Florent Xicluna | 8fbddf1 | 2010-03-17 20:29:51 +0000 | [diff] [blame] | 1 | from test.support import run_unittest, check_warnings |
Jeremy Hylton | d9827c4 | 2000-08-03 22:11:43 +0000 | [diff] [blame] | 2 | import cgi |
| 3 | import os |
| 4 | import sys |
Thomas Wouters | 00ee7ba | 2006-08-21 19:07:27 +0000 | [diff] [blame] | 5 | import tempfile |
Thomas Wouters | 89f507f | 2006-12-13 04:49:30 +0000 | [diff] [blame] | 6 | import unittest |
Brett Cannon | 8f79dd5 | 2012-04-25 20:49:19 -0400 | [diff] [blame] | 7 | import warnings |
Senthil Kumaran | 6b102f2 | 2013-01-23 02:50:15 -0800 | [diff] [blame] | 8 | from collections import namedtuple |
Victor Stinner | 5c23b8e | 2011-01-14 13:05:21 +0000 | [diff] [blame] | 9 | from io import StringIO, BytesIO |
Jeremy Hylton | d9827c4 | 2000-08-03 22:11:43 +0000 | [diff] [blame] | 10 | |
| 11 | class HackedSysModule: |
| 12 | # The regression test will have real values in sys.argv, which |
Fred Drake | 004d5e6 | 2000-10-23 17:22:08 +0000 | [diff] [blame] | 13 | # will completely confuse the test of the cgi module |
Jeremy Hylton | d9827c4 | 2000-08-03 22:11:43 +0000 | [diff] [blame] | 14 | argv = [] |
| 15 | stdin = sys.stdin |
| 16 | |
| 17 | cgi.sys = HackedSysModule() |
| 18 | |
Jeremy Hylton | d9827c4 | 2000-08-03 22:11:43 +0000 | [diff] [blame] | 19 | class ComparableException: |
| 20 | def __init__(self, err): |
| 21 | self.err = err |
| 22 | |
| 23 | def __str__(self): |
| 24 | return str(self.err) |
| 25 | |
Guido van Rossum | 47b9ff6 | 2006-08-24 00:41:19 +0000 | [diff] [blame] | 26 | def __eq__(self, anExc): |
Jeremy Hylton | d9827c4 | 2000-08-03 22:11:43 +0000 | [diff] [blame] | 27 | if not isinstance(anExc, Exception): |
Guido van Rossum | 47b9ff6 | 2006-08-24 00:41:19 +0000 | [diff] [blame] | 28 | return NotImplemented |
| 29 | return (self.err.__class__ == anExc.__class__ and |
| 30 | self.err.args == anExc.args) |
Jeremy Hylton | d9827c4 | 2000-08-03 22:11:43 +0000 | [diff] [blame] | 31 | |
| 32 | def __getattr__(self, attr): |
Guido van Rossum | 846d6db | 2001-01-17 15:08:37 +0000 | [diff] [blame] | 33 | return getattr(self.err, attr) |
Jeremy Hylton | d9827c4 | 2000-08-03 22:11:43 +0000 | [diff] [blame] | 34 | |
| 35 | def do_test(buf, method): |
| 36 | env = {} |
| 37 | if method == "GET": |
| 38 | fp = None |
| 39 | env['REQUEST_METHOD'] = 'GET' |
| 40 | env['QUERY_STRING'] = buf |
| 41 | elif method == "POST": |
Victor Stinner | 5c23b8e | 2011-01-14 13:05:21 +0000 | [diff] [blame] | 42 | fp = BytesIO(buf.encode('latin-1')) # FieldStorage expects bytes |
Jeremy Hylton | d9827c4 | 2000-08-03 22:11:43 +0000 | [diff] [blame] | 43 | env['REQUEST_METHOD'] = 'POST' |
| 44 | env['CONTENT_TYPE'] = 'application/x-www-form-urlencoded' |
| 45 | env['CONTENT_LENGTH'] = str(len(buf)) |
| 46 | else: |
Collin Winter | 3add4d7 | 2007-08-29 23:37:32 +0000 | [diff] [blame] | 47 | raise ValueError("unknown method: %s" % method) |
Jeremy Hylton | d9827c4 | 2000-08-03 22:11:43 +0000 | [diff] [blame] | 48 | try: |
| 49 | return cgi.parse(fp, env, strict_parsing=1) |
Guido van Rossum | cd16bf6 | 2007-06-13 18:07:49 +0000 | [diff] [blame] | 50 | except Exception as err: |
