Beispiel #1
0
    def test_updated_disallows_bad_tokens(self, mock_render):
        token = 'the-dude'
        req = self.rf.get('/', {'token': token, 'unsub': 1})
        updated(req)
        eq_(mock_render.call_args[0][2]['token'], None)

        token = '\'>"><img src=x onerror=alert(1)>'
        req = self.rf.get('/', {'token': token, 'unsub': 1})
        updated(req)
        eq_(mock_render.call_args[0][2]['token'], None)
Beispiel #2
0
    def test_updated_disallows_bad_tokens(self, mock_render):
        token = "the-dude"
        req = self.rf.get("/", {"token": token, "unsub": 1})
        updated(req)
        assert mock_render.call_args[0][2]["token"] is None

        token = "'>\"><img src=x onerror=alert(1)>"
        req = self.rf.get("/", {"token": token, "unsub": 1})
        updated(req)
        assert mock_render.call_args[0][2]["token"] is None
Beispiel #3
0
    def test_updated_disallows_bad_tokens(self, mock_render):
        token = 'the-dude'
        req = self.rf.get('/', {'token': token, 'unsub': 1})
        updated(req)
        eq_(mock_render.call_args[0][2]['token'], None)

        token = '\'>"><img src=x onerror=alert(1)>'
        req = self.rf.get('/', {'token': token, 'unsub': 1})
        updated(req)
        eq_(mock_render.call_args[0][2]['token'], None)
Beispiel #4
0
    def test_updated_disallows_bad_tokens(self, mock_render):
        token = "the-dude"
        req = self.rf.get("/", {"token": token, "unsub": 1})
        updated(req)
        eq_(mock_render.call_args[0][2]["token"], None)

        token = "'>\"><img src=x onerror=alert(1)>"
        req = self.rf.get("/", {"token": token, "unsub": 1})
        updated(req)
        eq_(mock_render.call_args[0][2]["token"], None)
Beispiel #5
0
 def test_updated_allows_good_tokens(self, mock_render):
     token = unicode(uuid.uuid4())
     req = self.rf.get('/', {'token': token, 'unsub': 1})
     updated(req)
     self.assertEqual(mock_render.call_args[0][2]['token'], token)
Beispiel #6
0
 def test_updated_allows_good_tokens(self, mock_render):
     token = str(uuid.uuid4())
     req = self.rf.get("/", {"token": token, "unsub": 1})
     updated(req)
     self.assertEqual(mock_render.call_args[0][2]["token"], token)
Beispiel #7
0
 def test_updated_allows_good_tokens(self, mock_render):
     token = unicode(uuid.uuid4())
     req = self.rf.get('/', {'token': token, 'unsub': 1})
     updated(req)
     self.assertEqual(mock_render.call_args[0][2]['token'], token)
Beispiel #8
0
 def test_updated_allows_good_tokens(self, mock_render):
     token = unicode(uuid.uuid4())
     req = self.rf.get("/", {"token": token, "unsub": 1})
     updated(req)
     self.assertEqual(mock_render.call_args[0][2]["token"], token)