CTYPTO/freqtrade
1
0
Fork 0
mirror of https://github.com/freqtrade/freqtrade.git synced 2026-03-01 15:52:43 +00:00
Code Issues Packages Projects Releases Wiki Activity

test: add test for path traversal fix

Browse Source
This commit is contained in:
Matthias
2026-02-24 21:44:37 +01:00
parent 429276cac6
commit 34df7b1793
1 changed files with 6 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
tests/rpc/test_rpc_apiserver.py
View File

@@ -8,7 +8,7 @@ import time
from copy import deepcopy
from datetime import UTC, datetime, timedelta
from pathlib import Path
from unittest.mock import ANY, MagicMock, PropertyMock
from unittest.mock import ANY, MagicMock, PropertyMock, patch
import pandas as pd
import pytest
@@ -180,11 +180,12 @@ def test_api_ui_fallback(botclient, mocker):
# Allow both fallback or real UI
assert "`freqtrade install-ui`" in rc.text or "<!DOCTYPE html>" in rc.text
mocker.patch.object(Path, "is_file", MagicMock(side_effect=[True, False]))
rc = client_get(client, "%2F%2F%2Fetc/passwd")
assert rc.status_code == 200
for test_string in ["%2F%2F%2Fetc/passwd", "assets%2F..%2F..%2F..%2Fdeps.py"]:
with patch.object(Path, "is_file", MagicMock(side_effect=[True, False])):
rc = client_get(client, test_string)
assert rc.status_code == 200
assert "`freqtrade install-ui`" in rc.text
assert "`freqtrade install-ui`" in rc.text
def test_api_ui_version(botclient, mocker):