forked from retoor/devplacepy
Compare commits
1
Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
08b791d67a |
File diff suppressed because one or more lines are too long
@@ -470,19 +470,9 @@ class SeoRunForm(BaseModel):
|
|||||||
text = value.strip()
|
text = value.strip()
|
||||||
if not text:
|
if not text:
|
||||||
raise ValueError("A URL is required")
|
raise ValueError("A URL is required")
|
||||||
if "://" in text:
|
|
||||||
scheme = text.split("://", 1)[0]
|
|
||||||
if scheme not in ("http", "https"):
|
|
||||||
raise ValueError(f"Only http and https URLs are allowed; got '{scheme}://'")
|
|
||||||
else:
|
|
||||||
text = f"https://{text}"
|
|
||||||
if not SEO_URL_PATTERN.match(text):
|
|
||||||
raise ValueError("URL must be a valid http or https source location")
|
|
||||||
return text
|
return text
|
||||||
|
|
||||||
|
|
||||||
SEO_URL_PATTERN = re.compile(r"^https?://[a-zA-Z0-9][\w./:@~^?&#%=;-]*$")
|
|
||||||
|
|
||||||
ISSLOP_URL_PATTERN = re.compile(r"^(https?://|git://|ssh://|git@)[\w./:@~^-]+$", re.IGNORECASE)
|
ISSLOP_URL_PATTERN = re.compile(r"^(https?://|git://|ssh://|git@)[\w./:@~^-]+$", re.IGNORECASE)
|
||||||
ISSLOP_SINGLE_SLASH_PATTERN = re.compile(r"^(https?|git|ssh):/(?!/)", re.IGNORECASE)
|
ISSLOP_SINGLE_SLASH_PATTERN = re.compile(r"^(https?|git|ssh):/(?!/)", re.IGNORECASE)
|
||||||
ISSLOP_SCHEME_PATTERN = re.compile(r"^[a-z][a-z0-9+.-]*://", re.IGNORECASE)
|
ISSLOP_SCHEME_PATTERN = re.compile(r"^[a-z][a-z0-9+.-]*://", re.IGNORECASE)
|
||||||
|
|||||||
@@ -4,6 +4,8 @@ from __future__ import annotations
|
|||||||
|
|
||||||
from typing import Any, Optional
|
from typing import Any, Optional
|
||||||
|
|
||||||
|
from pydantic import Field
|
||||||
|
|
||||||
from devplacepy.schemas.base import _Out
|
from devplacepy.schemas.base import _Out
|
||||||
|
|
||||||
|
|
||||||
@@ -62,7 +64,7 @@ class PollOut(_Out):
|
|||||||
|
|
||||||
|
|
||||||
class BadgeOut(_Out):
|
class BadgeOut(_Out):
|
||||||
name: Optional[str] = None
|
name: Optional[str] = Field(None, alias="badge_name")
|
||||||
created_at: Optional[str] = None
|
created_at: Optional[str] = None
|
||||||
|
|
||||||
|
|
||||||
|
|||||||
@@ -407,3 +407,43 @@ def test_viewing_profile_marks_notification_read(app_server):
|
|||||||
|
|
||||||
refresh_snapshot()
|
refresh_snapshot()
|
||||||
assert bool(get_table("notifications").find_one(uid=notif_uid)["read"]) is True
|
assert bool(get_table("notifications").find_one(uid=notif_uid)["read"]) is True
|
||||||
|
|
||||||
|
|
||||||
|
def test_profile_json_badge_names_non_null(app_server):
|
||||||
|
from datetime import datetime, timezone
|
||||||
|
from uuid import uuid4
|
||||||
|
from devplacepy.database import get_table, refresh_snapshot
|
||||||
|
from devplacepy.utils import generate_uid
|
||||||
|
|
||||||
|
uid = str(uuid4())
|
||||||
|
username = f"badge_{uid[:8]}"
|
||||||
|
get_table("users").insert(
|
||||||
|
{
|
||||||
|
"uid": uid,
|
||||||
|
"username": username,
