Git-Mirrors/mat2-web
1
0
Fork 0
mirror of https://0xacab.org/jvoisin/mat2-web.git synced 2025-06-27 07:40:57 -04:00
Code Issues Projects Releases Packages Wiki Activity

Resolve "Fuzzing Errors /api/upload"

Browse source
This commit is contained in:
jfriedli 2020-05-08 09:10:18 -07:00
parent 9157dee69f
commit 853ace7d83
5 changed files with 46 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

21
test/test_api.py
View file

@ -70,7 +70,7 @@ class Mat2APITestCase(unittest.TestCase):
self.assertEqual(request.status_code, 400)
error = request.get_json()['message']
self.assertEqual(error, 'Failed decoding file: Incorrect padding')
self.assertEqual(error, 'Failed decoding file')
def test_api_not_supported(self):
request = self.app.post('/api/upload',
@ -400,6 +400,25 @@ class Mat2APITestCase(unittest.TestCase):
request = app.get(download_link)
self.assertEqual(code, request.status_code)
def test_upload_naughty_input(self):
request = self.app.post('/api/upload',
data='{"file_name": "\\\\", '
'"file": "\\\\"}',
headers={'content-type': 'application/json'}
)
error_message = request.get_json()['message']
self.assertEqual(400, request.status_code)
self.assertEqual("Invalid Filename", error_message)
request = self.app.post('/api/upload',
data='{"file_name": "﷽", '
'"file": "﷽"}',
headers={'content-type': 'application/json'}
)
error_message = request.get_json()['message']
self.assertEqual(400, request.status_code)
self.assertEqual("Failed decoding file", error_message)
if __name__ == '__main__':
unittest.main()