Jeremy Hylton | d9827c4 | 2000-08-03 22:11:43 +0000 | [diff] [blame] | 51 | return ComparableException(err) |
| 52 | |
Neil Schemenauer | 66edb62 | 2004-07-19 15:38:11 +0000 | [diff] [blame] | 53 | parse_strict_test_cases = [ |
Jeremy Hylton | d9827c4 | 2000-08-03 22:11:43 +0000 | [diff] [blame] | 54 | ("", ValueError("bad query field: ''")), |
| 55 | ("&", ValueError("bad query field: ''")), |
| 56 | ("&&", ValueError("bad query field: ''")), |
Jeremy Hylton | afde7e2 | 2000-09-15 20:06:57 +0000 | [diff] [blame] | 57 | (";", ValueError("bad query field: ''")), |
| 58 | (";&;", ValueError("bad query field: ''")), |
Jeremy Hylton | d9827c4 | 2000-08-03 22:11:43 +0000 | [diff] [blame] | 59 | # Should the next few really be valid? |
| 60 | ("=", {}), |
| 61 | ("=&=", {}), |
Jeremy Hylton | afde7e2 | 2000-09-15 20:06:57 +0000 | [diff] [blame] | 62 | ("=;=", {}), |
Jeremy Hylton | d9827c4 | 2000-08-03 22:11:43 +0000 | [diff] [blame] | 63 | # This rest seem to make sense |
| 64 | ("=a", {'': ['a']}), |
| 65 | ("&=a", ValueError("bad query field: ''")), |
| 66 | ("=a&", ValueError("bad query field: ''")), |
| 67 | ("=&a", ValueError("bad query field: 'a'")), |
| 68 | ("b=a", {'b': ['a']}), |
| 69 | ("b+=a", {'b ': ['a']}), |
| 70 | ("a=b=a", {'a': ['b=a']}), |
| 71 | ("a=+b=a", {'a': [' b=a']}), |
| 72 | ("&b=a", ValueError("bad query field: ''")), |
| 73 | ("b&=a", ValueError("bad query field: 'b'")), |
| 74 | ("a=a+b&b=b+c", {'a': ['a b'], 'b': ['b c']}), |
| 75 | ("a=a+b&a=b+a", {'a': ['a b', 'b a']}), |
| 76 | ("x=1&y=2.0&z=2-3.%2b0", {'x': ['1'], 'y': ['2.0'], 'z': ['2-3.+0']}), |
Jeremy Hylton | afde7e2 | 2000-09-15 20:06:57 +0000 | [diff] [blame] | 77 | ("x=1;y=2.0&z=2-3.%2b0", {'x': ['1'], 'y': ['2.0'], 'z': ['2-3.+0']}), |
| 78 | ("x=1;y=2.0;z=2-3.%2b0", {'x': ['1'], 'y': ['2.0'], 'z': ['2-3.+0']}), |
Jeremy Hylton | d9827c4 | 2000-08-03 22:11:43 +0000 | [diff] [blame] | 79 | ("Hbc5161168c542333633315dee1182227:key_store_seqid=400006&cuyer=r&view=bustomer&order_id=0bb2e248638833d48cb7fed300000f1b&expire=964546263&lobale=en-US&kid=130003.300038&ss=env", |
| 80 | {'Hbc5161168c542333633315dee1182227:key_store_seqid': ['400006'], |
| 81 | 'cuyer': ['r'], |
| 82 | 'expire': ['964546263'], |
| 83 | 'kid': ['130003.300038'], |
| 84 | 'lobale': ['en-US'], |
| 85 | 'order_id': ['0bb2e248638833d48cb7fed300000f1b'], |
| 86 | 'ss': ['env'], |
| 87 | 'view': ['bustomer'], |
| 88 | }), |
Fred Drake | 004d5e6 | 2000-10-23 17:22:08 +0000 | [diff] [blame] | 89 | |
Jeremy Hylton | d9827c4 | 2000-08-03 22:11:43 +0000 | [diff] [blame] | 90 | ("group_id=5470&set=custom&_assigned_to=31392&_status=1&_category=100&SUBMIT=Browse", |
| 91 | {'SUBMIT': ['Browse'], |
| 92 | '_assigned_to': ['31392'], |
| 93 | '_category': ['100'], |
| 94 | '_status': ['1'], |
| 95 | 'group_id': ['5470'], |
| 96 | 'set': ['custom'], |
| 97 | }) |
| 98 | ] |
| 99 | |
Guido van Rossum | 47b9ff6 | 2006-08-24 00:41:19 +0000 | [diff] [blame] | 100 | def norm(seq): |
Guido van Rossum | cc2b016 | 2007-02-11 06:12:03 +0000 | [diff] [blame] | 101 | return sorted(seq, key=repr) |
