VeIiI7 t d dl mZ d dlZd dlZd dlmZmZmZmZ ddiZ d Z
d Z G d d ej Z
dS )
)absolute_importN)
ALLOW_FROMDENY NONCE_LENGTHTalismanzwsgi.url_schemehttpsc dS Nz Hello, world r a/var/www/html/MCyber-Diagnostic/venv/lib/python3.11/site-packages/flask_talisman/talisman_test.py hello_worldr s >r c * t j d S )Nz))flaskrender_template_stringr r r
with_noncer s '3 r c n e Zd Zd Zd Zd Zd Zd Zd Zd Z d Z
d Z d
Z d Z
d Zd
Zd Zd Zd ZdS )TestTalismanExtensionc P t j t | _ t | j | _ | j | _ | j d t | j d t d S )N/ /with_nonce) r Flask__name__appr talisman test_clientclientrouter r )selfs r
setUpzTestTalismanExtension.setUp& s{ ;x(( **
h**,, sK(((%}%%j11111r c r | j dt }ddddd}| D ]3\ }}| |j | | 4|j d }| d | | d
| d S ) Nr environ_overrides
SAMEORIGINz#max-age=31556926; includeSubDomainsnosniffz strict-origin-when-cross-origin)X-Frame-OptionsStrict-Transport-SecurityX-Content-Type-OptionszReferrer-PolicyContent-Security-Policydefault-src 'self'zobject-src 'none')r get
HTTPS_ENVIRONitems assertEqualheadersassertIn)r responser/ keyvaluecsps r
testDefaultsz"TestTalismanExtension.testDefaults. s ;??3-?HH , 1&/ @
"--// ? ?JC X - 1 1# 6 6 > > > > ""#<==
,c222
+S11111r c L | j dddi }| |j d | j d }| |j d | |j d d d | j _ | j d }| |j d
d | j _ | j d }| |j d d S ) Nr X-Forwarded-Protor r/ . Locationzhttps://Ti- F)
r r+ r. status_code
assertTruer/
startswithr force_https_permanent force_httpsr r1 s r
testForceSslOptionOptionsz/TestTalismanExtension.testForceSslOptionOptionsA s ;??3 1
?
-s333 ;??3'' -s333 (4??
KKLLL /3
+;??3'' -s333 %*
!;??3'' -s33333r c d| j _ | j d }| d|j | |j d d d S )NTr X-XSS-Protectionz
1; mode=block)r x_xss_protectionr r+ r0 r/ r. rA s r
testForceXSSProtectionOptionsz3TestTalismanExtension.testForceXSSProtectionOptionsW s^ )-
& ;??3''
((*:;;; )*<=OOOOOr c d| j _ | j d }| d|j d| j _ | j dt }| d|j d| j _ | j dddi }| d|j d| j _ | j dt }| d |j d d| j _
| j dt }| d
|j d d S ) NFr r' r" Tr7 r r8 includeSubDomainspreload) r force_sslr r+ assertNotInr/ strict_transport_securityr, r0 ,strict_transport_security_include_subdomains!strict_transport_security_preloadrA s r
testHstsOptionsz%TestTalismanExtension.testHstsOptions_ sW "'
;??3'' 4h6FGGG 38
/;??3-?HH 4h6FGGG 37
/ ;??3 1
?
183CDDD FK
B;??3-?HH !12M!N P P P ;?
7;??3-?HH
i!12M!NOOOOOr c t | j _ | j dt
}| |j d d t | j _ d| j _ | j dt
}| |j d d d | j _ | j dt
}|
d|j d S )Nr r" r& r example.comzALLOW-FROM example.com) r r
frame_optionsr r+ r, r. r/ r frame_options_allow_fromrK rA s r
testFrameOptionsz&TestTalismanExtension.testFrameOptions s &*
#;??3-?HH )*;
.;??3-?HH . /1I K K K '+
#;??3-?HH *H,<=====r c d| j j d< | j dt }|j d }| d| | d| | d| d d
g| j j d< | j dt }|j d }| d | | d | d
| j _ | j dt }| |j d d
d| j _ | j dt }| d|j t j
t }t |d
|
dt }| d
|j d t j
t }t |d |
dt }| d|j t j
t }t |d |
dt }| d|j d S )N*z image-srcr r" r) zdefault-src 'self';zobject-src 'none';z image-src *'self'rQ r* z image-src 'self' example.comzdefault-src 'foo' spam.eggsFcontent_security_policy)x_content_type_optionsr( )rE rD )r rY r r+ r, r/ r0 r. rK r r r r r )r r1 r4 r s r
testContentSecurityPolicyOptionsz6TestTalismanExtension.testContentSecurityPolicyOptions s =@
-k:;??3-?HH 89
+S111
,c222
mS)))
>
-k: ;??3-?HH 89
,c222
6<<< 1P
-;??3-?HH )*CD8 : : : 16
-;??3-?HH 2H4DEEE k(##.MNNNN??$$((
(NN
+ 6 7
k(##U3333??$$((
(NN 183CDDD k(##u----??$$((
(NN +X-=>>>>>r c P d| j _ d| j _ | j dt
}| d|j | d|j d | d|j d}d|i| j _ | j dt
}| d|j | ||j d |
t t | j
d d S )
NTzhttps://example.comr r" z#Content-Security-Policy-Report-Onlyz
report-urir) zhttps://report-uri.io/)#content_security_policy_report_only)r r] "content_security_policy_report_urir r+ r, r0 r/ rK rY assertRaises
ValueErrorr r )r r1 override_report_uris r
&testContentSecurityPolicyOptionsReportzB D D D D Dr c 2 d| j j d< d| j j d< dg| j _ | j 5 }| dt }|j d }| d t j j | |
d | |
d
t j j | | d | | t j j |j d | t# t j j t$ d d d d S # 1 swxY w Y d S )
NrW z
script-srcrQ z style-srcr r" r) z script-src 'self' 'nonce-{}'zstyle-src 'self'z style-src example.com 'nonce-{}'zstyle-src example.comzutf-8)r rY content_security_policy_nonce_inr r r+ r, r/ r0 formatr request csp_noncerK datadecoder. lenr )r r r1 r4 s r
testContentSecurityPolicyNoncez4TestTalismanExtension.testContentSecurityPolicyNonce s >F
-l;=J
-k::F
6
X
!
!
#
# Iv zz-4A " C CH "#<=C MM.55em6MNN
"
299%-:QRR
MM'
MM
'
$$W--
S !8 9 9< H H H5 I I I I I I I I I I I I I I I I I Is D:F FFc > | j d | d d }| j dt
}| d|j | |j d d d S )Nz/nocsprX c dS r
r r r r
nocspz2TestTalismanExtension.testDecorator..nocsp ">r r" r) r& r$ ) r r r r r+ r, rK r/ r. )r rn r1 s r
testDecoratorz#TestTalismanExtension.testDecorator s
! !
t 4 4 " "
5 4
" ! " ;??8}?MM 2H4DEEE )*;.noforcehttps ro r r9 )r r r r r+ r. r< )r rs r1 s r
testDecoratorForceHttpsz-TestTalismanExtension.testDecoratorForceHttps sw
( (
5 ) ) " "
* )
) ( " ;???33 -s33333r c d| j _ | j dt }| d|j | |j d d d S )NTr r" zX-Download-Optionsnoopen)r force_file_saver r+ r, r0 r/ r. rA s r
testForceFileSavez'TestTalismanExtension.testForceFileSave s` (,
%;??3-?HH
*H,<=== )*>?JJJJJr c | j d }| |j d | j dddi }| |j d d S )Nz
/bad_endpointr: r7 r r8 i )r r+ r. r< rA s r
testBadEndpointz%TestTalismanExtension.testBadEndpoint ss ;???33 -s333;???,?+I # K K -s33333r c D d| j j d< | j dt }|j d }| d| d| j j d< | j dt }|j d }| d | t j t }t |d
| dt }| d
|j d d S ) Nz'none' geolocationr r" zFeature-Policyzgeolocation 'none'z'self' example.com
fullscreenz fullscreen 'self' example.comzvibrate 'none')feature_policy) r r~ r r+ r, r/ r0 r r r r r )r r1 r~ r s r
testFeaturePolicyz'TestTalismanExtension.testFeaturePolicy s 6@
$]3;??3-?HH!)*:;
,n===5K
$\2;??3-?HH!)*:;
7 HHH k(##%78888??$$((
(NN
((*:;K*LMMMMMr c t d| j j d< | j dt }|j d }| d| | d| d| j j d< d| j j d < | j dt }|j d }| d| | d
| i | j _ | j dt }|j d }| d | t j t }t |d | dt }| d |j d d S )
Nz()r| r r" zPermissions-Policyzbrowsing-topics=()zgeolocation=()z (self, "https://example.com")r} z8geolocation=(), fullscreen=(self, "https://example.com")zvibrate=(), geolocation=())permissions_policy)
r r r r+ r, r/ r0 r. r r r r r )r r1 r r s r
testPermissionsPolicyz+TestTalismanExtension.testPermissionsPolicy. s :>
( 7;??3-?HH % -.B C
*,>???
&(:;;;:>
( 79X
( 6;??3-?HH % -.B C
*,>???
PRdeee ,.
(;??3-?HH % - 1 12F G G 1222 k(##)EFFFF??$$((
(NN
2H4DEY4Z[[[[[r c b d| j j d< | j dt }|j d }| d| d| j j d< d| j j d< | j dt }|j d }| d| t j t }t |d | dt }| d|j d d S )
Nz?0zoversized-imagesr r" zDocument-Policyzoversized-images=?0zdocument-writez&oversized-images=?0, document-write=?0)document_policy) r r r r+ r, r/ r0 r r r r r )r r1 r r s r
testDocumentPolicyz(TestTalismanExtension.testDocumentPolicyH s <@
%&89;??3-?HH"*+<=
+_===<@
%&89:>
%&67;??3-?HH"*+<=
>PPP k(##&NOOOO??$$((
(NN
>@PQb@cdddddr N)r
__module__ __qualname__r r5 rB rF rO rT r[ rb rk rp rt rx rz r r r r r r
r r $ s$ 2 2 22 2 2&4 4 4,P P P P P P@
>
>
> /? /? /?bD D D: I I IBL L L4 4 4K K K 4 4 4N N N"\ \ \4e e e e er r )
__future__r unittestr flask_talismanr r r r r, r r TestCaser r r r
r s ' & & & & & C C C C C C C C C C C C #G,
te te te te teH - te te te te ter