File: test_security.py

package info (click to toggle)
circuits 3.2.3-3
  • links: PTS, VCS
  • area: main
  • in suites: forky, sid
  • size: 2,980 kB
  • sloc: python: 17,583; javascript: 3,226; makefile: 100
file content (40 lines) | stat: -rw-r--r-- 912 bytes parent folder | download | duplicates (2)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
#!/usr/bin/env python
from http.client import HTTPConnection

import pytest

from circuits.web import Controller

from .helpers import HTTPError, urlopen


class Root(Controller):
    def index(self):
        return 'Hello World!'


def test_root(webapp):
    f = urlopen(webapp.server.http.base)
    s = f.read()
    assert s == b'Hello World!'


def test_badpath_notfound(webapp):
    url = '%s/../../../../../../etc/passwd' % webapp.server.http.base
    with pytest.raises(HTTPError) as exc:
        urlopen(url)
    assert exc.value.code == 404


def test_badpath_redirect(webapp):
    connection = HTTPConnection(webapp.server.host, webapp.server.port)
    connection.connect()

    path = '/../../../../../../etc/passwd'

    connection.request('GET', path)
    response = connection.getresponse()
    assert response.status == 301
    assert response.reason == 'Moved Permanently'

    connection.close()