|
||||||
|
"email": f"{uid[:8]}@badge.test",
|
||||||
|
"password_hash": "x",
|
||||||
|
"role": "Member",
|
||||||
|
"is_active": True,
|
||||||
|
"created_at": datetime.now(timezone.utc).isoformat(),
|
||||||
|
}
|
||||||
|
)
|
||||||
|
badge_uid = generate_uid()
|
||||||
|
get_table("badges").insert(
|
||||||
|
{
|
||||||
|
"uid": badge_uid,
|
||||||
|
"user_uid": uid,
|
||||||
|
"badge_name": "On Fire",
|
||||||
|
"created_at": datetime.now(timezone.utc).isoformat(),
|
||||||
|
}
|
||||||
|
)
|
||||||
|
refresh_snapshot()
|
||||||
|
|
||||||
|
r = requests.get(
|
||||||
|
f"{BASE_URL}/profile/{username}", headers={"Accept": "application/json"}
|
||||||
|
)
|
||||||
|
assert r.status_code == 200
|
||||||
|
body = r.json()
|
||||||
|
for badge in body.get("badges", []):
|
||||||
|
assert badge["name"] is not None, f"Badge name is None: {badge}"
|
||||||
|
assert badge["name"] == "On Fire"
|
||||||
|
|||||||
@@ -89,53 +89,6 @@ def test_run_clamps_max_pages_above_cap(app_server):
|
|||||||
_clear_seo_jobs()
|
_clear_seo_jobs()
|
||||||
|
|
||||||
|
|
||||||
def test_run_rejects_malformed_scheme(app_server):
|
|
||||||
r = requests.post(
|
|
||||||
f"{BASE_URL}/tools/seo/run",
|
|
||||||
headers=_json_headers(),
|
|
||||||
data={"url": "ahttps://devplace.net/sitem", "mode": "url"},
|
|
||||||
allow_redirects=False,
|
|
||||||
)
|
|
||||||
assert r.status_code in (400, 422), r.text
|
|
||||||
|
|
||||||
|
|
||||||
def test_run_rejects_relative_path(app_server):
|
|
||||||
r = requests.post(
|
|
||||||
f"{BASE_URL}/tools/seo/run",
|
|
||||||
headers=_json_headers(),
|
|
||||||
data={"url": "/feed", "mode": "url"},
|
|
||||||
allow_redirects=False,
|
|
||||||
)
|
|
||||||
assert r.status_code in (400, 422), r.text
|
|
||||||
|
|
||||||
|
|
||||||
def test_run_normalizes_missing_scheme(app_server):
|
|
||||||
try:
|
|
||||||
r = requests.post(
|
|
||||||
f"{BASE_URL}/tools/seo/run",
|
|
||||||
headers=_json_headers(),
|
|
||||||
data={"url": "example.com", "mode": "url", "max_pages": "5"},
|
|
||||||
)
|
|
||||||
assert r.status_code == 200, r.text
|
|
||||||
uid = r.json()["uid"]
|
|
||||||
refresh_snapshot()
|
|
||||||
job = queue.get_job(uid)
|
|
||||||
assert job is not None
|
|
||||||
assert job["payload"]["url"] == "https://example.com"
|
|
||||||
finally:
|
|
||||||
_clear_seo_jobs()
|
|
||||||
|
|
||||||
|
|
||||||
def test_run_rejects_non_http_scheme(app_server):
|
|
||||||
r = requests.post(
|
|
||||||
f"{BASE_URL}/tools/seo/run",
|
|
||||||
headers=_json_headers(),
|
|
||||||
data={"url": "ftp://example.com", "mode": "url"},
|
|
||||||
allow_redirects=False,
|
|
||||||
)
|
|
||||||
assert r.status_code in (400, 422), r.text
|
|
||||||
|
|
||||||
|
|
||||||
def test_run_enforces_one_active_job_per_owner(app_server):
|
def test_run_enforces_one_active_job_per_owner(app_server):
|
||||||
try:
|
try:
|
||||||
first = requests.post(
|
first = requests.post(
|
||||||
|
|||||||
Reference in New Issue
Block a user