summaryrefslogtreecommitdiffstats
path: root/Lib/test/test_cgi.py
Commit message (Collapse)AuthorAgeFilesLines
* [3.8] bpo-42967: only use '&' as a query string separator (GH-24297) (#24529)Senthil Kumaran2021-02-151-5/+24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * bpo-42967: only use '&' as a query string separator (#24297) bpo-42967: [security] Address a web cache-poisoning issue reported in urllib.parse.parse_qsl(). urllib.parse will only us "&" as query string separator by default instead of both ";" and "&" as allowed in earlier versions. An optional argument seperator with default value "&" is added to specify the separator. Co-authored-by: Éric Araujo <merwok@netwok.org> Co-authored-by: blurb-it[bot] <43283697+blurb-it[bot]@users.noreply.github.com> Co-authored-by: Ken Jin <28750310+Fidget-Spinner@users.noreply.github.com> Co-authored-by: Éric Araujo <merwok@netwok.org> (cherry picked from commit fcbe0cb04d35189401c0c880ebfb4311e952d776) * [3.8] bpo-42967: only use '&' as a query string separator (GH-24297) bpo-42967: [security] Address a web cache-poisoning issue reported in urllib.parse.parse_qsl(). urllib.parse will only us "&" as query string separator by default instead of both ";" and "&" as allowed in earlier versions. An optional argument seperator with default value "&" is added to specify the separator. Co-authored-by: Éric Araujo <merwok@netwok.org> Co-authored-by: blurb-it[bot] <43283697+blurb-it[bot]@users.noreply.github.com> Co-authored-by: Ken Jin <28750310+Fidget-Spinner@users.noreply.github.com> Co-authored-by: Éric Araujo <merwok@netwok.org>. (cherry picked from commit fcbe0cb04d35189401c0c880ebfb4311e952d776) Co-authored-by: Adam Goldschmidt <adamgold7@gmail.com> * Update correct version information. * fix docs and make logic clearer Co-authored-by: Adam Goldschmidt <adamgold7@gmail.com> Co-authored-by: Fidget-Spinner <28750310+Fidget-Spinner@users.noreply.github.com>
* bpo-34226: fix cgi.parse_multipart without content_length (GH-8530)Miss Islington (bot)2020-06-151-0/+14
| | | | | | | | | | | | In Python 3.7 the behavior of parse_multipart changed requiring CONTENT-LENGTH header, this fix remove this header as required and fix FieldStorage read_lines_to_outerboundary, by not using limit when it's negative, since by default it's -1 if not content-length and keeps substracting what was read from the file object. Also added a test case for this problem. (cherry picked from commit d8cf3514dd4682419a66f6e834bb384ee34afc95) Co-authored-by: roger <rogerduran@gmail.com>
* bpo-20504 : in cgi.py, fix bug when a multipart/form-data request has… ↵Miss Islington (bot)2019-09-111-0/+17
| | | | | | | | | | | | | | (GH-10638) * bpo-20504 : in cgi.py, fix bug when a multipart/form-data request has no content-length header * Add Misc/NEWS.d/next file. * Add rst formatting for NEWS.d/next file * Reaplce assert by self.assertEqual (cherry picked from commit 2d7cacacc310b65b43e7e2de89e7722291dea6a4) Co-authored-by: Pierre Quentel <pierre.quentel@gmail.com>
* Remove unused imports in tests (GH-14518) (GH-14520)Victor Stinner2019-07-011-1/+0
| | | (cherry picked from commit 8f4ef3b019ce380022018587571b0f970e668de3)
* bpo-35028: cgi: Fix max_num_fields off by one error (GH-9973)matthewbelisle-wf2018-10-231-7/+12
| | | https://bugs.python.org/issue35028
* bpo-34866: Adding max_num_fields to cgi.FieldStorage (GH-9660)matthewbelisle-wf2018-10-191-0/+49
| | | | Adding `max_num_fields` to `cgi.FieldStorage` to make DOS attacks harder by limiting the number of `MiniFieldStorage` objects created by `FieldStorage`.