Jeremy Hylton | d9827c4 | 2000-08-03 22:11:43 +0000 | [diff] [blame] | 102 | |
| 103 | def first_elts(list): |
Guido van Rossum | c1f779c | 2007-07-03 08:25:58 +0000 | [diff] [blame] | 104 | return [p[0] for p in list] |
Jeremy Hylton | d9827c4 | 2000-08-03 22:11:43 +0000 | [diff] [blame] | 105 | |
| 106 | def first_second_elts(list): |
Guido van Rossum | c1f779c | 2007-07-03 08:25:58 +0000 | [diff] [blame] | 107 | return [(p[0], p[1][0]) for p in list] |
| 108 | |
Benjamin Peterson | dcf97b9 | 2008-07-02 17:30:14 +0000 | [diff] [blame] | 109 | def gen_result(data, environ): |
Victor Stinner | 5c23b8e | 2011-01-14 13:05:21 +0000 | [diff] [blame] | 110 | encoding = 'latin-1' |
| 111 | fake_stdin = BytesIO(data.encode(encoding)) |
Benjamin Peterson | dcf97b9 | 2008-07-02 17:30:14 +0000 | [diff] [blame] | 112 | fake_stdin.seek(0) |
Victor Stinner | 5c23b8e | 2011-01-14 13:05:21 +0000 | [diff] [blame] | 113 | form = cgi.FieldStorage(fp=fake_stdin, environ=environ, encoding=encoding) |
Benjamin Peterson | dcf97b9 | 2008-07-02 17:30:14 +0000 | [diff] [blame] | 114 | |
| 115 | result = {} |
| 116 | for k, v in dict(form).items(): |
Florent Xicluna | 8fbddf1 | 2010-03-17 20:29:51 +0000 | [diff] [blame] | 117 | result[k] = isinstance(v, list) and form.getlist(k) or v.value |
Benjamin Peterson | dcf97b9 | 2008-07-02 17:30:14 +0000 | [diff] [blame] | 118 | |
| 119 | return result |
Jeremy Hylton | d9827c4 | 2000-08-03 22:11:43 +0000 | [diff] [blame] | 120 | |
Thomas Wouters | 89f507f | 2006-12-13 04:49:30 +0000 | [diff] [blame] | 121 | class CgiTests(unittest.TestCase): |
Neil Schemenauer | 66edb62 | 2004-07-19 15:38:11 +0000 | [diff] [blame] | 122 | |
Senthil Kumaran | 6b102f2 | 2013-01-23 02:50:15 -0800 | [diff] [blame] | 123 | def test_parse_multipart(self): |
| 124 | fp = BytesIO(POSTDATA.encode('latin1')) |
| 125 | env = {'boundary': BOUNDARY.encode('latin1'), |
| 126 | 'CONTENT-LENGTH': '558'} |
| 127 | result = cgi.parse_multipart(fp, env) |
| 128 | expected = {'submit': [b' Add '], 'id': [b'1234'], |
| 129 | 'file': [b'Testing 123.\n'], 'title': [b'']} |
| 130 | self.assertEqual(result, expected) |
| 131 | |
| 132 | def test_fieldstorage_properties(self): |
| 133 | fs = cgi.FieldStorage() |
| 134 | self.assertFalse(fs) |
| 135 | self.assertIn("FieldStorage", repr(fs)) |
| 136 | self.assertEqual(list(fs), list(fs.keys())) |
| 137 | fs.list.append(namedtuple('MockFieldStorage', 'name')('fieldvalue')) |
| 138 | self.assertTrue(fs) |
| 139 | |
Senthil Kumaran | 47b5ddb | 2012-03-13 01:50:27 -0700 | [diff] [blame] | 140 | def test_escape(self): |
Brett Cannon | 8f79dd5 | 2012-04-25 20:49:19 -0400 | [diff] [blame] | 141 | # cgi.escape() is deprecated. |
| 142 | with warnings.catch_warnings(): |
| 143 | warnings.filterwarnings('ignore', 'cgi\.escape', |
| 144 | DeprecationWarning) |
| 145 | self.assertEqual("test & string", cgi.escape("test & string")) |
| 146 | self.assertEqual("<test string>", cgi.escape("<test string>")) |
| 147 | self.assertEqual(""test string"", cgi.escape('"test string"', True)) |
Senthil Kumaran | 47b5ddb | 2012-03-13 01:50:27 -0700 | [diff] [blame] | 148 | |
