Current File : //proc/thread-self/root/proc/self/root/lib/python2.7/site-packages/jinja2/testsuite/security.pyc
�
,��Qc @ s� d Z d d l Z d d l m Z d d l m Z d d l m Z m Z m Z d d l m
Z
m Z d d l m
Z
m Z m Z d d l m Z d e f d
� � YZ d e f d � � YZ d
e f d � � YZ d � Z d S( s�
jinja2.testsuite.security
~~~~~~~~~~~~~~~~~~~~~~~~~
Checks the sandbox and other security features.
:copyright: (c) 2010 by the Jinja Team.
:license: BSD, see LICENSE for more details.
i����N( t
JinjaTestCase( t Environment( t SandboxedEnvironmentt ImmutableSandboxedEnvironmentt unsafe( t Markupt escape( t
SecurityErrort TemplateSyntaxErrort TemplateRuntimeError( t text_typet PrivateStuffc B s) e Z d � Z e d � � Z d � Z RS( c C s d S( Ni ( ( t self( ( s= /usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyt bar s c C s d S( Ni* ( ( R ( ( s= /usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyt foo s c C s d S( NR ( ( R ( ( s= /usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyt __repr__! s ( t __name__t
__module__R
R R R ( ( ( s= /usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyR s t PublicStuffc B s# e Z d � Z d � Z d � Z RS( c C s d S( Ni ( ( R ( ( s= /usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyt <lambda>& s c C s d S( Ni* ( ( R ( ( s= /usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyR ' s c C s d S( NR ( ( R ( ( s= /usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyR ) s ( R R R
t _fooR ( ( ( s= /usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyR % s t SandboxTestCasec B sP e Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z RS( c C s t � } | j t | j d � j d t � �| j | j d � j d t � � d � | j t | j d � j d t � �| j | j d � j d t � � d � | j | j d � j d d � d � | j | j d � j d d
� � d � | j t | j d � j d d �d S( Ns {{ foo.foo() }}R s {{ foo.bar() }}t 23s {{ foo._foo() }}s {{ foo.__class__ }}i* t s {{ foo.func_code }}c S s d S( N( t None( ( ( s= /usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyR 9 s s$ {{ foo.__class__.__subclasses__() }}( R t
assert_raisesR t from_stringt renderR t assert_equalR ( R t env( ( s= /usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyt test_unsafe/ s
(
(%(c C sE t � } | j t | j d � j � | j t | j d � j � d S( Ns {{ [].append(23) }}s {{ {1:2}.clear() }}( R R R R R ( R R ( ( s= /usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyt test_immutable_environment> s
c C s9 t � } | j t | j d � | j t | j d � d S( Ns. {% for item.attribute in seq %}...{% endfor %}s, {% for foo, bar.baz in seq %}...{% endfor %}( R R R R ( R R ( ( s= /usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyt test_restrictedE s
c C sk d } t d � } | | t t | � � t | � k s> t � t d � d d k sZ t � t d � i d d 6d k s} t � t t d � d � t k s� t � t d � } | j � | k s� t � d
t f d � � Y} t | � � d k s� t � t d
� | � d k st � t d � d k s+t � t d � j � d k sIt � t d � j � d k sgt � d S( Ns? <script type="application/x-some-script">alert("foo");</script>s <em>username</em>s <em>%s</em>s
<bad user>s <em><bad user></em>s <em>%(username)s</em>t usernameR R
t Fooc B s e Z d � Z d � Z RS( c S s d S( Ns <em>awesome</em>( ( R ( ( s= /usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyt __html__b s c S s d S( Nt awesome( ( R ( ( s= /usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyt __unicode__d s ( R R R# R% ( ( ( s= /usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyR" a s s <em>awesome</em>s <strong>%s</strong>s! <strong><em>awesome</em></strong>s "<>&'s "<>&'s <em>Foo & Bar</em>s Foo & Bars <test>s <test>( R R
R t AssertionErrort typeR# t objectt striptagst unescape( R R t safet xR" ( ( s= /usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyt test_markup_operationsL s$ ,
" c C s� t d t � } | j d � } d } | j � | k s< t � t | j � | k sW t � t | j � | k sr t � | j j d � | k s� t � t | j j d � � | k s� t � d S( Nt
autoescapesf {% macro say_hello(name) %}<p>Hello {{ name }}!</p>{% endmacro %}{{ say_hello("<blink>foo</blink>") }}s, <p>Hello <blink>foo</blink>!</p>s <blink>foo</blink>( R t TrueR R R& R
t moduleR t say_hello( R R t tt escaped_out( ( s= /usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyt test_template_datao s c C s5 t � } | j d � } | j t | j d t �d S( Ns" {{ cls|attr("__subclasses__")() }}t cls( R R R R R t int( R R t tmpl( ( s= /usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyt test_attr_filter{ s c C s� d � } x� d i d f d i d d 6d f f D]� \ } } } t � } | | j d <| j d | � } | j | � | k s� t � t d g � | _ | j d | � } y | j | � Wn t k
r� } q/ X| j d
� q/ Wd S( Nc S s t d � � d S( Ns that operator so does not work( R ( t leftt right( ( s= /usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyt
disable_op� s s 1 + 2t 3s a + 2i t at 4t +s {{ %s }}s expected runtime error( R t binop_tableR R R& t frozensett intercepted_binopsR t fail( R R; t exprt ctxt rvR R2 t e( ( s= /usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyt! test_binary_operator_intercepting� s 5
c C s� d � } x� d i d f d i d d 6d f f D]� \ } } } t � } | | j d <| j d | � } | j | � | k s� t � t d g � | _ | j d | � } y | j | � Wn t k
r� } q/ X| j d � q/ Wd S(
Nc S s t d � � d S( Ns that operator so does not work( R ( t arg( ( s= /usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyR; � s s -1s -ai R= s -2t -s {{ %s }}s expected runtime error( R t
unop_tableR R R& RA t intercepted_unopsR RC ( R R; RD RE RF R R2 RG ( ( s= /usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyt test_unary_operator_intercepting� s 5
(
R R R R R R- R4 R8 RH RM ( ( ( s= /usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyR - s # c C s& t j � } | j t j t � � | S( N( t unittestt TestSuitet addTestt makeSuiteR ( t suite( ( s= /usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyRR � s ( t __doc__RN t jinja2.testsuiteR t jinja2R t jinja2.sandboxR R R R R t jinja2.exceptionsR R R t jinja2._compatR
R( R R R RR ( ( ( s= /usr/lib/python2.7/site-packages/jinja2/testsuite/security.pyt <module>
s
v
Mini Shell