upstream/mercurial-mirror Files · tests/test-hg-parseurl.py

convert: test for shell injection in git calls (SEC)...

convert: test for shell injection in git calls (SEC) CVE-2016-3069 (5/5) Before recent refactoring we were not escaping calls to git at all which made such injections possible. Let's have a test for that to avoid this problem in the future. Reported by Blake Burkhart.

Thomas Arendsen Hein - - Load All Authors

File last commit:

r13897:375872fd default


                r28663:ae279d4a

3.7.3 stable

Download file

             test-hg-parseurl.py
        
                    13 lines
            
             | 520 B
            
                | text/x-python
            
             |
                PythonLexer
            
             / tests / test-hg-parseurl.py
          
                    History
                
                 |
                  Annotation
                 | Raw
                 |Copy content
                 |Copy permalink

      from mercurial.hg import parseurl

      def testparse(url, branch=[]):

          print '%s, branches: %r' % parseurl(url, branch)

      testparse('http://example.com/no/anchor')

      testparse('http://example.com/an/anchor#foo')

      testparse('http://example.com/no/anchor/branches', branch=['foo'])

      testparse('http://example.com/an/anchor/branches#bar', branch=['foo'])

      testparse('http://example.com/an/anchor/branches-None#foo', branch=None)

      testparse('http://example.com/')

      testparse('http://example.com')

      testparse('http://example.com#foo')

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages

				from mercurial.hg import parseurl

				def testparse(url, branch=[]):
				print '%s, branches: %r' % parseurl(url, branch)

				testparse('http://example.com/no/anchor')
				testparse('http://example.com/an/anchor#foo')
				testparse('http://example.com/no/anchor/branches', branch=['foo'])
				testparse('http://example.com/an/anchor/branches#bar', branch=['foo'])
				testparse('http://example.com/an/anchor/branches-None#foo', branch=None)
				testparse('http://example.com/')
				testparse('http://example.com')
				testparse('http://example.com#foo')