Thomas Wouters | 89f507f | 2006-12-13 04:49:30 +0000 | [diff] [blame] | 149 | def test_strict(self): |
| 150 | for orig, expect in parse_strict_test_cases: |
| 151 | # Test basic parsing |
| 152 | d = do_test(orig, "GET") |
Victor Stinner | 5c23b8e | 2011-01-14 13:05:21 +0000 | [diff] [blame] | 153 | self.assertEqual(d, expect, "Error parsing %s method GET" % repr(orig)) |
Thomas Wouters | 89f507f | 2006-12-13 04:49:30 +0000 | [diff] [blame] | 154 | d = do_test(orig, "POST") |
Victor Stinner | 5c23b8e | 2011-01-14 13:05:21 +0000 | [diff] [blame] | 155 | self.assertEqual(d, expect, "Error parsing %s method POST" % repr(orig)) |
Thomas Wouters | 89f507f | 2006-12-13 04:49:30 +0000 | [diff] [blame] | 156 | |
| 157 | env = {'QUERY_STRING': orig} |
Thomas Wouters | 89f507f | 2006-12-13 04:49:30 +0000 | [diff] [blame] | 158 | fs = cgi.FieldStorage(environ=env) |
Florent Xicluna | 8fbddf1 | 2010-03-17 20:29:51 +0000 | [diff] [blame] | 159 | if isinstance(expect, dict): |
Thomas Wouters | 89f507f | 2006-12-13 04:49:30 +0000 | [diff] [blame] | 160 | # test dict interface |
Georg Brandl | 49d1b4f | 2008-05-11 21:42:51 +0000 | [diff] [blame] | 161 | self.assertEqual(len(expect), len(fs)) |
Ezio Melotti | 263cbdf | 2010-11-29 02:02:10 +0000 | [diff] [blame] | 162 | self.assertCountEqual(expect.keys(), fs.keys()) |
Georg Brandl | 49d1b4f | 2008-05-11 21:42:51 +0000 | [diff] [blame] | 163 | ##self.assertEqual(norm(expect.values()), norm(fs.values())) |
| 164 | ##self.assertEqual(norm(expect.items()), norm(fs.items())) |
Thomas Wouters | 89f507f | 2006-12-13 04:49:30 +0000 | [diff] [blame] | 165 | self.assertEqual(fs.getvalue("nonexistent field", "default"), "default") |
| 166 | # test individual fields |
| 167 | for key in expect.keys(): |
| 168 | expect_val = expect[key] |
Benjamin Peterson | 577473f | 2010-01-19 00:09:57 +0000 | [diff] [blame] | 169 | self.assertIn(key, fs) |
Thomas Wouters | 89f507f | 2006-12-13 04:49:30 +0000 | [diff] [blame] | 170 | if len(expect_val) > 1: |
Thomas Wouters | 89f507f | 2006-12-13 04:49:30 +0000 | [diff] [blame] | 171 | self.assertEqual(fs.getvalue(key), expect_val) |
| 172 | else: |
Thomas Wouters | 89f507f | 2006-12-13 04:49:30 +0000 | [diff] [blame] | 173 | self.assertEqual(fs.getvalue(key), expect_val[0]) |
Thomas Wouters | 89f507f | 2006-12-13 04:49:30 +0000 | [diff] [blame] | 174 | |
| 175 | def test_log(self): |
| 176 | cgi.log("Testing") |
| 177 | |
| 178 | cgi.logfp = StringIO() |
| 179 | cgi.initlog("%s", "Testing initlog 1") |
| 180 | cgi.log("%s", "Testing log 2") |
| 181 | self.assertEqual(cgi.logfp.getvalue(), "Testing initlog 1\nTesting log 2\n") |
| 182 | if os.path.exists("/dev/null"): |
| 183 | cgi.logfp = None |
| 184 | cgi.logfile = "/dev/null" |
| 185 | cgi.initlog("%s", "Testing log 3") |
Victor Stinner | d33344a | 2011-07-14 22:28:36 +0200 | [diff] [blame] | 186 | self.addCleanup(cgi.closelog) |
Thomas Wouters | 89f507f | 2006-12-13 04:49:30 +0000 | [diff] [blame] | 187 | cgi.log("Testing log 4") |
| 188 | |
| 189 | def test_fieldstorage_readline(self): |
| 190 | # FieldStorage uses readline, which has the capacity to read all |
