mirror of
https://github.com/django/django.git
synced 2025-10-26 07:06:08 +00:00
433 lines
17 KiB
Python
433 lines
17 KiB
Python
# -*- encoding: utf-8 -*-
|
|
from __future__ import unicode_literals
|
|
|
|
import copy
|
|
import pickle
|
|
|
|
from django.core.exceptions import SuspiciousOperation
|
|
from django.http import (QueryDict, HttpResponse, HttpResponseRedirect,
|
|
HttpResponsePermanentRedirect, HttpResponseNotAllowed,
|
|
HttpResponseNotModified,
|
|
SimpleCookie, BadHeaderError,
|
|
parse_cookie)
|
|
from django.test import TestCase
|
|
from django.utils.encoding import smart_str
|
|
from django.utils import six
|
|
from django.utils import unittest
|
|
|
|
|
|
class QueryDictTests(unittest.TestCase):
|
|
def test_missing_key(self):
|
|
q = QueryDict(str(''))
|
|
self.assertRaises(KeyError, q.__getitem__, 'foo')
|
|
|
|
def test_immutability(self):
|
|
q = QueryDict(str(''))
|
|
self.assertRaises(AttributeError, q.__setitem__, 'something', 'bar')
|
|
self.assertRaises(AttributeError, q.setlist, 'foo', ['bar'])
|
|
self.assertRaises(AttributeError, q.appendlist, 'foo', ['bar'])
|
|
self.assertRaises(AttributeError, q.update, {'foo': 'bar'})
|
|
self.assertRaises(AttributeError, q.pop, 'foo')
|
|
self.assertRaises(AttributeError, q.popitem)
|
|
self.assertRaises(AttributeError, q.clear)
|
|
|
|
def test_immutable_get_with_default(self):
|
|
q = QueryDict(str(''))
|
|
self.assertEqual(q.get('foo', 'default'), 'default')
|
|
|
|
def test_immutable_basic_operations(self):
|
|
q = QueryDict(str(''))
|
|
self.assertEqual(q.getlist('foo'), [])
|
|
if not six.PY3:
|
|
self.assertEqual(q.has_key('foo'), False)
|
|
self.assertEqual('foo' in q, False)
|
|
self.assertEqual(list(six.iteritems(q)), [])
|
|
self.assertEqual(list(six.iterlists(q)), [])
|
|
self.assertEqual(list(six.iterkeys(q)), [])
|
|
self.assertEqual(list(six.itervalues(q)), [])
|
|
self.assertEqual(len(q), 0)
|
|
self.assertEqual(q.urlencode(), '')
|
|
|
|
def test_single_key_value(self):
|
|
"""Test QueryDict with one key/value pair"""
|
|
|
|
q = QueryDict(str('foo=bar'))
|
|
self.assertEqual(q['foo'], 'bar')
|
|
self.assertRaises(KeyError, q.__getitem__, 'bar')
|
|
self.assertRaises(AttributeError, q.__setitem__, 'something', 'bar')
|
|
|
|
self.assertEqual(q.get('foo', 'default'), 'bar')
|
|
self.assertEqual(q.get('bar', 'default'), 'default')
|
|
self.assertEqual(q.getlist('foo'), ['bar'])
|
|
self.assertEqual(q.getlist('bar'), [])
|
|
|
|
self.assertRaises(AttributeError, q.setlist, 'foo', ['bar'])
|
|
self.assertRaises(AttributeError, q.appendlist, 'foo', ['bar'])
|
|
|
|
if not six.PY3:
|
|
self.assertTrue(q.has_key('foo'))
|
|
self.assertTrue('foo' in q)
|
|
if not six.PY3:
|
|
self.assertFalse(q.has_key('bar'))
|
|
self.assertFalse('bar' in q)
|
|
|
|
self.assertEqual(list(six.iteritems(q)), [('foo', 'bar')])
|
|
self.assertEqual(list(six.iterlists(q)), [('foo', ['bar'])])
|
|
self.assertEqual(list(six.iterkeys(q)), ['foo'])
|
|
self.assertEqual(list(six.itervalues(q)), ['bar'])
|
|
self.assertEqual(len(q), 1)
|
|
|
|
self.assertRaises(AttributeError, q.update, {'foo': 'bar'})
|
|
self.assertRaises(AttributeError, q.pop, 'foo')
|
|
self.assertRaises(AttributeError, q.popitem)
|
|
self.assertRaises(AttributeError, q.clear)
|
|
self.assertRaises(AttributeError, q.setdefault, 'foo', 'bar')
|
|
|
|
self.assertEqual(q.urlencode(), 'foo=bar')
|
|
|
|
def test_urlencode(self):
|
|
q = QueryDict(str(''), mutable=True)
|
|
q['next'] = '/a&b/'
|
|
self.assertEqual(q.urlencode(), 'next=%2Fa%26b%2F')
|
|
self.assertEqual(q.urlencode(safe='/'), 'next=/a%26b/')
|
|
q = QueryDict(str(''), mutable=True)
|
|
q['next'] = '/t\xebst&key/'
|
|
self.assertEqual(q.urlencode(), 'next=%2Ft%C3%ABst%26key%2F')
|
|
self.assertEqual(q.urlencode(safe='/'), 'next=/t%C3%ABst%26key/')
|
|
|
|
def test_mutable_copy(self):
|
|
"""A copy of a QueryDict is mutable."""
