Viewing File: /usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyc

ó
ÖÎ6ic@sßdZddlZddlmZddlmZddlmZmZm	Z	ddlm
Z
mZddlm
Z
mZmZddlmZd	efd
„ƒYZdefd„ƒYZd
efd„ƒYZd„ZdS(sÐ
    jinja2.testsuite.security
    ~~~~~~~~~~~~~~~~~~~~~~~~~

    Checks the sandbox and other security features.

    :copyright: (c) 2010 by the Jinja Team.
    :license: BSD, see LICENSE for more details.
iÿÿÿÿN(t
JinjaTestCase(tEnvironment(tSandboxedEnvironmenttImmutableSandboxedEnvironmenttunsafe(tMarkuptescape(t
SecurityErrortTemplateSyntaxErrortTemplateRuntimeError(t	text_typetPrivateStuffcBs)eZd„Zed„ƒZd„ZRS(cCsdS(Ni((tself((s=/usr/lib/python2.7/site-packages/jinja2/testsuite/security.pytbarscCsdS(Ni*((R((s=/usr/lib/python2.7/site-packages/jinja2/testsuite/security.pytfooscCsdS(NR((R((s=/usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyt__repr__!s(t__name__t
__module__R
RRR(((s=/usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyRs	tPublicStuffcBs#eZd„Zd„Zd„ZRS(cCsdS(Ni((R((s=/usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyt<lambda>&scCsdS(Ni*((R((s=/usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyR'scCsdS(NR((R((s=/usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyR)s(RRR
t_fooR(((s=/usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyR%s		tSandboxTestCasecBsYeZd„Zd„Zd„Zd„Zd„Zd„Zd„Zd„Z	d„Z
RS(	cCstƒ}|jt|jdƒjdtƒƒ|j|jdƒjdtƒƒdƒ|jt|jdƒjdtƒƒ|j|jdƒjdtƒƒdƒ|j|jdƒjddƒdƒ|j|jd	ƒjdd
„ƒdƒ|jt|jdƒjddƒdS(Ns{{ foo.foo() }}Rs{{ foo.bar() }}t23s{{ foo._foo() }}s{{ foo.__class__ }}i*ts{{ foo.func_code }}cSsdS(N(tNone(((s=/usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyR9ss${{ foo.__class__.__subclasses__() }}(Rt
assert_raisesRtfrom_stringtrenderRtassert_equalR(Rtenv((s=/usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyttest_unsafe/s	
(
(%(cCsEtƒ}|jt|jdƒjƒ|jt|jdƒjƒdS(Ns{{ [].append(23) }}s{{ {1:2}.clear() }}(RRRRR(RR((s=/usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyttest_immutable_environment>s
	
cCs9tƒ}|jt|jdƒ|jt|jdƒdS(Ns.{% for item.attribute in seq %}...{% endfor %}s,{% for foo, bar.baz in seq %}...{% endfor %}(RRRR(RR((s=/usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyttest_restrictedEs
	cCskd}tdƒ}||tt|ƒƒt|ƒks>t‚tdƒddksZt‚tdƒidd6dks}t‚ttdƒd	ƒtksŸt‚tdƒ}|jƒ|ksÃt‚d
tfd„ƒY}t|ƒƒdksôt‚td
ƒ|ƒdkst‚tdƒdks+t‚tdƒjƒdksIt‚tdƒjƒdksgt‚dS(Ns?<script type="application/x-some-script">alert("foo");</script>s<em>username</em>s<em>%s</em>s
<bad user>s<em>&lt;bad user&gt;</em>s<em>%(username)s</em>tusernameRR
tFoocBseZd„Zd„ZRS(cSsdS(Ns<em>awesome</em>((R((s=/usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyt__html__bscSsdS(Ntawesome((R((s=/usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyt__unicode__ds(RRR#R%(((s=/usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyR"as	s<em>awesome</em>s<strong>%s</strong>s!<strong><em>awesome</em></strong>s"<>&'s&#34;&lt;&gt;&amp;&#39;s<em>Foo &amp; Bar</em>s	Foo & Bars&lt;test&gt;s<test>(	RR
RtAssertionErrorttypeR#tobjectt	striptagstunescape(RRtsafetxR"((s=/usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyttest_markup_operationsLs$,
"cCs¸tdtƒ}|jdƒ}d}|jƒ|ks<t‚t|jƒ|ksWt‚t|jƒ|ksrt‚|jjdƒ|kst‚t|jjdƒƒ|ks´t‚dS(Nt
autoescapesf{% macro say_hello(name) %}<p>Hello {{ name }}!</p>{% endmacro %}{{ say_hello("<blink>foo</blink>") }}s,<p>Hello &lt;blink&gt;foo&lt;/blink&gt;!</p>s<blink>foo</blink>(	RtTrueRRR&R
tmoduleRt	say_hello(RRtttescaped_out((s=/usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyttest_template_dataoscCs5tƒ}|jdƒ}|jt|jdtƒdS(Ns"{{ cls|attr("__subclasses__")() }}tcls(RRRRRtint(RRttmpl((s=/usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyttest_attr_filter{s	cCsãd„}xÓdidfdidd6dffD]¬\}}}tƒ}||jd<|jd	|ƒ}|j|ƒ|ks‚t‚tdgƒ|_|jd	|ƒ}y|j|ƒWntk
rÍ}q/X|jd
ƒq/WdS(NcSstdƒ‚dS(Nsthat operator so does not work(R	(tlefttright((s=/usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyt
disable_opss1 + 2t3sa + 2itat4t+s{{ %s }}sexpected runtime error(	Rtbinop_tableRRR&t	frozensettintercepted_binopsR	tfail(RR;texprtctxtrvRR2te((s=/usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyt!test_binary_operator_intercepting€s	5	
cCsãd„}xÓdidfdidd6dffD]¬\}}}tƒ}||jd<|jd|ƒ}|j|ƒ|ks‚t‚tdgƒ|_|jd|ƒ}y|j|ƒWntk
rÍ}q/X|jd	ƒq/WdS(
NcSstdƒ‚dS(Nsthat operator so does not work(R	(targ((s=/usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyR;’ss-1s-aiR=s-2t-s{{ %s }}sexpected runtime error(	Rt
unop_tableRRR&RAtintercepted_unopsR	RC(RR;RDRERFRR2RG((s=/usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyt test_unary_operator_intercepting‘s	5	
cCs„d„}tƒ}||jd<dtfd„ƒY}||jd<|jdƒ}y|jƒWntk
rrnX|jdƒdS(NcSs
|j|ƒS(N(trun(tvalueRI((s=/usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyRN£sRNt	NamespacecBseZd„ZRS(c[s1x*|jƒD]\}}t|||ƒq
WdS(N(titemstsetattr(Rtkwargstktv((s=/usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyt__init__«s(RRRV(((s=/usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyRPªst	namespaces‘{% set
                ns = namespace(run="{0.__class__.__subclasses__}".format)
            %}
            {{ ns | run(not_here) }}
            sexpected SecurityError(RtfiltersR(tglobalsRRRRC(RRNRRPR2((s=/usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyttest_indirect_call¢s		
	
	
(RRRRR R-R4R8RHRMRZ(((s=/usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyR-s				#				cCs&tjƒ}|jtjtƒƒ|S(N(tunittestt	TestSuitetaddTestt	makeSuiteR(tsuite((s=/usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyR_Ãs(t__doc__R[tjinja2.testsuiteRtjinja2Rtjinja2.sandboxRRRRRtjinja2.exceptionsRRR	tjinja2._compatR
R(RRRR_(((s=/usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyt<module>
s
–
Back to Directory File Manager