tests.py 30 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787
  1. import copy
  2. import json
  3. import os
  4. import pickle
  5. import unittest
  6. import uuid
  7. from django.core.exceptions import DisallowedRedirect
  8. from django.core.serializers.json import DjangoJSONEncoder
  9. from django.core.signals import request_finished
  10. from django.db import close_old_connections
  11. from django.http import (
  12. BadHeaderError, HttpResponse, HttpResponseNotAllowed,
  13. HttpResponseNotModified, HttpResponsePermanentRedirect,
  14. HttpResponseRedirect, JsonResponse, QueryDict, SimpleCookie,
  15. StreamingHttpResponse, parse_cookie,
  16. )
  17. from django.test import SimpleTestCase
  18. from django.utils.functional import lazystr
  19. class QueryDictTests(SimpleTestCase):
  20. def test_create_with_no_args(self):
  21. self.assertEqual(QueryDict(), QueryDict(''))
  22. def test_missing_key(self):
  23. q = QueryDict()
  24. with self.assertRaises(KeyError):
  25. q.__getitem__('foo')
  26. def test_immutability(self):
  27. q = QueryDict()
  28. with self.assertRaises(AttributeError):
  29. q.__setitem__('something', 'bar')
  30. with self.assertRaises(AttributeError):
  31. q.setlist('foo', ['bar'])
  32. with self.assertRaises(AttributeError):
  33. q.appendlist('foo', ['bar'])
  34. with self.assertRaises(AttributeError):
  35. q.update({'foo': 'bar'})
  36. with self.assertRaises(AttributeError):
  37. q.pop('foo')
  38. with self.assertRaises(AttributeError):
  39. q.popitem()
  40. with self.assertRaises(AttributeError):
  41. q.clear()
  42. def test_immutable_get_with_default(self):
  43. q = QueryDict()
  44. self.assertEqual(q.get('foo', 'default'), 'default')
  45. def test_immutable_basic_operations(self):
  46. q = QueryDict()
  47. self.assertEqual(q.getlist('foo'), [])
  48. self.assertNotIn('foo', q)
  49. self.assertEqual(list(q), [])
  50. self.assertEqual(list(q.items()), [])
  51. self.assertEqual(list(q.lists()), [])
  52. self.assertEqual(list(q.keys()), [])
  53. self.assertEqual(list(q.values()), [])
  54. self.assertEqual(len(q), 0)
  55. self.assertEqual(q.urlencode(), '')
  56. def test_single_key_value(self):
  57. """Test QueryDict with one key/value pair"""
  58. q = QueryDict('foo=bar')
  59. self.assertEqual(q['foo'], 'bar')
  60. with self.assertRaises(KeyError):
  61. q.__getitem__('bar')
  62. with self.assertRaises(AttributeError):
  63. q.__setitem__('something', 'bar')
  64. self.assertEqual(q.get('foo', 'default'), 'bar')
  65. self.assertEqual(q.get('bar', 'default'), 'default')
  66. self.assertEqual(q.getlist('foo'), ['bar'])
  67. self.assertEqual(q.getlist('bar'), [])
  68. with self.assertRaises(AttributeError):
  69. q.setlist('foo', ['bar'])
  70. with self.assertRaises(AttributeError):
  71. q.appendlist('foo', ['bar'])
  72. self.assertIn('foo', q)
  73. self.assertNotIn('bar', q)
  74. self.assertEqual(list(q), ['foo'])
  75. self.assertEqual(list(q.items()), [('foo', 'bar')])
  76. self.assertEqual(list(q.lists()), [('foo', ['bar'])])
  77. self.assertEqual(list(q.keys()), ['foo'])
  78. self.assertEqual(list(q.values()), ['bar'])
  79. self.assertEqual(len(q), 1)
  80. with self.assertRaises(AttributeError):
  81. q.update({'foo': 'bar'})
  82. with self.assertRaises(AttributeError):
  83. q.pop('foo')
  84. with self.assertRaises(AttributeError):
  85. q.popitem()
  86. with self.assertRaises(AttributeError):
  87. q.clear()
  88. with self.assertRaises(AttributeError):
  89. q.setdefault('foo', 'bar')
  90. self.assertEqual(q.urlencode(), 'foo=bar')
  91. def test_urlencode(self):
  92. q = QueryDict(mutable=True)
  93. q['next'] = '/a&b/'
  94. self.assertEqual(q.urlencode(), 'next=%2Fa%26b%2F')
  95. self.assertEqual(q.urlencode(safe='/'), 'next=/a%26b/')
  96. q = QueryDict(mutable=True)
  97. q['next'] = '/t\xebst&key/'
  98. self.assertEqual(q.urlencode(), 'next=%2Ft%C3%ABst%26key%2F')
  99. self.assertEqual(q.urlencode(safe='/'), 'next=/t%C3%ABst%26key/')
  100. def test_urlencode_int(self):
  101. # Normally QueryDict doesn't contain non-string values but lazily
  102. # written tests may make that mistake.
