1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
|
from inspect import iscoroutinefunction
from itertools import product
from django.http import HttpRequest, HttpResponse
from django.test import SimpleTestCase
from django.utils.csp import CSP
from django.views.decorators.csp import csp_override, csp_report_only_override
basic_config = {
"default-src": [CSP.SELF],
}
class CSPOverrideDecoratorTest(SimpleTestCase):
def test_wrapped_sync_function_is_not_coroutine_function(self):
def sync_view(request):
return HttpResponse()
wrapped_view = csp_override({})(sync_view)
self.assertIs(iscoroutinefunction(wrapped_view), False)
def test_wrapped_async_function_is_coroutine_function(self):
async def async_view(request):
return HttpResponse()
wrapped_view = csp_override({})(async_view)
self.assertIs(iscoroutinefunction(wrapped_view), True)
def test_decorator_requires_mapping(self):
for config, decorator in product(
[None, 0, False, [], [1, 2, 3], 42, {4, 5}],
(csp_override, csp_report_only_override),
):
with (
self.subTest(config=config, decorator=decorator),
self.assertRaisesMessage(TypeError, "CSP config should be a mapping"),
):
decorator(config)
def test_csp_override(self):
@csp_override(basic_config)
def sync_view(request):
return HttpResponse("OK")
response = sync_view(HttpRequest())
self.assertEqual(response._csp_config, basic_config)
self.assertIs(hasattr(response, "_csp_ro_config"), False)
async def test_csp_override_async_view(self):
@csp_override(basic_config)
async def async_view(request):
return HttpResponse("OK")
response = await async_view(HttpRequest())
self.assertEqual(response._csp_config, basic_config)
self.assertIs(hasattr(response, "_csp_ro_config"), False)
def test_csp_report_only_override(self):
@csp_report_only_override(basic_config)
def sync_view(request):
return HttpResponse("OK")
response = sync_view(HttpRequest())
self.assertEqual(response._csp_ro_config, basic_config)
self.assertIs(hasattr(response, "_csp_config"), False)
async def test_csp_report_only_override_async_view(self):
@csp_report_only_override(basic_config)
async def async_view(request):
return HttpResponse("OK")
response = await async_view(HttpRequest())
self.assertEqual(response._csp_ro_config, basic_config)
self.assertIs(hasattr(response, "_csp_config"), False)
def test_csp_override_both(self):
@csp_override(basic_config)
@csp_report_only_override(basic_config)
def sync_view(request):
return HttpResponse("OK")
response = sync_view(HttpRequest())
self.assertEqual(response._csp_config, basic_config)
self.assertEqual(response._csp_ro_config, basic_config)
async def test_csp_override_both_async_view(self):
@csp_override(basic_config)
@csp_report_only_override(basic_config)
async def async_view(request):
return HttpResponse("OK")
response = await async_view(HttpRequest())
self.assertEqual(response._csp_config, basic_config)
self.assertEqual(response._csp_ro_config, basic_config)
|
