mirror of
https://github.com/django/django.git
synced 2025-09-12 20:19:25 +00:00
96 lines
3.4 KiB
Python
96 lines
3.4 KiB
Python
from itertools import product
|
|
|
|
from asgiref.sync import iscoroutinefunction
|
|
|
|
from django.http import HttpRequest, HttpResponse
|
|
from django.test import SimpleTestCase
|
|
from django.utils.csp import CSP
|
|
from django.views.decorators.csp import csp_override, csp_report_only_override
|
|
|
|
basic_config = {
|
|
"default-src": [CSP.SELF],
|
|
}
|
|
|
|
|
|
class CSPOverrideDecoratorTest(SimpleTestCase):
|
|
def test_wrapped_sync_function_is_not_coroutine_function(self):
|
|
def sync_view(request):
|
|
return HttpResponse()
|
|
|
|
wrapped_view = csp_override({})(sync_view)
|
|
self.assertIs(iscoroutinefunction(wrapped_view), False)
|
|
|
|
def test_wrapped_async_function_is_coroutine_function(self):
|
|
async def async_view(request):
|
|
return HttpResponse()
|
|
|
|
wrapped_view = csp_override({})(async_view)
|
|
self.assertIs(iscoroutinefunction(wrapped_view), True)
|
|
|
|
def test_decorator_requires_mapping(self):
|
|
for config, decorator in product(
|
|
[None, 0, False, [], [1, 2, 3], 42, {4, 5}],
|
|
(csp_override, csp_report_only_override),
|
|
):
|
|
with (
|
|
self.subTest(config=config, decorator=decorator),
|
|
self.assertRaisesMessage(TypeError, "CSP config should be a mapping"),
|
|
):
|
|
decorator(config)
|
|
|
|
def test_csp_override(self):
|
|
@csp_override(basic_config)
|
|
def sync_view(request):
|
|
return HttpResponse("OK")
|
|
|
|
response = sync_view(HttpRequest())
|
|
self.assertEqual(response._csp_config, basic_config)
|
|
self.assertIs(hasattr(response, "_csp_ro_config"), False)
|
|
|
|
async def test_csp_override_async_view(self):
|
|
@csp_override(basic_config)
|
|
async def async_view(request):
|
|
return HttpResponse("OK")
|
|
|
|
response = await async_view(HttpRequest())
|
|
self.assertEqual(response._csp_config, basic_config)
|
|
self.assertIs(hasattr(response, "_csp_ro_config"), False)
|
|
|
|
def test_csp_report_only_override(self):
|
|
@csp_report_only_override(basic_config)
|
|
def sync_view(request):
|
|
return HttpResponse("OK")
|
|
|
|
response = sync_view(HttpRequest())
|
|
self.assertEqual(response._csp_ro_config, basic_config)
|
|
self.assertIs(hasattr(response, "_csp_config"), False)
|
|
|
|
async def test_csp_report_only_override_async_view(self):
|
|
@csp_report_only_override(basic_config)
|
|
async def async_view(request):
|
|
return HttpResponse("OK")
|
|
|
|
response = await async_view(HttpRequest())
|
|
self.assertEqual(response._csp_ro_config, basic_config)
|
|
self.assertIs(hasattr(response, "_csp_config"), False)
|
|
|
|
def test_csp_override_both(self):
|
|
@csp_override(basic_config)
|
|
@csp_report_only_override(basic_config)
|
|
def sync_view(request):
|
|
return HttpResponse("OK")
|
|
|
|
response = sync_view(HttpRequest())
|
|
self.assertEqual(response._csp_config, basic_config)
|
|
self.assertEqual(response._csp_ro_config, basic_config)
|
|
|
|
async def test_csp_override_both_async_view(self):
|
|
@csp_override(basic_config)
|
|
@csp_report_only_override(basic_config)
|
|
async def async_view(request):
|
|
return HttpResponse("OK")
|
|
|
|
response = await async_view(HttpRequest())
|
|
self.assertEqual(response._csp_config, basic_config)
|
|
self.assertEqual(response._csp_ro_config, basic_config)
|