  103. q = QueryDict(mutable=True)
  104. q['a'] = 1
  105. self.assertEqual(q.urlencode(), 'a=1')
  106. def test_mutable_copy(self):
  107. """A copy of a QueryDict is mutable."""
  108. q = QueryDict().copy()
  109. with self.assertRaises(KeyError):
  110. q.__getitem__("foo")
  111. q['name'] = 'john'
  112. self.assertEqual(q['name'], 'john')
  113. def test_mutable_delete(self):
  114. q = QueryDict(mutable=True)
  115. q['name'] = 'john'
  116. del q['name']
  117. self.assertNotIn('name', q)
  118. def test_basic_mutable_operations(self):
  119. q = QueryDict(mutable=True)
  120. q['name'] = 'john'
  121. self.assertEqual(q.get('foo', 'default'), 'default')
  122. self.assertEqual(q.get('name', 'default'), 'john')
  123. self.assertEqual(q.getlist('name'), ['john'])
  124. self.assertEqual(q.getlist('foo'), [])
  125. q.setlist('foo', ['bar', 'baz'])
  126. self.assertEqual(q.get('foo', 'default'), 'baz')
  127. self.assertEqual(q.getlist('foo'), ['bar', 'baz'])
  128. q.appendlist('foo', 'another')
  129. self.assertEqual(q.getlist('foo'), ['bar', 'baz', 'another'])
  130. self.assertEqual(q['foo'], 'another')
  131. self.assertIn('foo', q)
  132. self.assertCountEqual(q, ['foo', 'name'])
  133. self.assertCountEqual(q.items(), [('foo', 'another'), ('name', 'john')])
  134. self.assertCountEqual(q.lists(), [('foo', ['bar', 'baz', 'another']), ('name', ['john'])])
  135. self.assertCountEqual(q.keys(), ['foo', 'name'])
  136. self.assertCountEqual(q.values(), ['another', 'john'])
  137. q.update({'foo': 'hello'})
  138. self.assertEqual(q['foo'], 'hello')
  139. self.assertEqual(q.get('foo', 'not available'), 'hello')
  140. self.assertEqual(q.getlist('foo'), ['bar', 'baz', 'another', 'hello'])
  141. self.assertEqual(q.pop('foo'), ['bar', 'baz', 'another', 'hello'])
  142. self.assertEqual(q.pop('foo', 'not there'), 'not there')
  143. self.assertEqual(q.get('foo', 'not there'), 'not there')
  144. self.assertEqual(q.setdefault('foo', 'bar'), 'bar')
  145. self.assertEqual(q['foo'], 'bar')
  146. self.assertEqual(q.getlist('foo'), ['bar'])
  147. self.assertIn(q.urlencode(), ['foo=bar&name=john', 'name=john&foo=bar'])
  148. q.clear()
  149. self.assertEqual(len(q), 0)
  150. def test_multiple_keys(self):
  151. """Test QueryDict with two key/value pairs with same keys."""
