Exemple #1
0
 def test_jinja_escaping(self):
     addon = Addon.objects.get()
     au = AddonUser(addon=addon, user=self.user)
     amo.log(amo.LOG.CHANGE_USER_WITH_ROLE, au.user, au.get_role_display(),
             addon)
     log = ActivityLog.objects.get()
     eq_(jingo.env.from_string('<p>{{ log }}</p>').render(log=log),
         '<p>&lt;script src=&#34;x.js&#34;&gt; role changed to Owner for <a'
         ' href="/en-US/firefox/addon/a3615/">Delicious Bookmarks</a>.</p>')
Exemple #2
0
 def test_xss_arguments(self):
     addon = Addon.objects.get()
     au = AddonUser(addon=addon, user=self.user)
     amo.log(amo.LOG.CHANGE_USER_WITH_ROLE, au.user, au.get_role_display(),
             addon)
     log = ActivityLog.objects.get()
     eq_(log.to_string(),
         u'&lt;script src=&#34;x.js&#34;&gt; role changed to Owner for '
         '<a href="/en-US/firefox/addon/a3615/">Delicious Bookmarks</a>.')
Exemple #3
0
 def test_jinja_escaping(self):
     addon = Addon.objects.get()
     au = AddonUser(addon=addon, user=self.user)
     amo.log(amo.LOG.CHANGE_USER_WITH_ROLE, au.user, au.get_role_display(),
             addon)
     log = ActivityLog.objects.get()
     eq_(jingo.env.from_string('<p>{{ log }}</p>').render(log=log),
         '<p>&lt;script src=&#34;x.js&#34;&gt; role changed to Owner for <a'
         ' href="/en-US/firefox/addon/a3615/">Delicious Bookmarks</a>.</p>')
Exemple #4
0
 def test_xss_arguments(self):
     addon = Addon.objects.get()
     au = AddonUser(addon=addon, user=self.user)
     amo.log(amo.LOG.CHANGE_USER_WITH_ROLE, au.user, au.get_role_display(),
             addon)
     log = ActivityLog.objects.get()
     eq_(log.to_string(),
         u'&lt;script src=&#34;x.js&#34;&gt; role changed to Owner for '
         '<a href="/en-US/firefox/addon/a3615/">Delicious Bookmarks</a>.')
Exemple #5
0
    def test_xss_arguments_and_escaping(self):
        addon = Addon.objects.get()
        addon.name = 'Delicious <script src="x.js">Bookmarks'
        addon.save()
        addon = addon.reload()
        au = AddonUser(addon=addon, user=self.user)
        amo.log(amo.LOG.CHANGE_USER_WITH_ROLE, au.user, au.get_role_display(),
                addon)
        log = ActivityLog.objects.get()

        log_expected = ('yolo role changed to Owner for <a href="/en-US/'
                        'firefox/addon/a3615/">Delicious &lt;script src='
                        '&#34;x.js&#34;&gt;Bookmarks</a>.')
        eq_(log.to_string(), log_expected)
        eq_(jingo.env.from_string('<p>{{ log }}</p>').render({'log': log}),
            '<p>%s</p>' % log_expected)
Exemple #6
0
    def test_xss_arguments_and_escaping(self):
        addon = Addon.objects.get()
        addon.name = 'Delicious <script src="x.js">Bookmarks'
        addon.save()
        addon = addon.reload()
        au = AddonUser(addon=addon, user=self.user)
        amo.log(amo.LOG.CHANGE_USER_WITH_ROLE, au.user, au.get_role_display(),
                addon)
        log = ActivityLog.objects.get()

        log_expected = ('yolo role changed to Owner for <a href="/en-US/'
                        'firefox/addon/a3615/">Delicious &lt;script src='
                        '&#34;x.js&#34;&gt;Bookmarks</a>.')
        eq_(log.to_string(), log_expected)
        eq_(jingo.env.from_string('<p>{{ log }}</p>').render({'log': log}),
            '<p>%s</p>' % log_expected)