| 191 | # contents of the input file into memory; we use readline's size argument |
| 192 | # to prevent that for files that do not contain any newlines in |
| 193 | # non-GET/HEAD requests |
| 194 | class TestReadlineFile: |
| 195 | def __init__(self, file): |
| 196 | self.file = file |
| 197 | self.numcalls = 0 |
| 198 | |
| 199 | def readline(self, size=None): |
| 200 | self.numcalls += 1 |
| 201 | if size: |
| 202 | return self.file.readline(size) |
Jeremy Hylton | d9827c4 | 2000-08-03 22:11:43 +0000 | [diff] [blame] | 203 | else: |
Thomas Wouters | 89f507f | 2006-12-13 04:49:30 +0000 | [diff] [blame] | 204 | return self.file.readline() |
Jeremy Hylton | d9827c4 | 2000-08-03 22:11:43 +0000 | [diff] [blame] | 205 | |
Thomas Wouters | 89f507f | 2006-12-13 04:49:30 +0000 | [diff] [blame] | 206 | def __getattr__(self, name): |
| 207 | file = self.__dict__['file'] |
| 208 | a = getattr(file, name) |
| 209 | if not isinstance(a, int): |
| 210 | setattr(self, name, a) |
| 211 | return a |
Jeremy Hylton | d9827c4 | 2000-08-03 22:11:43 +0000 | [diff] [blame] | 212 | |
Victor Stinner | 5c23b8e | 2011-01-14 13:05:21 +0000 | [diff] [blame] | 213 | f = TestReadlineFile(tempfile.TemporaryFile("wb+")) |
Benjamin Peterson | 807a5a1 | 2010-10-30 22:59:37 +0000 | [diff] [blame] | 214 | self.addCleanup(f.close) |
Victor Stinner | 5c23b8e | 2011-01-14 13:05:21 +0000 | [diff] [blame] | 215 | f.write(b'x' * 256 * 1024) |
Thomas Wouters | 89f507f | 2006-12-13 04:49:30 +0000 | [diff] [blame] | 216 | f.seek(0) |
| 217 | env = {'REQUEST_METHOD':'PUT'} |
| 218 | fs = cgi.FieldStorage(fp=f, environ=env) |
Benjamin Peterson | 807a5a1 | 2010-10-30 22:59:37 +0000 | [diff] [blame] | 219 | self.addCleanup(fs.file.close) |
Thomas Wouters | 89f507f | 2006-12-13 04:49:30 +0000 | [diff] [blame] | 220 | # if we're not chunking properly, readline is only called twice |
| 221 | # (by read_binary); if we are chunking properly, it will be called 5 times |
| 222 | # as long as the chunksize is 1 << 16. |
Benjamin Peterson | c9c0f20 | 2009-06-30 23:06:06 +0000 | [diff] [blame] | 223 | self.assertTrue(f.numcalls > 2) |
Victor Stinner | 5c23b8e | 2011-01-14 13:05:21 +0000 | [diff] [blame] | 224 | f.close() |
Jeremy Hylton | d9827c4 | 2000-08-03 22:11:43 +0000 | [diff] [blame] | 225 | |
Thomas Wouters | 89f507f | 2006-12-13 04:49:30 +0000 | [diff] [blame] | 226 | def test_fieldstorage_multipart(self): |
| 227 | #Test basic FieldStorage multipart parsing |
Victor Stinner | f0e293c | 2011-03-01 23:09:57 +0000 | [diff] [blame] | 228 | env = { |
| 229 | 'REQUEST_METHOD': 'POST', |
| 230 | 'CONTENT_TYPE': 'multipart/form-data; boundary={}'.format(BOUNDARY), |
| 231 | 'CONTENT_LENGTH': '558'} |
| 232 | fp = BytesIO(POSTDATA.encode('latin-1')) |
| 233 | fs = cgi.FieldStorage(fp, environ=env, encoding="latin-1") |
Ezio Melotti | b3aedd4 | 2010-11-20 19:04:17 +0000 | [diff] [blame] | 234 | self.assertEqual(len(fs.list), 4) |
Thomas Wouters | 89f507f | 2006-12-13 04:49:30 +0000 | [diff] [blame] | 235 | expect = [{'name':'id', 'filename':None, 'value':'1234'}, |
| 236 | {'name':'title', 'filename':None, 'value':''}, |