* bpo-33843: Remove deprecated stuff in cgi module (GH-7662)INADA Naoki2018-06-191-24/+0
|
* bpo-33497: Add errors param to cgi.parse_multipart and make an encoding in ↵Amber Brown2018-05-141-0/+18
| | | | FieldStorage use the given errors (GH-6804)
* bpo-29979: Rewrite cgi.parse_multipart to make it consistent with ↵Pierre Quentel2017-05-081-2/+2
| | | | FieldStorage (#991)
* #27364: fix "incorrect" uses of escape character in the stdlib.R David Murray2016-09-081-1/+1
| | | | | | | And most of the tools. Patch by Emanual Barry, reviewed by me, Serhiy Storchaka, and Martin Panter.
* Issue #27105: Add cgi.test() to __all__, based on Jacek Kołodziej’s patchMartin Panter2016-06-061-0/+6
|
* (Merge 3.4) cgi.FieldStorage.read_multi ignores Content-LengthVictor Stinner2015-08-181-0/+18
|\ | | | | | | | | | | Issue #24764: cgi.FieldStorage.read_multi() now ignores the Content-Length header in part headers. Patch written by Peter Landry and reviewed by Pierre Quentel.
| * cgi.FieldStorage.read_multi ignores Content-LengthVictor Stinner2015-08-181-0/+19
| | | | | | | | | | | | Issue #24764: cgi.FieldStorage.read_multi() now ignores the Content-Length header in part headers. Patch written by Peter Landry and reviewed by Pierre Quentel.
* | merge 3.4 (#23801)Benjamin Peterson2015-03-291-0/+19
|\ \ | |/
| * Closes #23801 - Ignore entire preamble to multipart in cgi.FieldStorageDonald Stufft2015-03-291-0/+19
| |
* | Use os.devnull instead of hardcoded '/dev/null'.Serhiy Storchaka2015-02-151-2/+2
|\ \ | |/
| * Use os.devnull instead of hardcoded '/dev/null'.Serhiy Storchaka2015-02-151-2/+2
| |
* | Issue #20289: cgi.FieldStorage() now supports the context management protocol.Berker Peksag2015-02-061-6/+13
|/
* Issue #20555: Use specific asserts in urllib, httplib, ftplib, cgi, wsgiref ↵Serhiy Storchaka2014-02-081-1/+1
| | | | tests.
* Issue #19092 - Raise a correct exception when cgi.FieldStorage is given anSenthil Kumaran2014-01-121-0/+7
| | | | | invalid file-obj. Also use __bool__ to determine the bool of the FieldStorage object.
* Issue #18013: Fix cgi.FieldStorage to parse the W3C sample form.Florent Xicluna2013-07-071-0/+46
|
* Issue #18167: cgi.FieldStorage no more fails to handle multipart/form-dataSerhiy Storchaka2013-06-171-0/+23
| | | | when \r\n appears at end of 65535 bytes without other newlines.
* merge from 3.2Senthil Kumaran2013-01-231-0/+18
|\ | | | | | | | | Issue #12411: Fix to cgi.parse_multipart to correctly use bytes boundaries and bytes data. Patch by Jonas Wagner.
| * Issue #12411: Fix to cgi.parse_multipart to correctly use bytes boundaries andSenthil Kumaran2013-01-231-1/+20
| | | | | | | | bytes data. Patch by Jonas Wagner.
* | Silence DeprecationWarning for cgi.escape() usage in test_cgi.Brett Cannon2012-04-261-3/+8
| |
* | merge to 3.3 - Fix closes Issue14281 - Test for cgi.escape by Brian LandersSenthil Kumaran2012-03-131-0/+5
|\ \ | |/
| * 3.2 - Fix closes Issue14281 - Test for cgi.escape by Brian LandersSenthil Kumaran2012-03-131-0/+5
| |
* | default - Fix closes Issue12529 - cgi.parse_header failure on double quotes andSenthil Kumaran2011-10-191-0/+4
|\ \ | |/ | | | | semicolons. Patch by Ben Darnell and Petri Lehtinen.
| * 3.2 - Fix closes Issue12529 - cgi.parse_header failure on double quotes andSenthil Kumaran2011-10-191-0/+4
| | | | | | | | semicolons. Patch by Ben Darnell and Petri Lehtinen.
