You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
194 lines
7.2 KiB
Python
194 lines
7.2 KiB
Python
# -*- coding: utf-8 -*-
|
|
"""
|
|
werkzeug.testsuite.fixers
|
|
~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
Server / Browser fixers.
|
|
|
|
:copyright: (c) 2013 by Armin Ronacher.
|
|
:license: BSD, see LICENSE for more details.
|
|
"""
|
|
import unittest
|
|
|
|
from werkzeug.testsuite import WerkzeugTestCase
|
|
from werkzeug.datastructures import ResponseCacheControl
|
|
from werkzeug.http import parse_cache_control_header
|
|
|
|
from werkzeug.test import create_environ, Client
|
|
from werkzeug.wrappers import Request, Response
|
|
from werkzeug.contrib import fixers
|
|
from werkzeug.utils import redirect
|
|
|
|
|
|
@Request.application
|
|
def path_check_app(request):
|
|
return Response('PATH_INFO: %s\nSCRIPT_NAME: %s' % (
|
|
request.environ.get('PATH_INFO', ''),
|
|
request.environ.get('SCRIPT_NAME', '')
|
|
))
|
|
|
|
|
|
class ServerFixerTestCase(WerkzeugTestCase):
|
|
|
|
def test_cgi_root_fix(self):
|
|
app = fixers.CGIRootFix(path_check_app)
|
|
response = Response.from_app(app, dict(create_environ(),
|
|
SCRIPT_NAME='/foo',
|
|
PATH_INFO='/bar',
|
|
SERVER_SOFTWARE='lighttpd/1.4.27'
|
|
))
|
|
self.assert_equal(response.get_data(),
|
|
b'PATH_INFO: /foo/bar\nSCRIPT_NAME: ')
|
|
|
|
def test_cgi_root_fix_custom_app_root(self):
|
|
app = fixers.CGIRootFix(path_check_app, app_root='/baz/poop/')
|
|
response = Response.from_app(app, dict(create_environ(),
|
|
SCRIPT_NAME='/foo',
|
|
PATH_INFO='/bar'
|
|
))
|
|
self.assert_equal(response.get_data(), b'PATH_INFO: /foo/bar\nSCRIPT_NAME: baz/poop')
|
|
|
|
def test_path_info_from_request_uri_fix(self):
|
|
app = fixers.PathInfoFromRequestUriFix(path_check_app)
|
|
for key in 'REQUEST_URI', 'REQUEST_URL', 'UNENCODED_URL':
|
|
env = dict(create_environ(), SCRIPT_NAME='/test', PATH_INFO='/?????')
|
|
env[key] = '/test/foo%25bar?drop=this'
|
|
response = Response.from_app(app, env)
|
|
self.assert_equal(response.get_data(), b'PATH_INFO: /foo%bar\nSCRIPT_NAME: /test')
|
|
|
|
def test_proxy_fix(self):
|
|
@Request.application
|
|
def app(request):
|
|
return Response('%s|%s' % (
|
|
request.remote_addr,
|
|
# do not use request.host as this fixes too :)
|
|
request.environ['HTTP_HOST']
|
|
))
|
|
app = fixers.ProxyFix(app, num_proxies=2)
|
|
environ = dict(create_environ(),
|
|
HTTP_X_FORWARDED_PROTO="https",
|
|
HTTP_X_FORWARDED_HOST='example.com',
|
|
HTTP_X_FORWARDED_FOR='1.2.3.4, 5.6.7.8',
|
|
REMOTE_ADDR='127.0.0.1',
|
|
HTTP_HOST='fake'
|
|
)
|
|
|
|
response = Response.from_app(app, environ)
|
|
|
|
self.assert_equal(response.get_data(), b'1.2.3.4|example.com')
|
|
|
|
# And we must check that if it is a redirection it is
|
|
# correctly done:
|
|
|
|
redirect_app = redirect('/foo/bar.hml')
|
|
response = Response.from_app(redirect_app, environ)
|
|
|
|
wsgi_headers = response.get_wsgi_headers(environ)
|
|
assert wsgi_headers['Location'] == 'https://example.com/foo/bar.hml'
|
|
|
|
def test_proxy_fix_weird_enum(self):
|
|
@fixers.ProxyFix
|
|
@Request.application
|
|
def app(request):
|
|
return Response(request.remote_addr)
|
|
environ = dict(create_environ(),
|
|
HTTP_X_FORWARDED_FOR=',',
|
|
REMOTE_ADDR='127.0.0.1',
|
|
)
|
|
|
|
response = Response.from_app(app, environ)
|
|
self.assert_strict_equal(response.get_data(), b'127.0.0.1')
|
|
|
|
def test_header_rewriter_fix(self):
|
|
@Request.application
|
|