Victor Stinner | 5c23b8e | 2011-01-14 13:05:21 +0000 | [diff] [blame] | 237 | {'name':'file', 'filename':'test.txt', 'value':b'Testing 123.\n'}, |
Thomas Wouters | 89f507f | 2006-12-13 04:49:30 +0000 | [diff] [blame] | 238 | {'name':'submit', 'filename':None, 'value':' Add '}] |
| 239 | for x in range(len(fs.list)): |
| 240 | for k, exp in expect[x].items(): |
| 241 | got = getattr(fs.list[x], k) |
Ezio Melotti | b3aedd4 | 2010-11-20 19:04:17 +0000 | [diff] [blame] | 242 | self.assertEqual(got, exp) |
Thomas Wouters | 00ee7ba | 2006-08-21 19:07:27 +0000 | [diff] [blame] | 243 | |
Victor Stinner | f0e293c | 2011-03-01 23:09:57 +0000 | [diff] [blame] | 244 | def test_fieldstorage_multipart_non_ascii(self): |
| 245 | #Test basic FieldStorage multipart parsing |
| 246 | env = {'REQUEST_METHOD':'POST', |
| 247 | 'CONTENT_TYPE': 'multipart/form-data; boundary={}'.format(BOUNDARY), |
| 248 | 'CONTENT_LENGTH':'558'} |
| 249 | for encoding in ['iso-8859-1','utf-8']: |
| 250 | fp = BytesIO(POSTDATA_NON_ASCII.encode(encoding)) |
| 251 | fs = cgi.FieldStorage(fp, environ=env,encoding=encoding) |
| 252 | self.assertEqual(len(fs.list), 1) |
| 253 | expect = [{'name':'id', 'filename':None, 'value':'\xe7\xf1\x80'}] |
| 254 | for x in range(len(fs.list)): |
| 255 | for k, exp in expect[x].items(): |
| 256 | got = getattr(fs.list[x], k) |
| 257 | self.assertEqual(got, exp) |
| 258 | |
Serhiy Storchaka | c7bfe0e | 2013-06-17 16:34:41 +0300 | [diff] [blame^] | 259 | def test_fieldstorage_multipart_maxline(self): |
| 260 | # Issue #18167 |
| 261 | maxline = 1 << 16 |
| 262 | self.maxDiff = None |
| 263 | def check(content): |
| 264 | data = """---123 |
| 265 | Content-Disposition: form-data; name="upload"; filename="fake.txt" |
| 266 | Content-Type: text/plain |
| 267 | |
| 268 | %s |
| 269 | ---123-- |
| 270 | """.replace('\n', '\r\n') % content |
| 271 | environ = { |
| 272 | 'CONTENT_LENGTH': str(len(data)), |
| 273 | 'CONTENT_TYPE': 'multipart/form-data; boundary=-123', |
| 274 | 'REQUEST_METHOD': 'POST', |
| 275 | } |
| 276 | self.assertEqual(gen_result(data, environ), |
| 277 | {'upload': content.encode('latin1')}) |
| 278 | check('x' * (maxline - 1)) |
| 279 | check('x' * (maxline - 1) + '\r') |
| 280 | check('x' * (maxline - 1) + '\r' + 'y' * (maxline - 1)) |
| 281 | |
Benjamin Peterson | dcf97b9 | 2008-07-02 17:30:14 +0000 | [diff] [blame] | 282 | _qs_result = { |
| 283 | 'key1': 'value1', |
| 284 | 'key2': ['value2x', 'value2y'], |
| 285 | 'key3': 'value3', |
| 286 | 'key4': 'value4' |
| 287 | } |
| 288 | def testQSAndUrlEncode(self): |
| 289 | data = "key2=value2x&key3=value3&key4=value4" |
| 290 | environ = { |
| 291 | 'CONTENT_LENGTH': str(len(data)), |
| 292 | 'CONTENT_TYPE': 'application/x-www-form-urlencoded', |
| 293 | 'QUERY_STRING': 'key1=value1&key2=value2y', |
| 294 | 'REQUEST_METHOD': 'POST', |
| 295 | } |
| 296 | v = gen_result(data, environ) |
| 297 | self.assertEqual(self._qs_result, v) |
| 298 | |
| 299 | def testQSAndFormData(self): |
Victor Stinner | 5c23b8e | 2011-01-14 13:05:21 +0000 | [diff] [blame] | 300 | data = """---123 |
Benjamin Peterson | dcf97b9 | 2008-07-02 17:30:14 +0000 | [diff] [blame] | 301 | Content-Disposition: form-data; name="key2" |