* | Add cgi.closelog() function to close the log fileVictor Stinner2011-07-141-7/+1
|/
* Restore the global state of the log vars, so that test_cgi can be run twice ↵Ezio Melotti2011-07-141-1/+7
| | | | without failures.
* Merged revisions 88700 via svnmerge fromVictor Stinner2011-03-011-24/+51
| | | | | | | | | | | | svn+ssh://pythondev@svn.python.org/python/branches/py3k ........ r88700 | victor.stinner | 2011-03-02 00:08:36 +0100 (mer., 02 mars 2011) | 3 lines Issue #10911: Add tests on CGI with non-ASCII characters Patch written by Pierre Quentel ........
* Merged revisions 88496 via svnmerge fromBrett Cannon2011-02-221-0/+1
| | | | | | | | | | | | svn+ssh://pythondev@svn.python.org/python/branches/py3k ........ r88496 | brett.cannon | 2011-02-21 19:14:12 -0800 (Mon, 21 Feb 2011) | 4 lines Issue #10512: close the log file in cgi when running tests. Thanks to Nadeem Vawda for the find and an initial fix. ........
* Issue #4953: cgi.FieldStorage and cgi.parse() parse the request as bytes, notVictor Stinner2011-01-141-16/+17
| | | | | as unicode, and accept binary files. Add encoding and errors attributes to cgi.FieldStorage.
* Use assertCountEqual instead of assertItemsEqualEzio Melotti2010-11-291-1/+1
|
* #9424: Replace deprecated assert* methods in the Python test suite.Ezio Melotti2010-11-201-2/+2
|
* close files properlyBenjamin Peterson2010-10-301-0/+2
|
* Issue 7832. Document changes to unittest.TestCase.assertSameElements and ↵Michael Foord2010-03-201-1/+1
| | | | assertItemsEqual
* Merged revisions 79030-79032 via svnmerge fromFlorent Xicluna2010-03-171-18/+9
| | | | | | | | | | | | | | | | | | svn+ssh://pythondev@svn.python.org/python/trunk ........ r79030 | florent.xicluna | 2010-03-17 20:05:04 +0100 (mer, 17 mar 2010) | 2 lines Cleanup in test_import and test_coding. ........ r79031 | florent.xicluna | 2010-03-17 20:15:56 +0100 (mer, 17 mar 2010) | 2 lines Cleanup some test cases using check_warnings and check_py3k_warnings. ........ r79032 | florent.xicluna | 2010-03-17 21:05:11 +0100 (mer, 17 mar 2010) | 2 lines Fix and check cgi module deprecation warnings. Revert an unwanted rename in test_import. ........
* use assert[Not]In where appropriateBenjamin Peterson2010-01-191-1/+1
| | | | A patch from Dave Malcolm.
* convert old fail* assertions to assert*Benjamin Peterson2009-06-301-2/+2
|
* Merged revisions 67528 via svnmerge fromFred Drake2008-12-041-0/+27
| | | | | | | | | | | | svn+ssh://pythondev@svn.python.org/python/trunk ........ r67528 | fred.drake | 2008-12-04 13:25:17 -0500 (Thu, 04 Dec 2008) | 4 lines Issue #1055234: cgi.parse_header(): Fixed parsing of header parameters to support unusual filenames (such as those containing semi-colons) in Content-Disposition headers. ........
* Added a warning filter to don't show the warning duringFacundo Batista2008-09-091-4/+13
| | | | the tests. Also fixed the warning message in cgi.py
* Added sanity checks for the deprecated parse_qs() andFacundo Batista2008-09-081-0/+10
| | | | parse_qsl() functions in cgi module.
* Issue 600362: Relocated parse_qs() and parse_qsl(), from the cgi moduleFacundo Batista2008-09-031-24/+0
| | | | | to the urlparse one. Added a DeprecationWarning in the old module, it will be deprecated in the future. Docs and tests updated.
* - Issue #3300: make urllib.parse.[un]quote() default to UTF-8.Guido van Rossum2008-08-181-0/+2
| | | | | | | | Code contributed by Matt Giuca. quote() now encodes the input before quoting, unquote() decodes after unquoting. There are new arguments to change the encoding and errors settings. There are also new APIs to skip the encode/decode steps. [un]quote_plus() are also affected.
