github/mealie
1
0
Fork 0
mirror of https://github.com/hay-kot/mealie.git synced 2025-08-22 06:23:34 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions 17

maybefix tests

Browse source
This commit is contained in:
Michael Genson 2025-07-20 01:15:38 +00:00
commit 5969fea254
1 changed files with 14 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

21
tests/integration_tests/test_spa.py
View file

@ -2,7 +2,7 @@ import pytest
from bs4 import BeautifulSoup from bs4 import BeautifulSoup
from mealie.routes import spa from mealie.routes import spa
from mealie.schema.recipe.recipe import Recipe from mealie.schema.recipe.recipe import Recipe, RecipeSettings
from mealie.schema.recipe.recipe_notes import RecipeNote from mealie.schema.recipe.recipe_notes import RecipeNote
from mealie.schema.recipe.recipe_share_token import RecipeShareTokenSave from mealie.schema.recipe.recipe_share_token import RecipeShareTokenSave
from tests import data as test_data from tests import data as test_data
@ -201,15 +201,22 @@ async def test_spa_service_shared_recipe_with_meta_invalid_data(unique_user: Tes
("<a href='javascript:alert(\"XSS\")'>Click me</a>", ["<a", 'javascript:alert("XSS")']), ("<a href='javascript:alert(\"XSS\")'>Click me</a>", ["<a", 'javascript:alert("XSS")']),
], ],
) )
def test_spa_escapes_malicious_recipe_data(unique_user: TestUser, malicious_content: str, malicious_strings: list[str]): @pytest.mark.asyncio
async def test_spa_escapes_malicious_recipe_data(
unique_user: TestUser, malicious_content: str, malicious_strings: list[str]
):
group = unique_user.repos.groups.get_by_slug_or_id(unique_user.group_id) group = unique_user.repos.groups.get_by_slug_or_id(unique_user.group_id)
assert group assert group
recipe = create_recipe(unique_user) recipe = Recipe(
recipe.name = malicious_content user_id=unique_user.user_id,
recipe.description = malicious_content group_id=unique_user.group_id,
recipe.image = malicious_content name=malicious_content,
recipe.notes = [RecipeNote(title=malicious_content, text=malicious_content)] description=malicious_content,
image=malicious_content,
notes=[RecipeNote(title=malicious_content, text=malicious_content)],
settings=RecipeSettings(),
)
response = spa.content_with_meta(group.slug, recipe) response = spa.content_with_meta(group.slug, recipe)
for string in malicious_strings: for string in malicious_strings: