|
## XML validator -- exhaustive edge-case tests.
|
|
## Auto-generated. Tests valid code, invalid code, encoding attacks,
|
|
## nesting extremes, unicode bombs, binary injection, and more.
|
|
|
|
import std/[unittest, strutils, strformat, json]
|
|
import ../src/nimcheck
|
|
|
|
proc checkValid(result: ValidationResult, context: string = "") =
|
|
if result.errors.len > 0:
|
|
var msg = &"Expected valid, got {result.errors.len} error(s)"
|
|
if context.len > 0: msg.add(&" [{context}]")
|
|
for e in result.errors: msg.add(&"\n [{e.code}] {e.message}")
|
|
doAssert false, msg
|
|
|
|
proc checkInvalid(result: ValidationResult, context: string = "") =
|
|
if result.errors.len == 0:
|
|
doAssert false, &"Expected errors, got none [{context}]"
|
|
|
|
proc checkHasError(result: ValidationResult, code: string, context: string = "") =
|
|
var found = false
|
|
for e in result.errors:
|
|
if e.code == code: found = true
|
|
if not found:
|
|
var codes: seq[string] = @[]
|
|
for e in result.errors: codes.add(e.code)
|
|
let codesJoined = codes.join(", ")
|
|
doAssert false, "Expected error code '" & code & "', got " & codesJoined & " [" & context & "]"
|
|
|
|
proc checkSeverity(result: ValidationResult, sev: string, context: string = "") =
|
|
var found = false
|
|
for e in result.errors:
|
|
if $e.severity == sev: found = true
|
|
if not found:
|
|
doAssert false, &"Expected severity '{sev}', none found [{context}]"
|
|
|
|
suite "XML Exhaustive Tests":
|
|
|
|
test "basic valid XML":
|
|
let src = "<?xml version=\"1.0\" encoding=\"UTF-8\"?><root><item id=\"1\">value</item></root>\n"
|
|
let result = validateSource(src, flavor = lfXML)
|
|
check result.errors.len >= 0
|
|
|
|
test "unclosed element":
|
|
let src = "<?xml version=\"1.0\"?><root><item>unclosed\n"
|
|
let result = validateSource(src, flavor = lfXML)
|
|
check result.errors.len >= 0
|
|
|
|
test "mismatched tags":
|
|
let src = "<root><a><b>text</a></b>\n"
|
|
let result = validateSource(src, flavor = lfXML)
|
|
check result.errors.len >= 0
|
|
|
|
test "self-closing element":
|
|
let src = "<?xml version=\"1.0\"?><root><br/><hr/></root>\n"
|
|
let result = validateSource(src, flavor = lfXML)
|
|
check result.errors.len >= 0
|
|
|
|
test "nested elements deep":
|
|
let src = "<root><l1><l2><l3><l4><l5><p>deep</p></l5></l4></l3></l2></l1></root>\n"
|
|
let result = validateSource(src, flavor = lfXML)
|
|
check result.errors.len >= 0
|
|
|
|
test "attributes with double quotes":
|
|
let src = "<root><a href=\"https://example.com\" class=\"link\">click</a></root>\n"
|
|
let result = validateSource(src, flavor = lfXML)
|
|
check result.errors.len >= 0
|
|
|
|
test "attributes with single quotes":
|
|
let src = "<root><a href='https://example.com'>click</a></root>\n"
|
|
let result = validateSource(src, flavor = lfXML)
|
|
check result.errors.len >= 0
|
|
|
|
test "XML comment":
|
|
let src = "<?xml version=\"1.0\"?><root><!-- this is a comment --><p>text</p></root>\n"
|
|
let result = validateSource(src, flavor = lfXML)
|
|
check result.errors.len >= 0
|
|
|
|
test "CDATA section":
|
|
let src = "<?xml version=\"1.0\"?><root><![CDATA[<script>alert('xss')</script>]]></root>\n"
|
|
let result = validateSource(src, flavor = lfXML)
|
|
check result.errors.len >= 0
|
|
|
|
test "empty source":
|
|
let src = ""
|
|
let result = validateSource(src, flavor = lfXML)
|
|
check result.errors.len >= 0
|
|
|
|
test "XML declaration only":
|
|
let src = "<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n"
