Current File : //opt/alt/python37/lib/python3.7/site-packages/jinja2/testsuite/__pycache__/security.cpython-37.pyc
B
,��Q< � @ s� d Z ddlZddlmZ ddlmZ ddlmZmZm Z ddlm
Z
m Z ddl m
Z
mZmZ ddlmZ G d d
� d
e�ZG d d � d e�ZG d
d� de�Zdd� ZdS )z�
jinja2.testsuite.security
~~~~~~~~~~~~~~~~~~~~~~~~~
Checks the sandbox and other security features.
:copyright: (c) 2010 by the Jinja Team.
:license: BSD, see LICENSE for more details.
� N)�
JinjaTestCase)� Environment)�SandboxedEnvironment� ImmutableSandboxedEnvironment�unsafe)�Markup�escape)�
SecurityError�TemplateSyntaxError�TemplateRuntimeError)� text_typec @ s( e Zd Zdd� Zedd� �Zdd� ZdS )� PrivateStuffc C s dS )N� � )�selfr r �J/opt/alt/python37/lib/python3.7/site-packages/jinja2/testsuite/security.py�bar s zPrivateStuff.barc C s dS )N�* r )r r r r �foo s zPrivateStuff.fooc C s dS )Nr
r )r r r r �__repr__! s zPrivateStuff.__repr__N)�__name__�
__module__� __qualname__r r r r r r r r r
s r
c @ s$ e Zd Zdd� Zdd� Zdd� ZdS )� PublicStuffc C s dS )Nr r )r r r r �<lambda>& � zPublicStuff.<lambda>c C s dS )Nr r )r r r r r ' r c C s dS )Nr r )r r r r r ) s zPublicStuff.__repr__N)r r r r Z_foor r r r r r % s r c @ sL e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dS )�SandboxTestCasec C s� t � }| jt|�d�jt� d� | �|�d�jt� d�d� | jt|�d�jt� d� | �|�d�jt� d�d� | �|�d�jdd�d� | �|�d �jd
d � d�d� | jt|�d �jdd� d S )
Nz{{ foo.foo() }})r z{{ foo.bar() }}Z23z{{ foo._foo() }}z{{ foo.__class__ }}r � z{{ foo.func_code }}c S s d S )Nr r r r r r 9 r z-SandboxTestCase.test_unsafe.<locals>.<lambda>z${{ foo.__class__.__subclasses__() }})r �
assert_raisesr � from_string�renderr
Z assert_equalr )r �envr r r � test_unsafe/ s
zSandboxTestCase.test_unsafec C s2 t � }| �t|�d�j� | �t|�d�j� d S )Nz{{ [].append(23) }}z{{ {1:2}.clear() }})r r r r r )r r! r r r �test_immutable_environment> s
z*SandboxTestCase.test_immutable_environmentc C s* t � }| �t|jd� | �t|jd� d S )Nz.{% for item.attribute in seq %}...{% endfor %}z,{% for foo, bar.baz in seq %}...{% endfor %})r r r
r )r r! r r r �test_restrictedE s
z SandboxTestCase.test_restrictedc C s� d}t d�}|| tt|��t|� ks,t�t d�d dks@t�t d�ddi dksXt�tt d�d �t kspt�t d�}|�� |ks�t�G d
d � d t�}t |� �d ks�t�t d
�|� dks�t�td�dks�t�t d��� dks�t�t d��� dks�t�d S )Nz?<script type="application/x-some-script">alert("foo");</script>z<em>username</em>z <em>%s</em>z
<bad user>z<em><bad user></em>z<em>%(username)s</em>Zusernamer r c @ s e Zd Zdd� Zdd� ZdS )z3SandboxTestCase.test_markup_operations.<locals>.Fooc S s dS )Nz<em>awesome</em>r )r r r r �__html__b s z<SandboxTestCase.test_markup_operations.<locals>.Foo.__html__c S s dS )NZawesomer )r r r r � __unicode__d s z?SandboxTestCase.test_markup_operations.<locals>.Foo.__unicode__N)r r r r% r& r r r r �Fooa s r' z<em>awesome</em>z<strong>%s</strong>z!<strong><em>awesome</em></strong>z"<>&'z"<>&'z<em>Foo & Bar</em>z Foo & Barz <test>z<test>) r r r �AssertionError�typer% �objectZ striptagsZunescape)r r Zsafe�xr' r r r �test_markup_operationsL s$
z&SandboxTestCase.test_markup_operationsc C s| t dd�}|�d�}d}|�� |ks(t�t|j�|ks:t�t|j�|ksLt�|j�d�|ks`t�t|j�d��|ksxt�d S )NT)Z
autoescapezf{% macro say_hello(name) %}<p>Hello {{ name }}!</p>{% endmacro %}{{ say_hello("<blink>foo</blink>") }}z,<p>Hello <blink>foo</blink>!</p>z<blink>foo</blink>)r r r r( r �moduler Z say_hello)r r! �tZ escaped_outr r r �test_template_datao s
z"SandboxTestCase.test_template_datac C s& t � }|�d�}| jt|jtd� d S )Nz"{{ cls|attr("__subclasses__")() }})�cls)r r r r r �int)r r! Ztmplr r r �test_attr_filter{ s
z SandboxTestCase.test_attr_filterc C s� dd� }x�di dfdddidffD ]�\}}}t � }||jd < |�d
| �}|�|�|ks\t�td g�|_|�d
| �}y|�|� W n" tk
r� } zW d d }~X Y q"X | �d � q"W d S ) Nc S s t d��d S )Nz that operator so does not work)r )�left�rightr r r �
disable_op� s zESandboxTestCase.test_binary_operator_intercepting.<locals>.disable_opz1 + 2�3za + 2�a� �4�+z{{ %s }}zexpected runtime error) r Z binop_tabler r r( � frozensetZintercepted_binopsr �fail)r r5 �expr�ctx�rvr! r. �er r r �!test_binary_operator_intercepting� s $
z1SandboxTestCase.test_binary_operator_interceptingc C s� dd� }x�di dfdddidffD ]�\}}}t � }||jd< |�d | �}|�|�|ks\t�tdg�|_|�d | �}y|�|� W n" tk
r� } zW d d }~X Y q"X | �d
� q"W d S ) Nc S s t d��d S )Nz that operator so does not work)r )�argr r r r5 � s zDSandboxTestCase.test_unary_operator_intercepting.<locals>.disable_opz-1z-ar7 r8 z-2�-z{{ %s }}zexpected runtime error) r Z
unop_tabler r r( r; Zintercepted_unopsr r< )r r5 r= r> r? r! r. r@ r r r � test_unary_operator_intercepting� s $
z0SandboxTestCase.test_unary_operator_interceptingN) r r r r" r# r$ r, r/ r2 rA rD r r r r r - s # r c C s t �� } | �t �t�� | S )N)�unittestZ TestSuiteZaddTestZ makeSuiter )�suiter r r rF � s rF )�__doc__rE Zjinja2.testsuiter Zjinja2r Zjinja2.sandboxr r r r r Zjinja2.exceptionsr r
r Zjinja2._compatr r* r
r r rF r r r r �<module>
s
v
Mini Shell