8c8f7313f4
* fix(minor): make utils explicit in safe_globals * fix(minor): import subprocess * fix(minor): fix globals in safe_eval; * fix(minor): import subprocess * fix(minor): add test * fix(minor): webhook.py * fix(minor): document_type_mapping.py
26 lines
No EOL
1,004 B
Python
26 lines
No EOL
1,004 B
Python
from __future__ import unicode_literals
|
|
import unittest, frappe
|
|
from frappe.utils.safe_exec import safe_exec, get_safe_globals
|
|
|
|
class TestSafeExec(unittest.TestCase):
|
|
def test_import_fails(self):
|
|
self.assertRaises(ImportError, safe_exec, 'import os')
|
|
|
|
def test_internal_attributes(self):
|
|
self.assertRaises(SyntaxError, safe_exec, '().__class__.__call__')
|
|
|
|
def test_utils(self):
|
|
_locals = dict(out=None)
|
|
safe_exec('''out = frappe.utils.cint("1")''', None, _locals)
|
|
self.assertEqual(_locals['out'], 1)
|
|
|
|
def test_safe_eval(self):
|
|
self.assertEqual(frappe.safe_eval('1+1'), 2)
|
|
self.assertRaises(AttributeError, frappe.safe_eval, 'frappe.utils.os.path', get_safe_globals())
|
|
|
|
def test_sql(self):
|
|
_locals = dict(out=None)
|
|
safe_exec('''out = frappe.db.sql("select name from tabDocType where name='DocType'")''', None, _locals)
|
|
self.assertEqual(_locals['out'][0][0], 'DocType')
|
|
|
|
self.assertRaises(frappe.PermissionError, safe_exec, 'frappe.db.sql("update tabToDo set description=NULL")') |