4b4]Tb4b4b4,
Tb4b4b4)
Tff7b72def Td2a8fftest_normalize_rejects_non_loopbackTb4b4b4(Te6edf3badTb4b4b4)Tb4b4b4:
Tff7b72with Te6edf3pytestTff7b72.Td2a8ffraisesTb4b4b4(Te6edf3UnsafeOutboundUrlErrorTb4b4b4)Tb4b4b4:
Te6edf3normalize_loopback_http_service_baseTb4b4b4(Te6edf3badTb4b4b4)
Tf0883e@pytestTff7b72.Td2a8ffmarkTff7b72.Td2a8ffparametrizeTb4b4b4(
Ta5d6ff"Ta5d6ffedgeTa5d6ff"Tb4b4b4,
Tb4b4b4[
Ta5d6ff"Ta5d6ffhttp://127.0.0.1:5000/Ta5d6ff"Tb4b4b4,
Ta5d6ff"Ta5d6ffhttp://127.0.0.1:5000Ta5d6ff"Tb4b4b4,
Ta5d6ff"Ta5d6ffhttps://[::1]:8080/fooTa5d6ff"Tb4b4b4,
Ta5d6ff"Ta5d6ffhttp://localhost:3000/Ta5d6ff"Tb4b4b4,
Tb4b4b4]Tb4b4b4,
Tb4b4b4)
Tff7b72def Td2a8fftest_normalize_accepts_loopback_variantsTb4b4b4(Te6edf3edgeTb4b4b4)Tb4b4b4:
Te6edf3out Tff7b72= Te6edf3normalize_loopback_http_service_baseTb4b4b4(Te6edf3edgeTb4b4b4)
Tff7b72assert Te6edf3outTff7b72.Td2a8ffstartswithTb4b4b4(Ta5d6ff"Ta5d6ffhttp://Ta5d6ff"Tb4b4b4) Tff7b72or Te6edf3outTff7b72.Td2a8ffstartswithTb4b4b4(Ta5d6ff"Ta5d6ffhttps://Ta5d6ff"Tb4b4b4)
Tff7b72assert Ta5d6ff"Ta5d6ff..Ta5d6ff" Tff7b72not Tff7b72in Te6edf3out
Tf0883e@pytestTff7b72.Td2a8ffmarkTff7b72.Td2a8ffparametrizeTb4b4b4(
Ta5d6ff"Ta5d6ffbadTa5d6ff"Tb4b4b4,
Tb4b4b4[
Ta5d6ff"Ta5d6ff"Tb4b4b4,
Ta5d6ff"Ta5d6ff Ta5d6ff"Tb4b4b4,
Ta5d6ff"Ta5d6ffws://127.0.0.1:1Ta5d6ff"Tb4b4b4,
Ta5d6ff"Ta5d6ffhttp+unix://Tffd700%2FTa5d6fftmpTffd700%2FTa5d6ffs.sockTa5d6ff"Tb4b4b4,
Ta5d6ff"Ta5d6ffhttp://127.0.0.1Tffd700%0dTffd700%0aTa5d6ff.evil.com:80/Ta5d6ff"Tb4b4b4,
Tb4b4b4]Tb4b4b4,
Tb4b4b4)
Tff7b72def Td2a8fftest_normalize_rejects_scheme_or_crlf_injectionTb4b4b4(Te6edf3badTb4b4b4)Tb4b4b4:
Tff7b72with Te6edf3pytestTff7b72.Td2a8ffraisesTb4b4b4(Te6edf3UnsafeOutboundUrlErrorTb4b4b4)Tb4b4b4:
Te6edf3normalize_loopback_http_service_baseTb4b4b4(Te6edf3badTb4b4b4)
Tff7b72def Td2a8fftest_normalize_libretranslate_public_httpsTb4b4b4(Tb4b4b4)Tb4b4b4:
Tff7b72assert Te6edf3normalize_libretranslate_http_service_baseTb4b4b4(
Ta5d6ff"Ta5d6ffhttps://libretranslate.com/pathTa5d6ff"
Tb4b4b4) Tff7b72== Tb4b4b4(Ta5d6ff"Ta5d6ffhttps://libretranslate.comTa5d6ff"Tb4b4b4)
Tff7b72def Td2a8fftest_normalize_libretranslate_remote_host_port_strip_pathTb4b4b4(Tb4b4b4)Tb4b4b4:
Tff7b72assert Te6edf3normalize_libretranslate_http_service_baseTb4b4b4(
Ta5d6ff"Ta5d6ffhttp://superfishy.example:5002/languagesTa5d6ff"Tb4b4b4,
Tb4b4b4) Tff7b72== Tb4b4b4(Ta5d6ff"Ta5d6ffhttp://superfishy.example:5002Ta5d6ff"Tb4b4b4)
Tff7b72def Td2a8fftest_normalize_libretranslate_private_and_loopback_ipsTb4b4b4(Tb4b4b4)Tb4b4b4:
