valitydev/redash
14
0
Fork 0
mirror of https://github.com/valitydev/redash.git synced 2024-11-07 01:25:16 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

add tests for comment attacks

Browse Source
This commit is contained in:
Omer Lachish 2018-11-21 13:52:08 +02:00
parent 14860f6a8b
commit ef8839aafa
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
tests/test_utils.py
View File

@ -88,4 +88,8 @@ class TestSQLQuery(TestCase):
self.assertFalse(query.is_safe())
def test_marks_comment_attacks_as_not_safe(self):
query = SQLQuery("SELECT * FROM users WHERE username='{{username}}' AND password='{{password}}'")
query.apply({"username": "admin' --"})
self.assertFalse(query.is_safe())