def test_streaming_content(self):
get_resp = lambda r: StreamingHttpResponse(
content_type='application/json',
streaming_content=(x for x in [b'{"k": "t&j"}']))
mid = middleware.XSSJsonMiddleware(get_resp)
resp = mid(self.req)
assert b''.join(resp.streaming_content) == b'{"k": "t&j"}'
def test_enabled(self):
get_resp = lambda r: HttpResponse(content_type='application/json',
content=b'{"k": "t&j"}')
mid = middleware.XSSJsonMiddleware(get_resp)
with patch.dict('os.environ', {self.enabled_key: 'T'}):
resp = mid(self.req)
assert resp.content == b'{"k": "t\\u0026j"}'
def test_escape_ampersand(self):
get_resp = lambda r: HttpResponse(content_type='application/json',
content=b'{"k": "t&j"}')
mid = middleware.XSSJsonMiddleware(get_resp)
resp = mid(self.req)
assert resp.content == b'{"k": "t\\u0026j"}'
def test_escape_html(self):
get_resp = lambda r: HttpResponse(content_type='application/json',
content=b'{"k": "<b>test</b>"}')
mid = middleware.XSSJsonMiddleware(get_resp)
resp = mid(self.req)
assert resp.content == b'{"k": "\\u003Cb\\u003Etest\\u003C/b\\u003E"}'
def test_non_json_content(self):
get_resp = lambda r: HttpResponse(content_type='text/html',
content=b'<b>test</b>')
mid = middleware.XSSJsonMiddleware(get_resp)
resp = mid(self.req)
assert resp.content == b'<b>test</b>'
def test_nothing_to_escape(self):
get_resp = lambda r: HttpResponse(content_type='application/json',
content=b'{"k": "test"}')
mid = middleware.XSSJsonMiddleware(get_resp)
resp = mid(self.req)
assert resp.content == b'{"k": "test"}'