|
|
q = QueryDict(str('')).copy()
|
|
self.assertRaises(KeyError, q.__getitem__, "foo")
|
|
q['name'] = 'john'
|
|
self.assertEqual(q['name'], 'john')
|
|
|
|
def test_mutable_delete(self):
|
|
q = QueryDict(str('')).copy()
|
|
q['name'] = 'john'
|
|
del q['name']
|
|
self.assertFalse('name' in q)
|
|
|
|
def test_basic_mutable_operations(self):
|
|
q = QueryDict(str('')).copy()
|
|
q['name'] = 'john'
|
|
self.assertEqual(q.get('foo', 'default'), 'default')
|
|
self.assertEqual(q.get('name', 'default'), 'john')
|
|
self.assertEqual(q.getlist('name'), ['john'])
|
|
self.assertEqual(q.getlist('foo'), [])
|
|
|
|
q.setlist('foo', ['bar', 'baz'])
|
|
self.assertEqual(q.get('foo', 'default'), 'baz')
|
|
self.assertEqual(q.getlist('foo'), ['bar', 'baz'])
|
|
|
|
q.appendlist('foo', 'another')
|
|
self.assertEqual(q.getlist('foo'), ['bar', 'baz', 'another'])
|
|
self.assertEqual(q['foo'], 'another')
|
|
if not six.PY3:
|
|
self.assertTrue(q.has_key('foo'))
|
|
self.assertTrue('foo' in q)
|
|
|
|
self.assertEqual(list(six.iteritems(q)), [('foo', 'another'), ('name', 'john')])
|
|
self.assertEqual(list(six.iterlists(q)), [('foo', ['bar', 'baz', 'another']), ('name', ['john'])])
|
|
self.assertEqual(list(six.iterkeys(q)), ['foo', 'name'])
|
|
self.assertEqual(list(six.itervalues(q)), ['another', 'john'])
|
|
self.assertEqual(len(q), 2)
|
|
|
|
q.update({'foo': 'hello'})
|
|
self.assertEqual(q['foo'], 'hello')
|
|
self.assertEqual(q.get('foo', 'not available'), 'hello')
|
|
self.assertEqual(q.getlist('foo'), ['bar', 'baz', 'another', 'hello'])
|
|
self.assertEqual(q.pop('foo'), ['bar', 'baz', 'another', 'hello'])
|
|
self.assertEqual(q.pop('foo', 'not there'), 'not there')
|
|
self.assertEqual(q.get('foo', 'not there'), 'not there')
|
|
self.assertEqual(q.setdefault('foo', 'bar'), 'bar')
|
|
self.assertEqual(q['foo'], 'bar')
|
|
self.assertEqual(q.getlist('foo'), ['bar'])
|
|
self.assertEqual(q.urlencode(), 'foo=bar&name=john')
|
|
|
|
q.clear()
|
|
self.assertEqual(len(q), 0)
|
|
|
|
def test_multiple_keys(self):
|
|
"""Test QueryDict with two key/value pairs with same keys."""