| 302 | |
| 303 | value2y |
| 304 | ---123 |
| 305 | Content-Disposition: form-data; name="key3" |
| 306 | |
| 307 | value3 |
| 308 | ---123 |
| 309 | Content-Disposition: form-data; name="key4" |
| 310 | |
| 311 | value4 |
| 312 | ---123-- |
| 313 | """ |
| 314 | environ = { |
| 315 | 'CONTENT_LENGTH': str(len(data)), |
| 316 | 'CONTENT_TYPE': 'multipart/form-data; boundary=-123', |
| 317 | 'QUERY_STRING': 'key1=value1&key2=value2x', |
| 318 | 'REQUEST_METHOD': 'POST', |
| 319 | } |
| 320 | v = gen_result(data, environ) |
| 321 | self.assertEqual(self._qs_result, v) |
| 322 | |
| 323 | def testQSAndFormDataFile(self): |
Victor Stinner | 5c23b8e | 2011-01-14 13:05:21 +0000 | [diff] [blame] | 324 | data = """---123 |
Benjamin Peterson | dcf97b9 | 2008-07-02 17:30:14 +0000 | [diff] [blame] | 325 | Content-Disposition: form-data; name="key2" |
| 326 | |
| 327 | value2y |
| 328 | ---123 |
| 329 | Content-Disposition: form-data; name="key3" |
| 330 | |
| 331 | value3 |
| 332 | ---123 |
| 333 | Content-Disposition: form-data; name="key4" |
| 334 | |
| 335 | value4 |
| 336 | ---123 |
| 337 | Content-Disposition: form-data; name="upload"; filename="fake.txt" |
| 338 | Content-Type: text/plain |
| 339 | |
| 340 | this is the content of the fake file |
| 341 | |
| 342 | ---123-- |
| 343 | """ |
| 344 | environ = { |
| 345 | 'CONTENT_LENGTH': str(len(data)), |
| 346 | 'CONTENT_TYPE': 'multipart/form-data; boundary=-123', |
| 347 | 'QUERY_STRING': 'key1=value1&key2=value2x', |
| 348 | 'REQUEST_METHOD': 'POST', |
| 349 | } |
| 350 | result = self._qs_result.copy() |
| 351 | result.update({ |
Victor Stinner | 5c23b8e | 2011-01-14 13:05:21 +0000 | [diff] [blame] | 352 | 'upload': b'this is the content of the fake file\n' |
Benjamin Peterson | dcf97b9 | 2008-07-02 17:30:14 +0000 | [diff] [blame] | 353 | }) |
| 354 | v = gen_result(data, environ) |
| 355 | self.assertEqual(result, v) |
| 356 | |
Facundo Batista | bd18fd6 | 2008-09-08 00:23:29 +0000 | [diff] [blame] | 357 | def test_deprecated_parse_qs(self): |
Florent Xicluna | 8fbddf1 | 2010-03-17 20:29:51 +0000 | [diff] [blame] | 358 | # this func is moved to urllib.parse, this is just a sanity check |
| 359 | with check_warnings(('cgi.parse_qs is deprecated, use urllib.parse.' |
| 360 | 'parse_qs instead', DeprecationWarning)): |
Facundo Batista | a27244b | 2008-09-09 02:43:19 +0000 | [diff] [blame] | 361 | self.assertEqual({'a': ['A1'], 'B': ['B3'], 'b': ['B2']}, |
| 362 | cgi.parse_qs('a=A1&b=B2&B=B3')) |
Facundo Batista | bd18fd6 | 2008-09-08 00:23:29 +0000 | [diff] [blame] | 363 | |
| 364 | def test_deprecated_parse_qsl(self): |
Florent Xicluna | 8fbddf1 | 2010-03-17 20:29:51 +0000 | [diff] [blame] | 365 | # this func is moved to urllib.parse, this is just a sanity check |
| 366 | with check_warnings(('cgi.parse_qsl is deprecated, use urllib.parse.' |
| 367 | 'parse_qsl instead', DeprecationWarning)): |
Facundo Batista | a27244b | 2008-09-09 02:43:19 +0000 | [diff] [blame] | 368 | self.assertEqual([('a', 'A1'), ('b', 'B2'), ('B', 'B3')], |
| 369 | cgi.parse_qsl('a=A1&b=B2&B=B3')) |