Tff7b72assert Te6edf3normalize_libretranslate_http_service_baseTb4b4b4(Ta5d6ff"Ta5d6ffhttp://10.20.30.40:5123/Ta5d6ff"Tb4b4b4) Tff7b72== Tb4b4b4(
Ta5d6ff"Ta5d6ffhttp://10.20.30.40:5123Ta5d6ff"
Tb4b4b4)
Tff7b72assert Te6edf3normalize_libretranslate_http_service_baseTb4b4b4(Ta5d6ff"Ta5d6ffhttp://127.0.0.1:5000Ta5d6ff"Tb4b4b4) Tff7b72== Tb4b4b4(
Ta5d6ff"Ta5d6ffhttp://127.0.0.1:5000Ta5d6ff"
Tb4b4b4)
Tf0883e@pytestTff7b72.Td2a8ffmarkTff7b72.Td2a8ffparametrizeTb4b4b4(
Ta5d6ff"Ta5d6ffbadTa5d6ff"Tb4b4b4,
Tb4b4b4[
Ta5d6ff"Ta5d6ffhttp://169.254.169.254/latestTa5d6ff"Tb4b4b4,
Ta5d6ff"Ta5d6ffhttp://239.255.0.1:5000/Ta5d6ff"Tb4b4b4,
Ta5d6ff"Ta5d6ffhttp://0.0.0.0/Ta5d6ff"Tb4b4b4,
Ta5d6ff"Ta5d6ffhttp://240.0.0.1:1Ta5d6ff"Tb4b4b4,
Tb4b4b4]Tb4b4b4,
Tb4b4b4)
Tff7b72def Td2a8fftest_normalize_libretranslate_rejects_ssrf_lit_ipsTb4b4b4(Te6edf3badTb4b4b4)Tb4b4b4:
Tff7b72with Te6edf3pytestTff7b72.Td2a8ffraisesTb4b4b4(Te6edf3UnsafeOutboundUrlErrorTb4b4b4)Tb4b4b4:
Te6edf3normalize_libretranslate_http_service_baseTb4b4b4(Te6edf3badTb4b4b4)
Tf0883e@pytestTff7b72.Td2a8ffmarkTff7b72.Td2a8ffparametrizeTb4b4b4(
Ta5d6ff"Ta5d6ffbadTa5d6ff"Tb4b4b4,
Tb4b4b4[
Ta5d6ff"Ta5d6ffftp://example.com/Ta5d6ff"Tb4b4b4,
Ta5d6ff"Ta5d6ffhttp://user:pass@192.168.1.1:5000Ta5d6ff"Tb4b4b4,
Tb4b4b4]Tb4b4b4,
Tb4b4b4)
Tff7b72def Td2a8fftest_normalize_libretranslate_rejects_scheme_or_credsTb4b4b4(Te6edf3badTb4b4b4)Tb4b4b4:
Tff7b72with Te6edf3pytestTff7b72.Td2a8ffraisesTb4b4b4(Te6edf3UnsafeOutboundUrlErrorTb4b4b4)Tb4b4b4:
Te6edf3normalize_libretranslate_http_service_baseTb4b4b4(Te6edf3badTb4b4b4)
Tf0883e@pytestTff7b72.Td2a8ffmarkTff7b72.Td2a8ffparametrizeTb4b4b4(
Ta5d6ff"Ta5d6ffbadTa5d6ff"Tb4b4b4,
Tb4b4b4[Ta5d6ff"Ta5d6ff"Tb4b4b4, Ta5d6ff"Ta5d6ff Ta5d6ff"Tb4b4b4, Ta5d6ff"Ta5d6ffhttp+unix://Tffd700%2FTa5d6fftmpTffd700%2FTa5d6ffs.sockTa5d6ff"Tb4b4b4]Tb4b4b4,
Tb4b4b4)
Tff7b72def Td2a8fftest_normalize_libretranslate_rejects_scheme_or_emptyTb4b4b4(Te6edf3badTb4b4b4)Tb4b4b4:
Tff7b72with Te6edf3pytestTff7b72.Td2a8ffraisesTb4b4b4(Te6edf3UnsafeOutboundUrlErrorTb4b4b4)Tb4b4b4:
Te6edf3normalize_libretranslate_http_service_baseTb4b4b4(Te6edf3badTb4b4b4)
Tff7b72def Td2a8fftest_normalize_libretranslate_rejects_encoded_crlf_in_hostTb4b4b4(Tb4b4b4)Tb4b4b4:
Tff7b72with Te6edf3pytestTff7b72.Td2a8ffraisesTb4b4b4(Te6edf3UnsafeOutboundUrlErrorTb4b4b4)Tb4b4b4:
Te6edf3normalize_libretranslate_http_service_baseTb4b4b4(
Ta5d6ff"Ta5d6ffhttp://127.0.0.1Tffd700%0dTffd700%0aTa5d6ff.evil.com:80/Ta5d6ff"
Tb4b4b4)
──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────