test: add test for path traversal fix
This commit is contained in:
@@ -8,7 +8,7 @@ import time
|
|||||||
from copy import deepcopy
|
from copy import deepcopy
|
||||||
from datetime import UTC, datetime, timedelta
|
from datetime import UTC, datetime, timedelta
|
||||||
from pathlib import Path
|
from pathlib import Path
|
||||||
from unittest.mock import ANY, MagicMock, PropertyMock
|
from unittest.mock import ANY, MagicMock, PropertyMock, patch
|
||||||
|
|
||||||
import pandas as pd
|
import pandas as pd
|
||||||
import pytest
|
import pytest
|
||||||
@@ -180,11 +180,12 @@ def test_api_ui_fallback(botclient, mocker):
|
|||||||
# Allow both fallback or real UI
|
# Allow both fallback or real UI
|
||||||
assert "`freqtrade install-ui`" in rc.text or "<!DOCTYPE html>" in rc.text
|
assert "`freqtrade install-ui`" in rc.text or "<!DOCTYPE html>" in rc.text
|
||||||
|
|
||||||
mocker.patch.object(Path, "is_file", MagicMock(side_effect=[True, False]))
|
for test_string in ["%2F%2F%2Fetc/passwd", "assets%2F..%2F..%2F..%2Fdeps.py"]:
|
||||||
rc = client_get(client, "%2F%2F%2Fetc/passwd")
|
with patch.object(Path, "is_file", MagicMock(side_effect=[True, False])):
|
||||||
assert rc.status_code == 200
|
rc = client_get(client, test_string)
|
||||||
|
assert rc.status_code == 200
|
||||||
|
|
||||||
assert "`freqtrade install-ui`" in rc.text
|
assert "`freqtrade install-ui`" in rc.text
|
||||||
|
|
||||||
|
|
||||||
def test_api_ui_version(botclient, mocker):
|
def test_api_ui_version(botclient, mocker):
|
||||||
|
|||||||
Reference in New Issue
Block a user