# Copyright 2018 Google LLC

#

# Licensed under the Apache License, Version 2.0 (the 'License');

# you may not use this file except in compliance with the License.

# You may obtain a copy of the License at

#

# http://www.apache.org/licenses/LICENSE-2.0

#

# Unless required by applicable law or agreed to in writing, software

# distributed under the License is distributed on an 'AS IS' BASIS,

# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

# See the License for the specific language governing permissions and

# limitations under the License.

import flask

import pytest

import main

# Create a fake "app" for generating test request contexts.

@pytest.fixture(scope="module")

def app():

return flask.Flask(__name__)

def test_hello_get(app):

with app.test_request_context():

res = main.hello_get(flask.request)

assert 'Hello World!' in res

def test_hello_http_no_args(app):

with app.test_request_context():

res = main.hello_http(flask.request)

assert 'Hello World!' in res

def test_hello_http_get(app):

with app.test_request_context(query_string={'name': 'test'}):

res = main.hello_http(flask.request)

assert 'Hello test!' in res

def test_hello_http_args(app):

with app.test_request_context(json={'name': 'test'}):

res = main.hello_http(flask.request)

assert 'Hello test!' in res

def test_hello_http_empty_json(app):

with app.test_request_context(json=''):

res = main.hello_http(flask.request)

assert 'Hello World!' in res

def test_hello_http_xss(app):

with app.test_request_context(json={'name': '<script>alert(1)</script>'}):

res = main.hello_http(flask.request)

assert '<script>' not in res

def test_hello_content_json(app):

with app.test_request_context(json={'name': 'test'}):

res = main.hello_content(flask.request)

assert 'Hello test!' in res

def test_hello_content_empty_json(app):

with app.test_request_context(json=''):

with pytest.raises(

ValueError,

message="JSON is invalid, or missing a 'name' property"):

main.hello_content(flask.request)

def test_hello_content_urlencoded(app):

with app.test_request_context(

data={'name': 'test'},

content_type='application/x-www-form-urlencoded'):

res = main.hello_content(flask.request)

assert 'Hello test!' in res

def test_hello_content_xss(app):

with app.test_request_context(json={'name': '<script>alert(1)</script>'}):

res = main.hello_content(flask.request)

assert '<script>' not in res

def test_hello_method(app):

with app.test_request_context(method='GET'):

res = main.hello_method(flask.request)

assert 'Hello World!' in res