diff options
| author | Sarah Boyce <42296566+sarahboyce@users.noreply.github.com> | 2025-02-25 09:40:54 +0100 |
|---|---|---|
| committer | Sarah Boyce <42296566+sarahboyce@users.noreply.github.com> | 2025-03-06 10:01:44 +0100 |
| commit | e88f7376fe68dbf4ebaf11fad1513ce700b45860 (patch) | |
| tree | 1aa1a23e92b654c00d65679c555a36508393cc50 /tests | |
| parent | 348e46a3e0cd80718d237a3b6d96a1c84bff317d (diff) | |
[4.2.x] Fixed CVE-2025-26699 -- Mitigated potential DoS in wordwrap template filter.
Thanks sw0rd1ight for the report.
Backport of 55d89e25f4115c5674cdd9b9bcba2bb2bb6d820b from main.
Diffstat (limited to 'tests')
| -rw-r--r-- | tests/template_tests/filter_tests/test_wordwrap.py | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/tests/template_tests/filter_tests/test_wordwrap.py b/tests/template_tests/filter_tests/test_wordwrap.py index 88fbd274da..4afa1dd234 100644 --- a/tests/template_tests/filter_tests/test_wordwrap.py +++ b/tests/template_tests/filter_tests/test_wordwrap.py @@ -78,3 +78,14 @@ class FunctionTests(SimpleTestCase): "this is a long\nparagraph of\ntext that\nreally needs\nto be wrapped\n" "I'm afraid", ) + + def test_wrap_long_text(self): + long_text = ( + "this is a long paragraph of text that really needs" + " to be wrapped I'm afraid " * 20_000 + ) + self.assertIn( + "this is a\nlong\nparagraph\nof text\nthat\nreally\nneeds to\nbe wrapped\n" + "I'm afraid", + wordwrap(long_text, 10), + ) |
