def test_trap_duplicate(self):
self.create_switch('webapps-unique-by-domain')
manifest = 'https://omg.org/yes.webapp'
request = Mock(
method='POST',
POST={'manifest': manifest},
return_value = collections.namedtuple('FakeResponse',
'status_code content'),
)
# Mocking a queryset that contains single `AddonUser` that contains
# a `Webapp` with a suspicious name.
request.user.addonuser_set.filter.return_value = [
AddonUser(addon=Webapp(name='<script>alert("poop")</script>'))
]
standalone_hosted_upload(request)
msg = trap_duplicate(request, manifest)
assert '<script>alert("poop")</script>' in msg, (
'Error message should be escaped.')
def test_trap_duplicate(self):
self.post_addon()
standalone_hosted_upload(self.req)
assert trap_duplicate(self.req, 'http://allizom.org/mozball.webapp')
def test_trap_duplicate(self):
self.post_addon()
standalone_hosted_upload(self.req)
assert trap_duplicate(self.req, 'http://allizom.org/mozball.webapp')
