maya-chen/flask
1
0
Fork 0
forked from orbit-oss/flask
Code Pull requests Activity

safe_join on Windows uses posixpath

Browse source 
fixes #2033
closes #2059
This commit is contained in:
David Lord 2017-05-15 16:58:01 -07:00 • committed by Markus Unterwaditzer
parent 4ff84d537a
commit f7c35bf0d5
3 changed files with 33 additions and 21 deletions
Download patch file Download diff file Expand all files Collapse all files

25
tests/test_helpers.py
View file

@ -846,21 +846,20 @@ class TestStreaming(object):
class TestSafeJoin(object):
def test_safe_join(self):
# Valid combinations of *args and expected joined paths.
passing = (
(('a/b/c', ), 'a/b/c'),
(('/', 'a/', 'b/', 'c/', ), '/a/b/c'),
(('a', 'b', 'c', ), 'a/b/c'),
(('/a', 'b/c', ), '/a/b/c'),
(('a/b', 'X/../c'), 'a/b/c', ),
(('/a/b', 'c/X/..'), '/a/b/c', ),
(('a/b/c',), 'a/b/c'),
(('/', 'a/', 'b/', 'c/'), '/a/b/c'),
(('a', 'b', 'c'), 'a/b/c'),
(('/a', 'b/c'), '/a/b/c'),
(('a/b', 'X/../c'), 'a/b/c'),
(('/a/b', 'c/X/..'), '/a/b/c'),
# If last path is '' add a slash
(('/a/b/c', '', ), '/a/b/c/', ),
(('/a/b/c', ''), '/a/b/c/'),
# Preserve dot slash
(('/a/b/c', './', ), '/a/b/c/.', ),
(('a/b/c', 'X/..'), 'a/b/c/.', ),
(('/a/b/c', './'), '/a/b/c/.'),
(('a/b/c', 'X/..'), 'a/b/c/.'),
# Base directory is always considered safe
(('../', 'a/b/c'), '../a/b/c'),
(('/..', ), '/..'),
@ -874,12 +873,12 @@ class TestSafeJoin(object):
failing = (
# path.isabs and ``..'' checks
('/a', 'b', '/c'),
('/a', '../b/c', ),
('/a', '../b/c'),
('/a', '..', 'b/c'),
# Boundaries violations after path normalization
('/a', 'b/../b/../../c', ),
('/a', 'b/../b/../../c'),
('/a', 'b', 'c/../..'),
('/a', 'b/../../c', ),
('/a', 'b/../../c'),
)
for args in failing: