github/mealie
1
0
Fork 0
mirror of https://github.com/hay-kot/mealie.git synced 2025-08-22 22:43:34 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions 15

not sure why this is failing on postgres

Browse source
This commit is contained in:
Michael Genson 2025-07-20 01:28:05 +00:00
commit 917174e537
1 changed files with 2 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

10
tests/integration_tests/test_spa.py
View file

@ -201,13 +201,7 @@ async def test_spa_service_shared_recipe_with_meta_invalid_data(unique_user: Tes
("<a href='javascript:alert(\"XSS\")'>Click me</a>", ["<a", 'javascript:alert("XSS")']), ("<a href='javascript:alert(\"XSS\")'>Click me</a>", ["<a", 'javascript:alert("XSS")']),
], ],
) )
@pytest.mark.asyncio def test_spa_escapes_malicious_recipe_data(unique_user: TestUser, malicious_content: str, malicious_strings: list[str]):
async def test_spa_escapes_malicious_recipe_data(
unique_user: TestUser, malicious_content: str, malicious_strings: list[str]
):
group = unique_user.repos.groups.get_by_slug_or_id(unique_user.group_id)
assert group
recipe = Recipe( recipe = Recipe(
user_id=unique_user.user_id, user_id=unique_user.user_id,
group_id=unique_user.group_id, group_id=unique_user.group_id,
@ -218,6 +212,6 @@ async def test_spa_escapes_malicious_recipe_data(
settings=RecipeSettings(), settings=RecipeSettings(),
) )
response = spa.content_with_meta(group.slug, recipe) response = spa.content_with_meta(unique_user.group_id, recipe)
for string in malicious_strings: for string in malicious_strings:
assert string not in response assert string not in response