|
|
@ -64,7 +64,7 @@ def test_bad_access(client, live_server, measure_memory_usage):
|
|
|
|
def test_file_access(client, live_server, measure_memory_usage):
|
|
|
|
def test_file_access(client, live_server, measure_memory_usage):
|
|
|
|
#live_server_setup(live_server)
|
|
|
|
#live_server_setup(live_server)
|
|
|
|
|
|
|
|
|
|
|
|
test_file_path = os.path.join(os.getcwd(), "..", "README.md")
|
|
|
|
test_file_path = "/tmp/test-file.txt"
|
|
|
|
|
|
|
|
|
|
|
|
# file:// is permitted by default, but it will be caught by ALLOW_FILE_URI
|
|
|
|
# file:// is permitted by default, but it will be caught by ALLOW_FILE_URI
|
|
|
|
client.post(
|
|
|
|
client.post(
|
|
|
@ -82,8 +82,8 @@ def test_file_access(client, live_server, measure_memory_usage):
|
|
|
|
follow_redirects=True
|
|
|
|
follow_redirects=True
|
|
|
|
)
|
|
|
|
)
|
|
|
|
|
|
|
|
|
|
|
|
# Should see something from the README.md
|
|
|
|
# Should see something (this file added by run_basic_tests.sh)
|
|
|
|
assert b"release-shield" in res.data
|
|
|
|
assert b"Hello world" in res.data
|
|
|
|
else:
|
|
|
|
else:
|
|
|
|
# Default should be here
|
|
|
|
# Default should be here
|
|
|
|
assert b'file:// type access is denied for security reasons.' in res.data
|
|
|
|
assert b'file:// type access is denied for security reasons.' in res.data
|
|
|
|