mirror of
https://github.com/onionshare/onionshare.git
synced 2024-10-01 01:35:40 -04:00
118 lines
4.4 KiB
Python
118 lines
4.4 KiB
Python
import requests
|
|
|
|
from PySide6 import QtTest
|
|
|
|
from .gui_base_test import GuiBaseTest
|
|
|
|
|
|
class TestWebsite(GuiBaseTest):
|
|
# Shared test methods
|
|
|
|
def view_website(self, tab):
|
|
"""Test that we can download the share"""
|
|
url = f"http://127.0.0.1:{tab.app.port}/"
|
|
r = requests.get(url)
|
|
QtTest.QTest.qWait(500, self.gui.qtapp)
|
|
self.assertTrue("This is a test website hosted by OnionShare" in r.text)
|
|
|
|
def check_csp_header(self, tab):
|
|
"""Test that the CSP header is present when enabled or vice versa"""
|
|
url = f"http://127.0.0.1:{tab.app.port}/"
|
|
r = requests.get(url)
|
|
QtTest.QTest.qWait(500, self.gui.qtapp)
|
|
if tab.settings.get("website", "disable_csp"):
|
|
self.assertFalse("Content-Security-Policy" in r.headers)
|
|
elif tab.settings.get("website", "custom_csp"):
|
|
self.assertEqual(tab.settings.get("website", "custom_csp"), r.headers["Content-Security-Policy"])
|
|
else:
|
|
self.assertEqual("default-src 'self'; frame-ancestors 'none'; form-action 'self'; base-uri 'self'; img-src 'self' data:;", r.headers["Content-Security-Policy"])
|
|
|
|
def run_all_website_mode_setup_tests(self, tab):
|
|
"""Tests in website mode prior to starting a share"""
|
|
tab.get_mode().server_status.file_selection.file_list.add_file(
|
|
self.tmpfile_index_html
|
|
)
|
|
for filename in self.tmpfiles:
|
|
tab.get_mode().server_status.file_selection.file_list.add_file(filename)
|
|
|
|
self.file_selection_widget_has_files(tab, 11)
|
|
self.history_is_not_visible(tab)
|
|
self.click_toggle_history(tab)
|
|
self.history_is_visible(tab)
|
|
|
|
def run_all_website_mode_started_tests(self, tab, startup_time=500):
|
|
"""Tests in website mode after starting a share"""
|
|
self.server_working_on_start_button_pressed(tab)
|
|
self.server_status_indicator_says_starting(tab)
|
|
self.add_remove_buttons_hidden(tab)
|
|
self.server_is_started(tab, startup_time)
|
|
self.web_server_is_running(tab)
|
|
self.url_description_shown(tab)
|
|
self.url_instructions_shown(tab)
|
|
self.url_shown(tab)
|
|
self.have_copy_url_button(tab)
|
|
self.have_show_url_qr_code_button(tab)
|
|
self.client_auth_instructions_shown(tab)
|
|
self.private_key_shown(tab)
|
|
self.have_show_client_auth_qr_code_button(tab)
|
|
self.server_status_indicator_says_started(tab)
|
|
|
|
def run_all_website_mode_download_tests(self, tab):
|
|
"""Tests in website mode after viewing the site"""
|
|
self.run_all_website_mode_setup_tests(tab)
|
|
self.run_all_website_mode_started_tests(tab, startup_time=500)
|
|
self.view_website(tab)
|
|
self.check_csp_header(tab)
|
|
self.history_widgets_present(tab)
|
|
self.server_is_stopped(tab)
|
|
self.web_server_is_stopped(tab)
|
|
self.server_status_indicator_says_closed(tab)
|
|
self.add_button_visible(tab)
|
|
|
|
# Tests
|
|
|
|
def test_website(self):
|
|
"""
|
|
Test website mode
|
|
"""
|
|
tab = self.new_website_tab()
|
|
self.run_all_website_mode_download_tests(tab)
|
|
self.close_all_tabs()
|
|
|
|
def test_csp_disabled(self):
|
|
"""
|
|
Test disabling CSP
|
|
"""
|
|
tab = self.new_website_tab()
|
|
tab.get_mode().disable_csp_checkbox.click()
|
|
self.assertFalse(tab.get_mode().custom_csp_checkbox.isEnabled())
|
|
self.run_all_website_mode_download_tests(tab)
|
|
self.close_all_tabs()
|
|
|
|
def test_csp_custom(self):
|
|
"""
|
|
Test a custom CSP
|
|
"""
|
|
tab = self.new_website_tab()
|
|
tab.get_mode().custom_csp_checkbox.click()
|
|
self.assertFalse(tab.get_mode().disable_csp_checkbox.isEnabled())
|
|
tab.settings.set("website", "custom_csp", "default-src 'self'")
|
|
self.run_all_website_mode_download_tests(tab)
|
|
self.close_all_tabs()
|
|
|
|
def test_405_page_returned_for_invalid_methods(self):
|
|
"""
|
|
Our custom 405 page should return for invalid methods
|
|
"""
|
|
tab = self.new_website_tab()
|
|
|
|
tab.get_mode().mode_settings_widget.public_checkbox.click()
|
|
|
|
self.run_all_common_setup_tests()
|
|
self.run_all_website_mode_setup_tests(tab)
|
|
self.run_all_website_mode_started_tests(tab)
|
|
url = f"http://127.0.0.1:{tab.app.port}/"
|
|
self.hit_405(url, expected_resp="OnionShare: 405 Method Not Allowed", data = {'foo':'bar'}, methods = ["put", "post", "delete", "options"])
|
|
|
|
self.close_all_tabs()
|