From 66fe31ffbc821bb6d57eb441d3f19797f370e85b Mon Sep 17 00:00:00 2001 From: Chris McDonough Date: Thu, 8 Sep 2011 00:09:08 -0400 Subject: add another oob test --- pyramid/tests/test_integration.py | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/pyramid/tests/test_integration.py b/pyramid/tests/test_integration.py index 3e2a6e452..cd259b630 100644 --- a/pyramid/tests/test_integration.py +++ b/pyramid/tests/test_integration.py @@ -131,13 +131,18 @@ class TestStaticAppBase(IntegrationBase): def test_notfound(self): self.testapp.get('/static/wontbefound.html', status=404) - def test_oob_doubledot(self): + def test_oob_dotdotslash(self): self.testapp.get('/static/../../test_integration.py', status=404) + def test_oob_dotdotslash_encoded(self): + self.testapp.get('/static/%2E%2E%2F/test_integration.py', status=404) + # XXX pdb this + def test_oob_slash(self): self.testapp.get('/%2F/test_integration.py', status=404) # XXX pdb this + class TestStaticAppUsingAbsPath(TestStaticAppBase, unittest.TestCase): package = 'pyramid.tests.pkgs.static_abspath' -- cgit v1.2.3