|
|
|
|
q = QueryDict(str('vote=yes&vote=no'))
|
|
|
|
self.assertEqual(q['vote'], 'no')
|
|
self.assertRaises(AttributeError, q.__setitem__, 'something', 'bar')
|
|
|
|
self.assertEqual(q.get('vote', 'default'), 'no')
|
|
self.assertEqual(q.get('foo', 'default'), 'default')
|
|
self.assertEqual(q.getlist('vote'), ['yes', 'no'])
|
|
self.assertEqual(q.getlist('foo'), [])
|
|
|
|
self.assertRaises(AttributeError, q.setlist, 'foo', ['bar', 'baz'])
|
|
self.assertRaises(AttributeError, q.setlist, 'foo', ['bar', 'baz'])
|
|
self.assertRaises(AttributeError, q.appendlist, 'foo', ['bar'])
|
|
|
|
if not six.PY3:
|
|
self.assertEqual(q.has_key('vote'), True)
|
|
self.assertEqual('vote' in q, True)
|
|
if not six.PY3:
|
|
self.assertEqual(q.has_key('foo'), False)
|
|
self.assertEqual('foo' in q, False)
|
|
self.assertEqual(list(six.iteritems(q)), [('vote', 'no')])
|
|
self.assertEqual(list(six.iterlists(q)), [('vote', ['yes', 'no'])])
|
|
self.assertEqual(list(six.iterkeys(q)), ['vote'])
|
|
self.assertEqual(list(six.itervalues(q)), ['no'])
|
|
self.assertEqual(len(q), 1)
|
|
|
|
self.assertRaises(AttributeError, q.update, {'foo': 'bar'})
|
|
self.assertRaises(AttributeError, q.pop, 'foo')
|
|
self.assertRaises(AttributeError, q.popitem)
|
|
self.assertRaises(AttributeError, q.clear)
|
|
self.assertRaises(AttributeError, q.setdefault, 'foo', 'bar')
|
|
self.assertRaises(AttributeError, q.__delitem__, 'vote')
|
|
|
|
if not six.PY3:
|
|
def test_invalid_input_encoding(self):
|
|
"""
|
|
QueryDicts must be able to handle invalid input encoding (in this
|
|
case, bad UTF-8 encoding).
|
|
|
|
This test doesn't apply under Python 3 because the URL is a string
|
|
and not a bytestring.
|
|
"""
|
|
q = QueryDict(str(b'foo=bar&foo=\xff'))
|
|
self.assertEqual(q['foo'], '\ufffd')
|
|
self.assertEqual(q.getlist('foo'), ['bar', '\ufffd'])
|
|
|
|
def test_pickle(self):
|
|
q = QueryDict(str(''))
|
|
q1 = pickle.loads(pickle.dumps(q, 2))
|
|
self.assertEqual(q == q1, True)
|
|
q = QueryDict(str('a=b&c=d'))
|
|
q1 = pickle.loads(pickle.dumps(q, 2))
|
|
self.assertEqual(q == q1, True)
|
|
q = QueryDict(str('a=b&c=d&a=1'))
|
|
q1 = pickle.loads(pickle.dumps(q, 2))
|
|
self.assertEqual(q == q1, True)
|
|
|
|
def test_update_from_querydict(self):
|
|
"""Regression test for #8278: QueryDict.update(QueryDict)"""
|
|
x = QueryDict(str("a=1&a=2"), mutable=True)
|
|
y = QueryDict(str("a=3&a=4"))
|
|
x.update(y)
|
|
self.assertEqual(x.getlist('a'), ['1', '2', '3', '4'])
|
|
|
|
def test_non_default_encoding(self):
|
|
"""#13572 - QueryDict with a non-default encoding"""
|
|
q = QueryDict(str('cur=%A4'), encoding='iso-8859-15')
|
|
self.assertEqual(q.encoding, 'iso-8859-15')
|
|
self.assertEqual(list(six.iteritems(q)), [('cur', '€')])
|
|
self.assertEqual(q.urlencode(), 'cur=%A4')
|
|
q = q.copy()
|
|
self.assertEqual(q.encoding, 'iso-8859-15')
|
|
self.assertEqual(list(six.iteritems(q)), [('cur', '€')])
|
|
self.assertEqual(q.urlencode(), 'cur=%A4')
|
|
self.assertEqual(copy.copy(q).encoding, 'iso-8859-15')
|
|
self.assertEqual(copy.deepcopy(q).encoding, 'iso-8859-15')
|
|
|
|
class HttpResponseTests(unittest.TestCase):
|
|
|
|
def test_headers_type(self):
|
|
r = HttpResponse()
|
|
|
|
# The following tests explicitly test types in addition to values
|
|
# because in Python 2 u'foo' == b'foo'.
|
|
|
|
# ASCII unicode or bytes values are converted to native strings.
|
|
r['key'] = 'test'
|
|
self.assertEqual(r['key'], str('test'))
|
|
self.assertIsInstance(r['key'], str)
|
|
r['key'] = 'test'.encode('ascii')
|
|
self.assertEqual(r['key'], str('test'))
|
|
self.assertIsInstance(r['key'], str)
|
|
|
|
# Latin-1 unicode or bytes values are also converted to native strings.
|
|
r['key'] = 'café'
|
|
self.assertEqual(r['key'], smart_str('café', 'latin-1'))
|
|
self.assertIsInstance(r['key'], str)
|
|
r['key'] = 'café'.encode('latin-1')
|
|
self.assertEqual(r['key'], smart_str('café', 'latin-1'))
|
|
self.assertIsInstance(r['key'], str)
|
|
|
|
# Other unicode values are MIME-encoded (there's no way to pass them as bytes).
|
|
r['key'] = '†'
|
|
self.assertEqual(r['key'], str('=?utf-8?b?4oCg?='))
|
|
self.assertIsInstance(r['key'], str)
|
|
|
|
# The response also converts unicode or bytes keys to strings, but requires
|
|
# them to contain ASCII
|
|
r = HttpResponse()
|
|
r['foo'] = 'bar'
|
|
l = list(r.items())
|
|
self.assertEqual(l[0], ('foo', 'bar'))
|
|
self.assertIsInstance(l[0][0], str)
|
|
|
|
r = HttpResponse()
|
|
r[b'foo'] = 'bar'
|
|
l = list(r.items())
|
|
self.assertEqual(l[0], ('foo', 'bar'))
|
|
self.assertIsInstance(l[0][0], str)
|
|
|
|
r = HttpResponse()
|
|
self.assertRaises(UnicodeError, r.__setitem__, 'føø', 'bar')
|
|
self.assertRaises(UnicodeError, r.__setitem__, 'føø'.encode('utf-8'), 'bar')
|
|
|
|
|
|
def test_newlines_in_headers(self):
|
|
# Bug #10188: Do not allow newlines in headers (CR or LF)
|
|
r = HttpResponse()
|
|
self.assertRaises(BadHeaderError, r.__setitem__, 'test\rstr', 'test')
|
|
self.assertRaises(BadHeaderError, r.__setitem__, 'test\nstr', 'test')
|
|
|
|
def test_dict_behavior(self):
|
|
"""
|
|
Test for bug #14020: Make HttpResponse.get work like dict.get
|
|
"""
|
|
r = HttpResponse()
|
|
self.assertEqual(r.get('test'), None)
|
|
|
|
def test_non_string_content(self):
|
|
#Bug 16494: HttpResponse should behave consistently with non-strings
|
|
r = HttpResponse(12345)
|
|
self.assertEqual(r.content, b'12345')
|
|
|
|
#test content via property
|
|
r = HttpResponse()
|
|
r.content = 12345
|
|
self.assertEqual(r.content, b'12345')
|
|
|
|
def test_iter_content(self):
|
|
r = HttpResponse(['abc', 'def', 'ghi'])
|
|
self.assertEqual(r.content, b'abcdefghi')
|
|
|
|
#test iter content via property
|
|
r = HttpResponse()
|
|
r.content = ['idan', 'alex', 'jacob']
|
|
self.assertEqual(r.content, b'idanalexjacob')
|
|
|
|
r = HttpResponse()
|
|
r.content = [1, 2, 3]
|
|
self.assertEqual(r.content, b'123')
|
|
|
|
#test retrieval explicitly using iter and odd inputs
|
|
r = HttpResponse()
|
|
r.content = ['1', '2', 3, '\u079e']
|
|
my_iter = r.__iter__()
|
|
result = list(my_iter)
|
|
#'\xde\x9e' == unichr(1950).encode('utf-8')
|
|
self.assertEqual(result, [b'1', b'2', b'3', b'\xde\x9e'])
|
|
self.assertEqual(r.content, b'123\xde\x9e')
|
|
|
|
#with Content-Encoding header
|
|
r = HttpResponse([1,1,2,4,8])
|
|
r['Content-Encoding'] = 'winning'
|
|
self.assertEqual(r.content, b'11248')
|
|
r.content = ['\u079e',]
|
|
self.assertRaises(UnicodeEncodeError,
|
|
getattr, r, 'content')
|
|
|
|
def test_file_interface(self):
|
|
