Example #1
0
 def test_sanitize_invalid_file_name(self):
     parser = MultiPartParser({
         'CONTENT_TYPE': 'multipart/form-data; boundary=_foo',
         'CONTENT_LENGTH': '1',
     }, StringIO('x'), [], 'utf-8')
     for file_name in CANDIDATE_INVALID_FILE_NAMES:
         with self.subTest(file_name=file_name):
             self.assertIsNone(parser.sanitize_file_name(file_name))
Example #2
0
 def test_sanitize_file_name(self):
     parser = MultiPartParser({
         'CONTENT_TYPE': 'multipart/form-data; boundary=_foo',
         'CONTENT_LENGTH': '1'
     }, StringIO('x'), [], 'utf-8')
     for file_name in CANDIDATE_TRAVERSAL_FILE_NAMES:
         with self.subTest(file_name=file_name):
             self.assertEqual(parser.sanitize_file_name(file_name), 'hax0rd.txt')
Example #3
0
 def test_sanitize_invalid_file_name(self):
     parser = MultiPartParser(
         {
             "CONTENT_TYPE": "multipart/form-data; boundary=_foo",
             "CONTENT_LENGTH": "1",
         },
         StringIO("x"),
         [],
         "utf-8",
     )
     for file_name in CANDIDATE_INVALID_FILE_NAMES:
         with self.subTest(file_name=file_name):
             self.assertIsNone(parser.sanitize_file_name(file_name))
Example #4
0
 def test_sanitize_file_name(self):
     parser = MultiPartParser(
         {
             "CONTENT_TYPE": "multipart/form-data; boundary=_foo",
             "CONTENT_LENGTH": "1",
         },
         StringIO("x"),
         [],
         "utf-8",
     )
     for file_name in CANDIDATE_TRAVERSAL_FILE_NAMES:
         with self.subTest(file_name=file_name):
             self.assertEqual(parser.sanitize_file_name(file_name), "hax0rd.txt")