  152. q = QueryDict('vote=yes&vote=no')
  153. self.assertEqual(q['vote'], 'no')
  154. with self.assertRaises(AttributeError):
  155. q.__setitem__('something', 'bar')
  156. self.assertEqual(q.get('vote', 'default'), 'no')
  157. self.assertEqual(q.get('foo', 'default'), 'default')
  158. self.assertEqual(q.getlist('vote'), ['yes', 'no'])
  159. self.assertEqual(q.getlist('foo'), [])
  160. with self.assertRaises(AttributeError):
  161. q.setlist('foo', ['bar', 'baz'])
  162. with self.assertRaises(AttributeError):
  163. q.setlist('foo', ['bar', 'baz'])
  164. with self.assertRaises(AttributeError):
  165. q.appendlist('foo', ['bar'])
  166. self.assertIn('vote', q)
  167. self.assertNotIn('foo', q)
  168. self.assertEqual(list(q), ['vote'])
  169. self.assertEqual(list(q.items()), [('vote', 'no')])
  170. self.assertEqual(list(q.lists()), [('vote', ['yes', 'no'])])
  171. self.assertEqual(list(q.keys()), ['vote'])
  172. self.assertEqual(list(q.values()), ['no'])
  173. self.assertEqual(len(q), 1)
  174. with self.assertRaises(AttributeError):
  175. q.update({'foo': 'bar'})
  176. with self.assertRaises(AttributeError):
  177. q.pop('foo')
  178. with self.assertRaises(AttributeError):
  179. q.popitem()
  180. with self.assertRaises(AttributeError):
  181. q.clear()
  182. with self.assertRaises(AttributeError):
  183. q.setdefault('foo', 'bar')
  184. with self.assertRaises(AttributeError):
  185. q.__delitem__('vote')
  186. def test_pickle(self):
  187. q = QueryDict()
  188. q1 = pickle.loads(pickle.dumps(q, 2))
  189. self.assertEqual(q, q1)
  190. q = QueryDict('a=b&c=d')
  191. q1 = pickle.loads(pickle.dumps(q, 2))
  192. self.assertEqual(q, q1)
  193. q = QueryDict('a=b&c=d&a=1')
  194. q1 = pickle.loads(pickle.dumps(q, 2))
  195. self.assertEqual(q, q1)
  196. def test_update_from_querydict(self):
  197. """Regression test for #8278: QueryDict.update(QueryDict)"""
  198. x = QueryDict("a=1&a=2", mutable=True)
  199. y = QueryDict("a=3&a=4")
  200. x.update(y)
  201. self.assertEqual(x.getlist('a'), ['1', '2', '3', '4'])
  202. def test_non_default_encoding(self):
  203. """#13572 - QueryDict with a non-default encoding"""
  204. q = QueryDict('cur=%A4', encoding='iso-8859-15')
  205. self.assertEqual(q.encoding, 'iso-8859-15')
  206. self.assertEqual(list(q.items()), [('cur', '€')])
  207. self.assertEqual(q.urlencode(), 'cur=%A4')
  208. q = q.copy()
  209. self.assertEqual(q.encoding, 'iso-8859-15')
  210. self.assertEqual(list(q.items()), [('cur', '€')])
  211. self.assertEqual(q.urlencode(), 'cur=%A4')
  212. self.assertEqual(copy.copy(q).encoding, 'iso-8859-15')
  213. self.assertEqual(copy.deepcopy(q).encoding, 'iso-8859-15')
  214. def test_querydict_fromkeys(self):
  215. self.assertEqual(QueryDict.fromkeys(['key1', 'key2', 'key3']), QueryDict('key1&key2&key3'))
  216. def test_fromkeys_with_nonempty_value(self):
  217. self.assertEqual(
  218. QueryDict.fromkeys(['key1', 'key2', 'key3'], value='val'),
  219. QueryDict('key1=val&key2=val&key3=val')
  220. )
  221. def test_fromkeys_is_immutable_by_default(self):
  222. # Match behavior of __init__() which is also immutable by default.