def application(request):
|
|
return Response("", headers=[
|
|
('X-Foo', 'bar')
|
|
])
|
|
application = fixers.HeaderRewriterFix(application, ('X-Foo',), (('X-Bar', '42'),))
|
|
response = Response.from_app(application, create_environ())
|
|
assert response.headers['Content-Type'] == 'text/plain; charset=utf-8'
|
|
assert 'X-Foo' not in response.headers
|
|
assert response.headers['X-Bar'] == '42'
|
|
|
|
|
|
class BrowserFixerTestCase(WerkzeugTestCase):
|
|
|
|
def test_ie_fixes(self):
|
|
@fixers.InternetExplorerFix
|
|
@Request.application
|
|
def application(request):
|
|
response = Response('binary data here', mimetype='application/vnd.ms-excel')
|
|
response.headers['Vary'] = 'Cookie'
|
|
response.headers['Content-Disposition'] = 'attachment; filename=foo.xls'
|
|
return response
|
|
|
|
c = Client(application, Response)
|
|
response = c.get('/', headers=[
|
|
('User-Agent', 'Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)')
|
|
])
|
|
|
|
# IE gets no vary
|
|
self.assert_equal(response.get_data(), b'binary data here')
|
|
assert 'vary' not in response.headers
|
|
assert response.headers['content-disposition'] == 'attachment; filename=foo.xls'
|
|
assert response.headers['content-type'] == 'application/vnd.ms-excel'
|
|
|
|
# other browsers do
|
|
c = Client(application, Response)
|
|
response = c.get('/')
|
|
self.assert_equal(response.get_data(), b'binary data here')
|
|
assert 'vary' in response.headers
|
|
|
|
cc = ResponseCacheControl()
|
|
cc.no_cache = True
|
|
|
|
@fixers.InternetExplorerFix
|
|
@Request.application
|
|
def application(request):
|
|
response = Response('binary data here', mimetype='application/vnd.ms-excel')
|
|
response.headers['Pragma'] = ', '.join(pragma)
|
|
response.headers['Cache-Control'] = cc.to_header()
|
|
response.headers['Content-Disposition'] = 'attachment; filename=foo.xls'
|
|
return response
|
|
|
|
|
|
# IE has no pragma or cache control
|
|
pragma = ('no-cache',)
|
|
c = Client(application, Response)
|
|
response = c.get('/', headers=[
|
|
('User-Agent', 'Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)')
|
|
])
|
|
self.assert_equal(response.get_data(), b'binary data here')
|
|
assert 'pragma' not in response.headers
|
|
assert 'cache-control' not in response.headers
|
|
assert response.headers['content-disposition'] == 'attachment; filename=foo.xls'
|
|
|
|
# IE has simplified pragma
|
|
pragma = ('no-cache', 'x-foo')
|
|
cc.proxy_revalidate = True
|
|
response = c.get('/', headers=[
|
|
('User-Agent', 'Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)')
|
|
])
|
|
self.assert_equal(response.get_data(), b'binary data here')
|
|
assert response.headers['pragma'] == 'x-foo'
|
|
assert response.headers['cache-control'] == 'proxy-revalidate'
|
|
assert response.headers['content-disposition'] == 'attachment; filename=foo.xls'
|
|
|
|
# regular browsers get everything
|
|
response = c.get('/')
|
|
self.assert_equal(response.get_data(), b'binary data here')
|
|
assert response.headers['pragma'] == 'no-cache, x-foo'
|
|
cc = parse_cache_control_header(response.headers['cache-control'],
|
|
cls=ResponseCacheControl)
|
|
assert cc.no_cache
|
|
assert cc.proxy_revalidate
|
|
assert response.headers['content-disposition'] == 'attachment; filename=foo.xls'
|
|
|
|
|
|
def suite():
|
|
suite = unittest.TestSuite()
|
|
suite.addTest(unittest.makeSuite(ServerFixerTestCase))
|
|
suite.addTest(unittest.makeSuite(BrowserFixerTestCase))
|
|
return suite
|