##// END OF EJS Templates
test /files/ gives 403 on hidden files
test /files/ gives 403 on hidden files

File last commit:

r13175:a14d321f
r13175:a14d321f
Show More
test_files.py
52 lines | 1.7 KiB | text/x-python | PythonLexer
# coding: utf-8
"""Test the /files/ handler."""
import io
import os
from unicodedata import normalize
pjoin = os.path.join
import requests
from IPython.html.utils import url_path_join
from .launchnotebook import NotebookTestBase
from IPython.utils import py3compat
class FilesTest(NotebookTestBase):
def test_hidden_files(self):
not_hidden = [
u'å b',
pjoin(u'å b/ç. d')
]
hidden = [
u'.å b',
pjoin(u'å b/.ç d')
]
dirs = not_hidden + hidden
nbdir = self.notebook_dir.name
for d in dirs:
path = pjoin(nbdir, d.replace('/', os.path.sep))
if not os.path.exists(path):
os.mkdir(path)
with io.open(pjoin(path, 'foo'), 'w', encoding='utf8') as f:
f.write(path)
with io.open(pjoin(path, '.foo'), 'w', encoding='utf8') as f:
f.write(path + '.foo')
url = self.base_url()
for d in not_hidden:
path = pjoin(nbdir, d.replace('/', os.path.sep))
r = requests.get(url_path_join(url, 'files', d, 'foo'))
r.raise_for_status()
reply = py3compat.cast_unicode(r.content)
self.assertEqual(normalize('NFC', path), normalize('NFC', reply))
r = requests.get(url_path_join(url, 'files', d, '.foo'))
self.assertEqual(r.status_code, 403)
for d in hidden:
path = pjoin(nbdir, d.replace('/', os.path.sep))
for foo in ('foo', '.foo'):
r = requests.get(url_path_join(url, 'files', d, foo))
self.assertEqual(r.status_code, 403)