Facundo Batista | bd18fd6 | 2008-09-08 00:23:29 +0000 | [diff] [blame] | 370 | |
Fred Drake | 9a0a65b | 2008-12-04 19:24:50 +0000 | [diff] [blame] | 371 | def test_parse_header(self): |
| 372 | self.assertEqual( |
| 373 | cgi.parse_header("text/plain"), |
| 374 | ("text/plain", {})) |
| 375 | self.assertEqual( |
| 376 | cgi.parse_header("text/vnd.just.made.this.up ; "), |
| 377 | ("text/vnd.just.made.this.up", {})) |
| 378 | self.assertEqual( |
| 379 | cgi.parse_header("text/plain;charset=us-ascii"), |
| 380 | ("text/plain", {"charset": "us-ascii"})) |
| 381 | self.assertEqual( |
| 382 | cgi.parse_header('text/plain ; charset="us-ascii"'), |
| 383 | ("text/plain", {"charset": "us-ascii"})) |
| 384 | self.assertEqual( |
| 385 | cgi.parse_header('text/plain ; charset="us-ascii"; another=opt'), |
| 386 | ("text/plain", {"charset": "us-ascii", "another": "opt"})) |
| 387 | self.assertEqual( |
| 388 | cgi.parse_header('attachment; filename="silly.txt"'), |
| 389 | ("attachment", {"filename": "silly.txt"})) |
| 390 | self.assertEqual( |
| 391 | cgi.parse_header('attachment; filename="strange;name"'), |
| 392 | ("attachment", {"filename": "strange;name"})) |
| 393 | self.assertEqual( |
| 394 | cgi.parse_header('attachment; filename="strange;name";size=123;'), |
| 395 | ("attachment", {"filename": "strange;name", "size": "123"})) |
Senthil Kumaran | 1ef0c03 | 2011-10-20 01:05:44 +0800 | [diff] [blame] | 396 | self.assertEqual( |
| 397 | cgi.parse_header('form-data; name="files"; filename="fo\\"o;bar"'), |
| 398 | ("form-data", {"name": "files", "filename": 'fo"o;bar'})) |
| 399 | |
Fred Drake | 9a0a65b | 2008-12-04 19:24:50 +0000 | [diff] [blame] | 400 | |
Victor Stinner | f0e293c | 2011-03-01 23:09:57 +0000 | [diff] [blame] | 401 | BOUNDARY = "---------------------------721837373350705526688164684" |
| 402 | |
| 403 | POSTDATA = """-----------------------------721837373350705526688164684 |
| 404 | Content-Disposition: form-data; name="id" |
| 405 | |
| 406 | 1234 |
| 407 | -----------------------------721837373350705526688164684 |
| 408 | Content-Disposition: form-data; name="title" |
| 409 | |
| 410 | |
| 411 | -----------------------------721837373350705526688164684 |
| 412 | Content-Disposition: form-data; name="file"; filename="test.txt" |
| 413 | Content-Type: text/plain |
| 414 | |
| 415 | Testing 123. |
| 416 | |
| 417 | -----------------------------721837373350705526688164684 |
| 418 | Content-Disposition: form-data; name="submit" |
| 419 | |
| 420 | Add\x20 |
| 421 | -----------------------------721837373350705526688164684-- |
| 422 | """ |
| 423 | |
| 424 | POSTDATA_NON_ASCII = """-----------------------------721837373350705526688164684 |
| 425 | Content-Disposition: form-data; name="id" |
| 426 | |
| 427 | \xe7\xf1\x80 |
| 428 | -----------------------------721837373350705526688164684 |
| 429 | """ |
| 430 | |
Fred Drake | 9a0a65b | 2008-12-04 19:24:50 +0000 | [diff] [blame] | 431 | |
Thomas Wouters | 89f507f | 2006-12-13 04:49:30 +0000 | [diff] [blame] | 432 | def test_main(): |
| 433 | run_unittest(CgiTests) |
| 434 | |
| 435 | if __name__ == '__main__': |
| 436 | test_main() |