test: add test for path traversal fix

This commit is contained in:
Matthias
2026-02-24 21:44:37 +01:00
parent 429276cac6
commit 34df7b1793
+6 -5
View File
@@ -8,7 +8,7 @@ import time
from copy import deepcopy from copy import deepcopy
from datetime import UTC, datetime, timedelta from datetime import UTC, datetime, timedelta
from pathlib import Path from pathlib import Path
from unittest.mock import ANY, MagicMock, PropertyMock from unittest.mock import ANY, MagicMock, PropertyMock, patch
import pandas as pd import pandas as pd
import pytest import pytest
@@ -180,11 +180,12 @@ def test_api_ui_fallback(botclient, mocker):
# Allow both fallback or real UI # Allow both fallback or real UI
assert "`freqtrade install-ui`" in rc.text or "<!DOCTYPE html>" in rc.text assert "`freqtrade install-ui`" in rc.text or "<!DOCTYPE html>" in rc.text
mocker.patch.object(Path, "is_file", MagicMock(side_effect=[True, False])) for test_string in ["%2F%2F%2Fetc/passwd", "assets%2F..%2F..%2F..%2Fdeps.py"]:
rc = client_get(client, "%2F%2F%2Fetc/passwd") with patch.object(Path, "is_file", MagicMock(side_effect=[True, False])):
assert rc.status_code == 200 rc = client_get(client, test_string)
assert rc.status_code == 200
assert "`freqtrade install-ui`" in rc.text assert "`freqtrade install-ui`" in rc.text
def test_api_ui_version(botclient, mocker): def test_api_ui_version(botclient, mocker):