summaryrefslogtreecommitdiff
path: root/tests/fixtures
diff options
context:
space:
mode:
authorPravin Kamble <iampbkamble@gmail.com>2025-12-09 11:57:52 +0530
committerJacob Walls <jacobtylerwalls@gmail.com>2025-12-11 12:38:04 -0500
commitdae08cf55b83caef5e8ee39b16417692e8565278 (patch)
tree92a4b3b3b82c59e19195cb1ee9767adac0267be7 /tests/fixtures
parent37eb8909699d261b9b879e6f04dbfeec75b5e080 (diff)
Fixed #36769 -- Avoided visiting deeply nested nodes in XML deserializer.
Only children at one level of depth need to be visited. Co-authored-by: Jacob Walls <jacobtylerwalls@gmail.com>
Diffstat (limited to 'tests/fixtures')
-rw-r--r--tests/fixtures/fixtures/invalid_deeply_nested_elements.xml10
-rw-r--r--tests/fixtures/tests.py9
2 files changed, 19 insertions, 0 deletions
diff --git a/tests/fixtures/fixtures/invalid_deeply_nested_elements.xml b/tests/fixtures/fixtures/invalid_deeply_nested_elements.xml
new file mode 100644
index 0000000000..cd164d3d26
--- /dev/null
+++ b/tests/fixtures/fixtures/invalid_deeply_nested_elements.xml
@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="utf-8"?>
+<django-objects version="1.0">
+
+ <object pk="1" model="fixtures.person">
+ <field type="CharField" name="name">
+ <natural>Django <em>pony</em></natural>
+ </field>
+ </object>
+
+</django-objects>
diff --git a/tests/fixtures/tests.py b/tests/fixtures/tests.py
index 48e3182b59..7511569d21 100644
--- a/tests/fixtures/tests.py
+++ b/tests/fixtures/tests.py
@@ -23,6 +23,7 @@ from .models import (
CircularA,
CircularB,
NaturalKeyThing,
+ Person,
PrimaryKeyUUIDModel,
ProxySpy,
Spy,
@@ -520,6 +521,14 @@ class FixtureLoadingTests(DumpDataAssertMixin, TestCase):
natural_foreign_keys=True,
)
+ def test_deeply_nested_elements(self):
+ """Text inside deeply-nested tags is skipped."""
+ management.call_command(
+ "loaddata", "invalid_deeply_nested_elements.xml", verbosity=0
+ )
+ person = Person.objects.get(pk=1)
+ self.assertEqual(person.name, "Django") # not "Django pony"
+
def test_dumpdata_with_excludes(self):
# Load fixture1 which has a site, two articles, and a category
Site.objects.all().delete()