from __future__ import unicode_literals import unittest, frappe from frappe.utils.safe_exec import safe_exec class TestSafeExec(unittest.TestCase): def test_import_fails(self): self.assertRaises(ImportError, safe_exec, 'import os') def test_internal_attributes(self): self.assertRaises(SyntaxError, safe_exec, '().__class__.__call__') def test_sql(self): _locals = dict(out=None) safe_exec('''out = frappe.db.sql("select name from tabDocType where name='DocType'")''', None, _locals) self.assertEqual(_locals['out'][0][0], 'DocType') self.assertRaises(frappe.PermissionError, safe_exec, 'frappe.db.sql("update tabToDo set description=NULL")')