* Merged revisions ↵Benjamin Peterson2008-07-021-0/+87
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 64434-64435,64440-64443,64445,64447-64448,64450,64452,64455,64461,64464,64466,64468 via svnmerge from svn+ssh://pythondev@svn.python.org/python/trunk ........ r64434 | andrew.kuchling | 2008-06-20 18:13:58 -0500 (Fri, 20 Jun 2008) | 1 line Remove request for e-mail; it's unlikely these classes will be saved ........ r64435 | andrew.kuchling | 2008-06-20 18:14:32 -0500 (Fri, 20 Jun 2008) | 1 line Grammar fixes ........ r64440 | andrew.kuchling | 2008-06-21 08:29:12 -0500 (Sat, 21 Jun 2008) | 1 line Docstring typo ........ r64441 | andrew.kuchling | 2008-06-21 08:47:20 -0500 (Sat, 21 Jun 2008) | 1 line Use repr() for bad input strings; this makes the empty string or binary characters more visible ........ r64442 | andrew.kuchling | 2008-06-21 08:48:38 -0500 (Sat, 21 Jun 2008) | 1 line Docstring correction ........ r64443 | georg.brandl | 2008-06-21 09:26:19 -0500 (Sat, 21 Jun 2008) | 2 lines Documentation fix. ........ r64445 | facundo.batista | 2008-06-21 12:30:06 -0500 (Sat, 21 Jun 2008) | 3 lines Reviewed and updated the documentation. Fixes #3017. ........ r64447 | facundo.batista | 2008-06-21 13:58:04 -0500 (Sat, 21 Jun 2008) | 6 lines Now a from submitted via POST that also has a query string will contain both FieldStorage and MiniFieldStorage items. Fixes #1817. ........ r64448 | facundo.batista | 2008-06-21 14:48:19 -0500 (Sat, 21 Jun 2008) | 5 lines In the deprecated functions I added an alert to review specially a section of the subprocess documentation that helps with the replacing of those functionss. ........ r64450 | georg.brandl | 2008-06-22 04:05:29 -0500 (Sun, 22 Jun 2008) | 2 lines Turn section references into proper cross-references. ........ r64452 | facundo.batista | 2008-06-22 08:36:20 -0500 (Sun, 22 Jun 2008) | 5 lines Issue #2722. Now the char buffer to support the path string has not fixed length, it mallocs memory if needed. As a result, we don't have a maximum for the getcwd() method. ........ r64455 | facundo.batista | 2008-06-22 10:27:10 -0500 (Sun, 22 Jun 2008) | 4 lines Issue 3164. Small fix to don't repeat a comparation without necessity. ........ r64461 | georg.brandl | 2008-06-22 13:11:52 -0500 (Sun, 22 Jun 2008) | 2 lines #3085: Fix syntax error. ........ r64464 | georg.brandl | 2008-06-22 13:31:54 -0500 (Sun, 22 Jun 2008) | 2 lines Expand docstrings of sqlite3 functions. ........ r64466 | georg.brandl | 2008-06-22 14:07:59 -0500 (Sun, 22 Jun 2008) | 2 lines Write out "phi" consistently. ........ r64468 | facundo.batista | 2008-06-22 14:35:24 -0500 (Sun, 22 Jun 2008) | 4 lines Just returning nothing instead of rising TestSkipped, because it makes the test fail in the trunk.loewis-sun buildbot. ........
* Patch by Humberto Diogenes for issue 2849, removing rfc822 module fromBarry Warsaw2008-06-121-1/+1
| | | | | | | the standard library. There are still a few cases of it in Demo and Tools, but that's fine for now. These should eventually get cleaned up. mimetools still has an import of rfc822, but mimetools itself should go away.
* #2621 rename test.test_support to test.supportBenjamin Peterson2008-05-201-1/+1
|
* Remove old backwards-compatibility classes from the cgi module.Georg Brandl2008-05-111-38/+4
|
generated by cgit v0.12 at 2025-01-07 20:44:13 (GMT)