示例#1
0
 def testDirective_generateDirective_incompatibleType(self):
     violatedWrongInlineType = Directive("object-src", [])
     violatedWrongEvalType = Directive("style-src", [])
     assert violatedWrongInlineType.generateDirective(
         "inline", DirectiveTest.sampleURI1) == Directive.INVALID()
     assert violatedWrongEvalType.generateDirective(
         "eval", DirectiveTest.sampleURI1) == Directive.INVALID()
示例#2
0
 def testDirective_generateDirective_incompatibleURI(self):
     violatedRegular = Directive("object-src", [])
     violatedInline = Directive("style-src", [])
     violatedEval = Directive("script-src", [])
     assert violatedRegular.generateDirective("regular", URI.EMPTY()) == Directive.INVALID()
     assert violatedRegular.generateDirective("regular", URI.INVALID()) == Directive.INVALID()
     #assert violatedInline.generateDirective("inline", DirectiveTest.sampleURI1) == Directive.INVALID()
     assert violatedInline.generateDirective("inline", URI.INVALID()) == Directive.INVALID()
     #assert violatedEval.generateDirective("eval", DirectiveTest.sampleURI1) == Directive.INVALID()
     assert violatedEval.generateDirective("eval", URI.INVALID()) == Directive.INVALID()
示例#3
0
 def testDirective_generateDirective_incompatibleURI(self):
     violatedRegular = Directive("object-src", [])
     violatedInline = Directive("style-src", [])
     violatedEval = Directive("script-src", [])
     assert violatedRegular.generateDirective(
         "regular", URI.EMPTY()) == Directive.INVALID()
     assert violatedRegular.generateDirective(
         "regular", URI.INVALID()) == Directive.INVALID()
     #assert violatedInline.generateDirective("inline", DirectiveTest.sampleURI1) == Directive.INVALID()
     assert violatedInline.generateDirective(
         "inline", URI.INVALID()) == Directive.INVALID()
     #assert violatedEval.generateDirective("eval", DirectiveTest.sampleURI1) == Directive.INVALID()
     assert violatedEval.generateDirective(
         "eval", URI.INVALID()) == Directive.INVALID()
示例#4
0
 def testDirective_generateDirective_regular(self):
     violated = Directive(
         "object-src",
         [DirectiveTest.sampleSrcExpr1a, DirectiveTest.sampleSrcExpr2])
     generated = violated.generateDirective("regular",
                                            DirectiveTest.sampleURI2)
     assert generated == Directive(
         "object-src",
         [URISourceExpression("http", "seclab.ccs.neu.edu", 80, "/path")])
示例#5
0
 def testDirective_generateDirective_incompatibleType(self):
     violatedWrongInlineType = Directive("object-src", [])
     violatedWrongEvalType = Directive("style-src", [])
     assert violatedWrongInlineType.generateDirective("inline", DirectiveTest.sampleURI1) == Directive.INVALID()
     assert violatedWrongEvalType.generateDirective("eval", DirectiveTest.sampleURI1) == Directive.INVALID()
示例#6
0
 def testDirective_generateDirective_defaultSrcNotAllowed(self):
     violated = Directive("default-src", [])
     assert violated.generateDirective("regular", DirectiveTest.sampleURI1) == Directive.INVALID()
示例#7
0
 def testDirective_generateDirective_invalidType(self):
     violated = Directive("script-src", [DirectiveTest.sampleSrcExpr1a])
     assert violated.generateDirective("evaluate", URI.EMPTY()) == Directive.INVALID()
示例#8
0
 def testDirective_generateDirective_eval(self):
     violated = Directive("script-src", [DirectiveTest.sampleSrcExpr1a])
     generated = violated.generateDirective("eval", URI.EMPTY())
     assert generated == Directive("script-src", [SourceExpression.UNSAFE_EVAL()])
示例#9
0
 def testDirective_generateDirective_inline(self):
     violated = Directive("style-src", [DirectiveTest.sampleSrcExpr2])
     generated = violated.generateDirective("inline", URI.EMPTY())
     assert generated == Directive("style-src", [SourceExpression.UNSAFE_INLINE()])
示例#10
0
 def testDirective_generateDirective_regular(self):
     violated = Directive("object-src", [DirectiveTest.sampleSrcExpr1a, DirectiveTest.sampleSrcExpr2])
     generated = violated.generateDirective("regular", DirectiveTest.sampleURI2)
     assert generated == Directive("object-src", [URISourceExpression("http", "seclab.ccs.neu.edu", 80, "/path")])
示例#11
0
 def testDirective_generateDirective_defaultSrcNotAllowed(self):
     violated = Directive("default-src", [])
     assert violated.generateDirective(
         "regular", DirectiveTest.sampleURI1) == Directive.INVALID()
示例#12
0
 def testDirective_generateDirective_invalidType(self):
     violated = Directive("script-src", [DirectiveTest.sampleSrcExpr1a])
     assert violated.generateDirective("evaluate",
                                       URI.EMPTY()) == Directive.INVALID()
示例#13
0
 def testDirective_generateDirective_eval(self):
     violated = Directive("script-src", [DirectiveTest.sampleSrcExpr1a])
     generated = violated.generateDirective("eval", URI.EMPTY())
     assert generated == Directive("script-src",
                                   [SourceExpression.UNSAFE_EVAL()])
示例#14
0
 def testDirective_generateDirective_inline(self):
     violated = Directive("style-src", [DirectiveTest.sampleSrcExpr2])
     generated = violated.generateDirective("inline", URI.EMPTY())
     assert generated == Directive("style-src",
                                   [SourceExpression.UNSAFE_INLINE()])