Python _check_pymongo_common_misconfig Exemples

Exemple #1

Fichier : test_insights.py Projet : rycase/shiftleft

def test_pymongo_insights():
    tree = generate_ast_from_code("""
import pymongo
import ssl

client = pymongo.MongoClient()
    """)
    violations = insights._check_pymongo_common_misconfig(tree, None)
    assert len(violations) == 2

    tree = generate_ast_from_code("""
import pymongo
import ssl

client = pymongo.MongoClient('example.com', ssl=False, ssl_cert_reqs=ssl.CERT_NONE)
    """)
    violations = insights._check_pymongo_common_misconfig(tree, None)
    assert len(violations) == 3

    tree = generate_ast_from_code("""
import pymongo
import ssl

client = pymongo.MongoClient('mongodb://example.com/?ssl=true')
    """)
    violations = insights._check_pymongo_common_misconfig(tree, None)
    assert len(violations) == 1

Exemple #2

def test_pymongo_insights2():
    tree = generate_ast_from_code(
        """
import pymongo
import ssl
from pymongo.encryption import (Algorithm,
                                ClientEncryption)
from pymongo.encryption_options import AutoEncryptionOpts

client = pymongo.MongoClient('mongodb://example.com/?ssl=true')
    """
    )
    violations = insights._check_pymongo_common_misconfig(tree, None)
    assert len(violations) == 1

    tree = generate_ast_from_code(
        """
import pymongo
import ssl
from pymongo.encryption import (Algorithm,
                                ClientEncryption)
from pymongo.encryption_options import AutoEncryptionOpts

client = pymongo.MongoClient('mongodb://example.com/?ssl=true')

client_encryption = ClientEncryption(
        kms_providers,
        key_vault_namespace,
        client,
        coll.codec_options)
    """
    )
    violations = insights._check_pymongo_common_misconfig(tree, None)
    assert not violations

    tree = generate_ast_from_code(
        """
import pymongo
import ssl
from pymongo.encryption import (Algorithm,
                                ClientEncryption)
from pymongo.encryption_options import AutoEncryptionOpts

client = MongoClient('example.com',
                      username='******',
                      password='******',
                      authMechanism='MONGODB-CR')

client_encryption = ClientEncryption(
        kms_providers,
        key_vault_namespace,
        client,
        coll.codec_options)
    """
    )
    violations = insights._check_pymongo_common_misconfig(tree, None)
    assert len(violations) == 1

Exemple #3

Fichier : test_insights.py Projet : rycase/shiftleft

def test_pymongo_insights1():
    tree = generate_ast_from_code("""
from pymongo import MongoClient
client = MongoClient('mongodb://example.com/?ssl=true')
    """)
    violations = insights._check_pymongo_common_misconfig(tree, None)
    assert len(violations) == 1