1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
|
#
# Copyright (C) 2010-2012 Wikkid Developers.
#
# This software is licensed under the GNU Affero General Public License
# version 3 (see the file LICENSE).
"""Tests for method and classes in wikkid.app."""
import os.path
from testtools.matchers import IsInstance
from webob.request import environ_from_url
from wikkid.app import WikkidApp
from wikkid.context import ExecutionContext
from wikkid.filestore.volatile import FileStore
from wikkid.view.missing import MissingPage
from wikkid.view.root import RootPage
from wikkid.view.wiki import WikiPage
from wikkid.tests import TestCase
class TestApp(TestCase):
def assert_not_found(self, status, headers):
self.assertEqual("404 Not Found", status)
def assert_ok(self, status, headers):
self.assertEqual("200 OK", status)
def test_traverse_above_static_not_possible_with_relative_path(self):
"""
Traversal above the static folder, by forging a malicious request with
a relative path for example, is not possible.
"""
environ = environ_from_url("/static/../page.html")
filestore = FileStore()
app = WikkidApp(filestore)
app(environ, self.assert_not_found)
def test_traverse_above_static_not_possible_with_absolute_path(self):
"""
Traversal above the static folder, by forging a malicious request
including an absolute path for example, is not possible.
"""
this_file = os.path.abspath(__file__)
environ = environ_from_url("/static/" + this_file)
filestore = FileStore()
app = WikkidApp(filestore)
app(environ, self.assert_not_found)
def test_getting_static_style_css_works(self):
environ = environ_from_url("/static/default.css")
filestore = FileStore()
app = WikkidApp(filestore)
app(environ, self.assert_ok)
def test_getting_static_style_css_works_with_script_name(self):
environ = environ_from_url("/test/static/default.css")
filestore = FileStore()
context = ExecutionContext(script_name="/test")
app = WikkidApp(filestore, execution_context=context)
app(environ, self.assert_ok)
def test_getting_static_css_works_script_name_multiple_segments(self):
environ = environ_from_url("/p/project-name/wiki/static/default.css")
filestore = FileStore()
context = ExecutionContext(script_name="/p/project-name/wiki")
app = WikkidApp(filestore, execution_context=context)
app(environ, self.assert_ok)
def test_getting_anything_outside_script_name_fails(self):
environ = environ_from_url("/foo/bar")
filestore = FileStore()
context = ExecutionContext(script_name="/test")
app = WikkidApp(filestore, execution_context=context)
app(environ, self.assert_not_found)
def assertUrlIsView(self, url, view_type,
script_name=None, store_content=None):
environ = environ_from_url(url)
filestore = FileStore(store_content)
context = ExecutionContext(script_name=script_name)
app = WikkidApp(filestore, execution_context=context)
view = app.get_view(environ)
self.assertThat(view, IsInstance(view_type))
def test_home_redirect_url_matches_script_name(self):
self.assertUrlIsView("/test", RootPage, "/test")
self.assertUrlIsView("/test", RootPage, "/test/")
self.assertUrlIsView("/test/", RootPage, "/test")
self.assertUrlIsView("/test/", RootPage, "/test/")
def test_get_view(self):
self.assertUrlIsView("/Home", MissingPage)
def test_get_home_view(self):
content = [('Home.txt', 'Welcome Home.')]
self.assertUrlIsView("/Home", WikiPage, store_content=content)
|
