o
ÌÉhw ã @ sh d dl mZ d dlmZ d dlmZmZmZmZ G dd„ deƒZ G dd„ deeƒZ
G dd „ d eeƒZ d
S ) é )ÚTestCase)ÚWagtailTestUtils)Ú WhitelisterÚallow_without_attributesÚattribute_ruleÚ check_urlc @ s$ e Zd Zdd„ Zdd„ Zdd„ ZdS )Ú TestCheckUrlc C s( dD ]}|d }| tt|ƒƒ¡ qd S )N)Ú ÚhttpÚhttpsÚftpÚmailtoÚtelz://www.example.com)Ú
assertTrueÚboolr )ÚselfÚ
url_schemeÚurl© r ú\/var/www/html/ndineBlogger/venv/lib/python3.10/site-packages/wagtail/tests/test_whitelist.pyÚtest_allowed_url_schemes
s þz%TestCheckUrl.test_allowed_url_schemesc C s | ttdƒƒ¡ d S )Nz
invalid://url©Ú assertFalser r ©r r r r Útest_disallowed_url_scheme s z'TestCheckUrl.test_disallowed_url_schemec C s | ttdƒƒ¡ dS )z
Some URL parsers do not parse 'jav ascript:' as a valid scheme.
Browsers, however, do. The checker needs to catch these crafty schemes
zjav ascript:alert('XSS')Nr r r r r Ú!test_crafty_disallowed_url_scheme s z.TestCheckUrl.test_crafty_disallowed_url_schemeN)Ú__name__Ú
__module__Ú __qualname__r r r r r r r r s r c @ sD e Zd Zdd„ Zdd„ Zdd„ Zdd„ Zd d
„ Zd d „ Zd
d„ Z dS )ÚTestAttributeRulec C s | d¡| _d S )Núbaz)Úget_soupÚsoupr r r r ÚsetUp s zTestAttributeRule.setUpc C ó0 | j j}tddiƒ}||ƒ | t|ƒd¡ dS )zi
Test that attribute_rule() drops attributes for
which no rule has been defined.
ÚsnowmanÚbarbecueú
bazN©r" Úbr Ú assertEqualÚstr©r ÚtagÚfnr r r Útest_no_rule_for_attr! ó z'TestAttributeRule.test_no_rule_for_attrc C r$ )zx
Test that attribute_rule() does not change attributes
when the corresponding rule returns True
ÚfooTr Nr( r, r r r Útest_rule_true_for_attr+ r0 z)TestAttributeRule.test_rule_true_for_attrc C r$ )zo
Test that attribute_rule() drops attributes
when the corresponding rule returns False
r1 Fr' Nr( r, r r r Útest_rule_false_for_attr5 r0 z*TestAttributeRule.test_rule_false_for_attrc C s0 | j j}tdtiƒ}||ƒ | t|ƒd¡ dS )ú¯
Test that when the rule returns a callable,
attribute_rule() replaces the attribute with
the result of calling the callable on the attribute.
r1 zbazN)r" r) r Úlenr* r+ r, r r r Ú test_callable_called_on_attr? s z.TestAttributeRule.test_callable_called_on_attrc C s4 | j j}tddd„ iƒ}||ƒ | t|ƒd¡ dS )r4 r1 c S s d S ©Nr )Úxr r r ÚQ s z>TestAttributeRule.test_callable_returns_None..r' Nr( r, r r r Útest_callable_returns_NoneJ s z,TestAttributeRule.test_callable_returns_Nonec C s, | d¡}|j}t|ƒ | t|ƒd¡ dS )zS
Test that attribute_rule() with will drop all
attributes.
z/zN)r! r) r r* r+ ©r r" r- r r r Ú test_allow_without_attributesU s ÿz/TestAttributeRule.test_allow_without_attributesN)
r r r r# r/ r2 r3 r6 r: r< r r r r r s
r c @ sT e Zd Zdd„ Zdd„ Zdd„ Zdd„ Zd d
„ Zd d „ Zd
d„ Z dd„ Z
dd„ Z dS )ÚTestWhitelisterc C s t ƒ | _d S r7 )r Ú whitelisterr r r r r# c s zTestWhitelister.setUpc C s4 | d¡}|j}| j d|j¡ | t|ƒd¡ dS )zL
Unknown node should remove a node from the parent document
z bazquuxr zquuxN)r! r1 r> Úclean_unknown_nodeÚbarr* r+ r; r r r Útest_clean_unknown_nodef s
z'TestWhitelister.test_clean_unknown_nodec C ó2 | d¡}|j}| j ||¡ | t|ƒd¡ dS )zj
tags are allowed without attributes. This remains true
when tags are nested.
z#foozfooN©r! r) r> Úclean_tag_noder* r+ r; r r r Ú1test_clean_tag_node_cleans_nested_recognised_nodeo s
zATestWhitelister.test_clean_tag_node_cleans_nested_recognised_nodec C rB )zA
tags should be removed, even when nested.
zbarú
barNrC r; r r r Ú6test_clean_tag_node_disallows_nested_unrecognised_nodey s
zFTestWhitelister.test_clean_tag_node_disallows_nested_unrecognised_nodec C ó4 | d¡}|jj}| j ||¡ | t|ƒd¡ d S ©NrF r@ )r! r) Ústringr> Úclean_string_noder* r+ ©r r" rJ r r r Ú#test_clean_string_node_does_nothing‚ ó
z3TestWhitelister.test_clean_string_node_does_nothingc C rH rI )r! r) rJ r> Ú
clean_noder* r+ rL r r r Ú1test_clean_node_does_not_change_navigable_stringsˆ rN zATestWhitelister.test_clean_node_does_not_change_navigable_stringsc C s d}| j |¡}| |d¡ dS )zf
Whitelister.clean should remove disallowed tags and attributes from
a string
z7snowman Yorkshireúsnowman YorkshireN©r> Úcleanr* ©r rJ Úcleaned_stringr r r Ú
test_cleanŽ s zTestWhitelister.test_cleanc C ó d}| j |¡}| |d¡ d S )NzDsnowman YorkshirerQ rR rT r r r Útest_clean_comments— s z#TestWhitelister.test_clean_commentsc C rW )Nz:![Arthur "two sheds" Jackson]()
z1![Arthur "two sheds" Jackson]()
rR rT r r r Ú test_quotingœ s
ÿz TestWhitelister.test_quotingN) r r r r# rA rE rG rM rP rV rX rY r r r r r= b s
r= N) Ú django.testr Úwagtail.test.utilsr Úwagtail.whitelistr r r r r r r= r r r r Ú s E