r = HttpResponse()
|
|
r.write(b"hello")
|
|
self.assertEqual(r.tell(), 5)
|
|
r.write("привет")
|
|
self.assertEqual(r.tell(), 17)
|
|
|
|
r = HttpResponse(['abc'])
|
|
self.assertRaises(Exception, r.write, 'def')
|
|
|
|
def test_unsafe_redirect(self):
|
|
bad_urls = [
|
|
'data:text/html,<script>window.alert("xss")</script>',
|
|
'mailto:test@example.com',
|
|
'file:///etc/passwd',
|
|
]
|
|
for url in bad_urls:
|
|
self.assertRaises(SuspiciousOperation,
|
|
HttpResponseRedirect, url)
|
|
self.assertRaises(SuspiciousOperation,
|
|
HttpResponsePermanentRedirect, url)
|
|
|
|
|
|
class HttpResponseSubclassesTests(TestCase):
|
|
def test_redirect(self):
|
|
response = HttpResponseRedirect('/redirected/')
|
|
self.assertEqual(response.status_code, 302)
|
|
# Test that standard HttpResponse init args can be used
|
|
response = HttpResponseRedirect('/redirected/',
|
|
content='The resource has temporarily moved',
|
|
content_type='text/html')
|
|
self.assertContains(response, 'The resource has temporarily moved', status_code=302)
|
|
|
|
def test_not_modified(self):
|
|
response = HttpResponseNotModified()
|
|
self.assertEqual(response.status_code, 304)
|
|
# 304 responses should not have content/content-type
|
|
with self.assertRaises(AttributeError):
|
|
response.content = "Hello dear"
|
|
self.assertNotIn('content-type', response)
|
|
|
|
def test_not_allowed(self):
|
|
response = HttpResponseNotAllowed(['GET'])
|
|
self.assertEqual(response.status_code, 405)
|
|
# Test that standard HttpResponse init args can be used
|
|
response = HttpResponseNotAllowed(['GET'],
|
|
content='Only the GET method is allowed',
|
|
content_type='text/html')
|
|
self.assertContains(response, 'Only the GET method is allowed', status_code=405)
|
|
|
|
class CookieTests(unittest.TestCase):
|
|
def test_encode(self):
|
|
"""
|
|
Test that we don't output tricky characters in encoded value
|
|
"""
|
|
c = SimpleCookie()
|
|
c['test'] = "An,awkward;value"
|
|
self.assertTrue(";" not in c.output().rstrip(';')) # IE compat
|
|
self.assertTrue("," not in c.output().rstrip(';')) # Safari compat
|
|
|
|
def test_decode(self):
|
|
"""
|
|
Test that we can still preserve semi-colons and commas
|
|
"""
|
|
c = SimpleCookie()
|
|
c['test'] = "An,awkward;value"
|
|
c2 = SimpleCookie()
|
|
c2.load(c.output())
|
|
self.assertEqual(c['test'].value, c2['test'].value)
|
|
|
|
def test_decode_2(self):
|
|
"""
|
|
Test that we haven't broken normal encoding
|
|
"""
|
|
c = SimpleCookie()
|
|
c['test'] = b"\xf0"
|
|
c2 = SimpleCookie()
|
|
c2.load(c.output())
|
|
self.assertEqual(c['test'].value, c2['test'].value)
|
|
|
|
def test_nonstandard_keys(self):
|
|
"""
|
|
Test that a single non-standard cookie name doesn't affect all cookies. Ticket #13007.
|
|
"""
|
|
self.assertTrue('good_cookie' in parse_cookie('good_cookie=yes;bad:cookie=yes').keys())
|
|
|
|
def test_repeated_nonstandard_keys(self):
|
|
"""
|
|
Test that a repeated non-standard name doesn't affect all cookies. Ticket #15852
|
|
"""
|
|
self.assertTrue('good_cookie' in parse_cookie('a,=b; a,=c; good_cookie=yes').keys())
|
|
|
|
def test_httponly_after_load(self):
|
|
"""
|
|
Test that we can use httponly attribute on cookies that we load
|
|
"""
|
|
c = SimpleCookie()
|
|
c.load("name=val")
|
|
c['name']['httponly'] = True
|
|
self.assertTrue(c['name']['httponly'])
|
|
|