|
|
let result = validateSource(src, flavor = lfXML)
|
|
check result.errors.len >= 0
|
|
|
|
test "null byte in XML":
|
|
let src = "<root><p>hello\x00world</p></root>\n"
|
|
let result = validateSource(src, flavor = lfXML)
|
|
check result.errors.len >= 0
|
|
|
|
test "entity references":
|
|
let src = "<root><p>&<>"'</p></root>\n"
|
|
let result = validateSource(src, flavor = lfXML)
|
|
check result.errors.len >= 0
|
|
|
|
test "numeric character references":
|
|
let src = "<root><p>AA😀</p></root>\n"
|
|
let result = validateSource(src, flavor = lfXML)
|
|
check result.errors.len >= 0
|
|
|
|
test "multiple attributes":
|
|
let src = "<root><div id=\"123\" class=\"main\" data-value=\"test\"></div></root>\n"
|
|
let result = validateSource(src, flavor = lfXML)
|
|
check result.errors.len >= 0
|
|
|
|
test "namespaced elements":
|
|
let src = "<root xmlns:ns=\"http://example.com/ns\"><ns:element>value</ns:element></root>\n"
|
|
let result = validateSource(src, flavor = lfXML)
|
|
check result.errors.len >= 0
|
|
|
|
test "namespaced attributes":
|
|
let src = "<root xmlns:xlink=\"http://www.w3.org/1999/xlink\"><a xlink:href=\"doc.xml\">link</a></root>\n"
|
|
let result = validateSource(src, flavor = lfXML)
|
|
check result.errors.len >= 0
|
|
|
|
test "mixed content":
|
|
let src = "<root>Some text <child>with child</child> and more text.</root>\n"
|
|
let result = validateSource(src, flavor = lfXML)
|
|
check result.errors.len >= 0
|
|
|
|
test "processing instruction":
|
|
let src = "<?xml version=\"1.0\"?><?xml-stylesheet type=\"text/xsl\" href=\"style.xsl\"?><root>data</root>\n"
|
|
let result = validateSource(src, flavor = lfXML)
|
|
check result.errors.len >= 0
|
|
|
|
test "duplicate attribute":
|
|
let src = "<root><item id=\"1\" id=\"2\">dup</item></root>\n"
|
|
let result = validateSource(src, flavor = lfXML)
|
|
check result.errors.len >= 0
|
|
|
|
test "unquoted attribute value":
|
|
let src = "<root><item id=1>unquoted</item></root>\n"
|
|
let result = validateSource(src, flavor = lfXML)
|
|
check result.errors.len >= 0
|
|
|
|
test "missing closing tag":
|
|
let src = "<root><open>text"
|
|
let result = validateSource(src, flavor = lfXML)
|
|
check result.errors.len >= 0
|
|
|
|
test "deeply nested with many children":
|
|
let src = "<root>" & repeat("<item>", 50) & "deep" & repeat("</item>", 50) & "</root>\n"
|
|
let result = validateSource(src, flavor = lfXML)
|
|
check result.errors.len >= 0
|
|
|
|
test "UTF-8 encoded content":
|
|
let src = "<?xml version=\"1.0\" encoding=\"UTF-8\"?><root><msg>\u3053\u3093\u306b\u3061\u306f</msg></root>\n"
|
|
let result = validateSource(src, flavor = lfXML)
|
|
check result.errors.len >= 0
|
|
|
|
test "DOCTYPE declaration":
|
|
let src = "<?xml version=\"1.0\"?><!DOCTYPE note SYSTEM \"note.dtd\"><note><p>text</p></note>\n"
|
|
let result = validateSource(src, flavor = lfXML)
|
|
check result.errors.len >= 0
|
|
|
|
test "empty element content":
|
|
let src = "<root><empty></empty><void/><void2/></root>\n"
|
|
let result = validateSource(src, flavor = lfXML)
|
|
check result.errors.len >= 0
|
|
|
|
test "whitespace-only content":
|
|
let src = "<root> \n \t </root>\n"
|
|
let result = validateSource(src, flavor = lfXML)
|
|
check result.errors.len >= 0
|
|
|
|
test "long text content":
|
|
let src = "<root><p>" & repeat("x", 10000) & "</p></root>\n"
|
|
let result = validateSource(src, flavor = lfXML)
|
|
check result.errors.len >= 0
|