##// END OF EJS Templates
upstream » mercurial-mirror
RSS

Clone from https://www.mercurial-scm.org/repo/hg-all

dispatch: protect against malicious 'hg serve --stdio' invocations (sec)...
dispatch: protect against malicious 'hg serve --stdio' invocations (sec) Some shared-ssh installations assume that 'hg serve --stdio' is a safe command to run for minimally trusted users. Unfortunately, the messy implementation of argument parsing here meant that trying to access a repo named '--debugger' would give the user a pdb prompt, thereby sidestepping any hoped-for sandboxing. Serving repositories over HTTP(S) is unaffected. We're not currently hardening any subcommands other than 'serve'. If your service exposes other commands to users with arbitrary repository names, it is imperative that you defend against repository names of '--debugger' and anything starting with '--config'. The read-only mode of hg-ssh stopped working because it provided its hook configuration to "hg serve --stdio" via --config parameter. This is banned for security reasons now. This patch switches it to directly call ui.setconfig(). If your custom hosting infrastructure relies on passing --config to "hg serve --stdio", you'll need to find a different way to get that configuration into Mercurial, either by using ui.setconfig() as hg-ssh does in this patch, or by placing an hgrc file someplace where Mercurial will read it. mitrandir@fb.com provided some extra fixes for the dispatch code and for hg-ssh in places that I overlooked.
Yuya Nishihara - - Load All Authors

File last commit:

r30559:d83ca854 default
r32050:77eaf953 4.1.3 stable
Show More
test-ui-config.py
103 lines | 3.7 KiB | text/x-python | PythonLexer
/ tests / test-ui-config.py
History | Source | Raw |Copy content |Copy permalink
Pulkit Goyal
py3: make test-ui-config use print_function
 r28681 from __future__ import absolute_import, print_function
Pulkit Goyal
py3: make test-ui-config use absolute_import
 r28680 from mercurial import (
dispatch,
error,
Yuya Nishihara
tests: alias ui as uimod in test-ui-config
 r28776 ui as uimod,
Pulkit Goyal
py3: make test-ui-config use absolute_import
 r28680 )
Martin Geisler
tests: renamed Python tests to .py
 r8449
Yuya Nishihara
ui: factor out ui.load() to create a ui without loading configs (API)...
 r30559 testui = uimod.ui.load()
Martin Geisler
tests: renamed Python tests to .py
 r8449 parsed = dispatch._parseconfig(testui, [
'values.string=string value',
'values.bool1=true',
'values.bool2=false',
Sune Foldager
ui: add configint function and tests
 r14171 'values.boolinvalid=foo',
'values.int1=42',
'values.int2=-42',
'values.intinvalid=foo',
Martin Geisler
tests: renamed Python tests to .py
 r8449 'lists.list1=foo',
'lists.list2=foo bar baz',
'lists.list3=alice, bob',
'lists.list4=foo bar baz alice, bob',
Henrik Stuart
ui: support quotes in configlist (issue2147)...
 r10982 'lists.list5=abc d"ef"g "hij def"',
'lists.list6="hello world", "how are you?"',
'lists.list7=Do"Not"Separate',
'lists.list8="Do"Separate',
'lists.list9="Do\\"NotSeparate"',
'lists.list10=string "with extraneous" quotation mark"',
'lists.list11=x, y',
'lists.list12="x", "y"',
'lists.list13=""" key = "x", "y" """',
'lists.list14=,,,, ',
'lists.list15=" just with starting quotation',
'lists.list16="longer quotation" with "no ending quotation',
'lists.list17=this is \\" "not a quotation mark"',
Thomas Arendsen Hein
ui: handle leading newlines/spaces/commas in configlist...
 r11309 'lists.list18=\n \n\nding\ndong',
Sune Foldager
ui: add configint function and tests
 r14171 ])
Martin Geisler
tests: renamed Python tests to .py
 r8449
Pulkit Goyal
py3: make test-ui-config use print_function
 r28681 print(repr(testui.configitems('values')))
print(repr(testui.configitems('lists')))
print("---")
print(repr(testui.config('values', 'string')))
print(repr(testui.config('values', 'bool1')))
print(repr(testui.config('values', 'bool2')))
print(repr(testui.config('values', 'unknown')))
print("---")
Martin Geisler
tests: renamed Python tests to .py
 r8449 try:
Pulkit Goyal
py3: make test-ui-config use print_function
 r28681 print(repr(testui.configbool('values', 'string')))
Gregory Szorc
global: mass rewrite to use modern exception syntax...
 r25660 except error.ConfigError as inst:
Pulkit Goyal
py3: make test-ui-config use print_function
 r28681 print(inst)
print(repr(testui.configbool('values', 'bool1')))
print(repr(testui.configbool('values', 'bool2')))
print(repr(testui.configbool('values', 'bool2', True)))
print(repr(testui.configbool('values', 'unknown')))
print(repr(testui.configbool('values', 'unknown', True)))
print("---")
print(repr(testui.configint('values', 'int1')))
print(repr(testui.configint('values', 'int2')))
print("---")
print(repr(testui.configlist('lists', 'list1')))
print(repr(testui.configlist('lists', 'list2')))
print(repr(testui.configlist('lists', 'list3')))
print(repr(testui.configlist('lists', 'list4')))
print(repr(testui.configlist('lists', 'list4', ['foo'])))
print(repr(testui.configlist('lists', 'list5')))
print(repr(testui.configlist('lists', 'list6')))
print(repr(testui.configlist('lists', 'list7')))
print(repr(testui.configlist('lists', 'list8')))
print(repr(testui.configlist('lists', 'list9')))
print(repr(testui.configlist('lists', 'list10')))
print(repr(testui.configlist('lists', 'list11')))
print(repr(testui.configlist('lists', 'list12')))
print(repr(testui.configlist('lists', 'list13')))
print(repr(testui.configlist('lists', 'list14')))
print(repr(testui.configlist('lists', 'list15')))
print(repr(testui.configlist('lists', 'list16')))
print(repr(testui.configlist('lists', 'list17')))
print(repr(testui.configlist('lists', 'list18')))
print(repr(testui.configlist('lists', 'unknown')))
print(repr(testui.configlist('lists', 'unknown', '')))
print(repr(testui.configlist('lists', 'unknown', 'foo')))
print(repr(testui.configlist('lists', 'unknown', ['foo'])))
print(repr(testui.configlist('lists', 'unknown', 'foo bar')))
print(repr(testui.configlist('lists', 'unknown', 'foo, bar')))
print(repr(testui.configlist('lists', 'unknown', ['foo bar'])))
print(repr(testui.configlist('lists', 'unknown', ['foo', 'bar'])))
Martin Geisler
tests: renamed Python tests to .py
 r8449
Pulkit Goyal
py3: make test-ui-config use print_function
 r28681 print(repr(testui.config('values', 'String')))
Martin Geisler
tests: renamed Python tests to .py
 r8449
def function():
pass
# values that aren't strings should work
testui.setconfig('hook', 'commit', function)
Pulkit Goyal
py3: make test-ui-config use print_function
 r28681 print(function == testui.config('hook', 'commit'))
Sune Foldager
ui: add configint function and tests
 r14171
# invalid values
try:
testui.configbool('values', 'boolinvalid')
except error.ConfigError:
Pulkit Goyal
py3: make test-ui-config use print_function
 r28681 print('boolinvalid')
Sune Foldager
ui: add configint function and tests
 r14171 try:
testui.configint('values', 'intinvalid')
except error.ConfigError:
Pulkit Goyal
py3: make test-ui-config use print_function
 r28681 print('intinvalid')