github/datasette
1
0
Fork 0
mirror of https://github.com/simonw/datasette.git synced 2025-12-10 16:51:24 +01:00
Code Issues Projects Releases Packages Wiki Activity
datasette/tests
History
James Jefferies c1dd2c1dfb Fix for open redirect - identified in Issue 2429 (#2500) 
* Issue 2429 indicates the possiblity of an open redirect

The 404 processing ends up redirecting a request with multiple path
slashes to that site, i.e.

https://my-site//shedcode.co.uk will redirect to https://shedcode.co.uk

This commit uses a regular expression to remove the multiple leading
slashes before redirecting.
2025-11-04 17:10:19 -08:00
..
plugins Vendor Pint, support Python 3.13, drop 3.8 2024-10-07 10:22:07 -07:00
test_templates Fix handling of nested custom page wildcard paths, closes #996 2020-10-07 15:51:11 -07:00
__init__.py Broke up test_app into test_api and test_html 2017-12-15 04:08:24 -08:00
build_small_spatialite_db.py New run_sanity_checks mechanism, for SpatiLite 2019-05-11 15:55:30 -07:00
conftest.py Move HTTPS test to a bash script 2022-12-17 18:51:17 -08:00
ext.c Add new entrypoint option to --load-extensions. (#1789) 2022-08-23 11:34:30 -07:00
fixtures.py Tests now close SQLite database connections and files explicitly, refs #1843 2022-11-03 13:37:26 -07:00
spatialite.db New run_sanity_checks mechanism, for SpatiLite 2019-05-11 15:55:30 -07:00
test_api.py Fix for flaky test_hidden_sqlite_stat1_table, refs #2179 2023-09-21 12:21:24 -07:00
test_auth.py Remove python-baseconv dependency, refs #1733, closes #1734 2022-05-02 12:39:06 -07:00
test_black.py Run black against everything, not just tests and datasette dirs 2020-02-13 15:02:10 -08:00
test_canned_queries.py Don't allow canned write queries on immutable DBs, closes #1728 2022-08-14 09:34:31 -07:00
test_cli.py Backported default_allow_sql for 0.63.x, closes #1409 2023-01-05 09:21:07 -08:00
test_cli_serve_get.py Use context manager instead of plain open (#1211) 2021-03-11 08:15:49 -08:00
test_cli_serve_server.py Move HTTPS test to a bash script 2022-12-17 18:51:17 -08:00
test_config_dir.py .sqlite/.sqlite3 extensions for config directory mode 2022-10-07 16:03:30 -07:00
test_crossdb.py --crossdb option for joining across databases (#1232) 2021-02-18 14:09:12 -08:00
test_csv.py Backport of CSV labels fix from #2214 2023-12-22 15:12:50 -08:00
test_custom_pages.py Fix for open redirect - identified in Issue 2429 (#2500) 2025-11-04 17:10:19 -08:00
test_datasette_https_server.sh Move HTTPS test to a bash script 2022-12-17 18:51:17 -08:00
test_docs.py Applied latest Black 2024-06-21 16:28:25 -07:00
test_facets.py table facet_size in metadata, refs #1804 2022-09-06 08:59:19 -07:00
test_filters.py Applied latest Black 2023-09-21 12:23:48 -07:00
test_html.py Fix for redirects ignoring base_url, refs #1883 2022-11-10 22:49:54 -08:00
test_internal_db.py Compound primary key for foreign_keys table in _internal 2020-12-22 11:04:29 -08:00
test_internals_database.py Applied latest Black 2024-06-21 16:28:25 -07:00
test_internals_datasette.py Applied latest Black 2024-06-21 16:28:25 -07:00
test_internals_datasette_client.py Async support for prepare_jinja2_environment, closes #1809 2022-09-16 20:38:24 -07:00
test_internals_request.py Request.fake(... url_vars), plus .fake() is now documented 2022-03-31 19:01:58 -07:00
test_internals_response.py response.set_cookie(), closes #795 2020-06-09 15:19:37 -07:00
test_internals_urls.py Remove hashed URL mode 2022-03-18 17:12:03 -07:00
test_load_extensions.py Applied latest Black 2023-09-21 12:23:48 -07:00
test_messages.py Use f-strings in place of .format() 2020-11-15 15:24:22 -08:00
test_package.py Upgrade Docker images to Python 3.11, closes #1853 2022-10-25 12:04:53 -07:00
test_permissions.py Applied latest Black 2024-06-21 16:28:25 -07:00
test_plugins.py check_visibility can now take multiple permissions into account 2022-10-23 19:11:33 -07:00
test_publish_cloudrun.py Use service-specific image ID for Cloud Run deploys, refs #2036 2023-03-08 12:27:15 -08:00
test_publish_heroku.py Upgrade to Python 3.11 on Heroku, refs #1905 2022-11-18 16:49:08 -08:00
test_routes.py Async support for prepare_jinja2_environment, closes #1809 2022-09-16 20:38:24 -07:00
test_spatialite.py Skip SpatiaLite test if no conn.enable_load_extension() 2022-09-05 17:09:57 -07:00
test_table_api.py Applied latest Black 2024-06-21 16:28:25 -07:00
test_table_html.py Backport of #2359 for 0.64.x 2024-06-21 16:18:38 -07:00
test_tracer.py tracer.trace_child_tasks() for asyncio.gather tracing 2022-02-04 21:19:49 -08:00
test_utils.py Applied latest Black 2024-06-21 16:28:25 -07:00
utils.py Skip SpatiaLite test if no conn.enable_load_extension() 2022-09-05 17:09:57 -07:00