  223. q = QueryDict.fromkeys(['key1', 'key2', 'key3'])
  224. with self.assertRaisesMessage(AttributeError, 'This QueryDict instance is immutable'):
  225. q['key4'] = 'nope'
  226. def test_fromkeys_mutable_override(self):
  227. q = QueryDict.fromkeys(['key1', 'key2', 'key3'], mutable=True)
  228. q['key4'] = 'yep'
  229. self.assertEqual(q, QueryDict('key1&key2&key3&key4=yep'))
  230. def test_duplicates_in_fromkeys_iterable(self):
  231. self.assertEqual(QueryDict.fromkeys('xyzzy'), QueryDict('x&y&z&z&y'))
  232. def test_fromkeys_with_nondefault_encoding(self):
  233. key_utf16 = b'\xff\xfe\x8e\x02\xdd\x01\x9e\x02'
  234. value_utf16 = b'\xff\xfe\xdd\x01n\x00l\x00P\x02\x8c\x02'
  235. q = QueryDict.fromkeys([key_utf16], value=value_utf16, encoding='utf-16')
  236. expected = QueryDict('', mutable=True)
  237. expected['ʎǝʞ'] = 'ǝnlɐʌ'
  238. self.assertEqual(q, expected)
  239. def test_fromkeys_empty_iterable(self):
  240. self.assertEqual(QueryDict.fromkeys([]), QueryDict(''))
  241. def test_fromkeys_noniterable(self):
  242. with self.assertRaises(TypeError):
  243. QueryDict.fromkeys(0)
  244. class HttpResponseTests(unittest.TestCase):
  245. def test_headers_type(self):
  246. r = HttpResponse()
  247. # ASCII strings or bytes values are converted to strings.
  248. r['key'] = 'test'
  249. self.assertEqual(r['key'], 'test')
  250. r['key'] = b'test'
  251. self.assertEqual(r['key'], 'test')
  252. self.assertIn(b'test', r.serialize_headers())
  253. # Non-ASCII values are serialized to Latin-1.
  254. r['key'] = 'café'
  255. self.assertIn('café'.encode('latin-1'), r.serialize_headers())
  256. # Other Unicode values are MIME-encoded (there's no way to pass them as
  257. # bytes).
  258. r['key'] = '†'
  259. self.assertEqual(r['key'], '=?utf-8?b?4oCg?=')
  260. self.assertIn(b'=?utf-8?b?4oCg?=', r.serialize_headers())
  261. # The response also converts string or bytes keys to strings, but requires
  262. # them to contain ASCII
  263. r = HttpResponse()
  264. del r['Content-Type']
  265. r['foo'] = 'bar'
  266. headers = list(r.items())
  267. self.assertEqual(len(headers), 1)
  268. self.assertEqual(headers[0], ('foo', 'bar'))
  269. r = HttpResponse()
  270. del r['Content-Type']
  271. r[b'foo'] = 'bar'
  272. headers = list(r.items())
  273. self.assertEqual(len(headers), 1)
  274. self.assertEqual(headers[0], ('foo', 'bar'))
  275. self.assertIsInstance(headers[0][0], str)
  276. r = HttpResponse()
  277. with self.assertRaises(UnicodeError):
  278. r.__setitem__('føø', 'bar')
  279. with self.assertRaises(UnicodeError):
  280. r.__setitem__('føø'.encode(), 'bar')
  281. def test_long_line(self):
  282. # Bug #20889: long lines trigger newlines to be added to headers
  283. # (which is not allowed due to bug #10188)
  284. h = HttpResponse()
  285. f = b'zzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz a\xcc\x88'
  286. f = f.decode('utf-8')
  287. h['Content-Disposition'] = 'attachment; filename="%s"' % f
  288. # This one is triggering https://bugs.python.org/issue20747, that is Python
  289. # will itself insert a newline in the header
  290. h['Content-Disposition'] = 'attachment; filename="EdelRot_Blu\u0308te (3)-0.JPG"'
  291. def test_newlines_in_headers(self):
  292. # Bug #10188: Do not allow newlines in headers (CR or LF)
  293. r = HttpResponse()
  294. with self.assertRaises(BadHeaderError):
  295. r.__setitem__('test\rstr', 'test')
  296. with self.assertRaises(BadHeaderError):
  297. r.__setitem__('test\nstr', 'test')
  298. def test_dict_behavior(self):
  299. """
  300. Test for bug #14020: Make HttpResponse.get work like dict.get
  301. """
  302. r = HttpResponse()
  303. self.assertIsNone(r.get('test'))
  304. def test_non_string_content(self):
  305. # Bug 16494: HttpResponse should behave consistently with non-strings
  306. r = HttpResponse(12345)
  307. self.assertEqual(r.content, b'12345')
  308. # test content via property
  309. r = HttpResponse()
  310. r.content = 12345
  311. self.assertEqual(r.content, b'12345')
  312. def test_memoryview_content(self):
  313. r = HttpResponse(memoryview(b'memoryview'))
  314. self.assertEqual(r.content, b'memoryview')
  315. def test_iter_content(self):
  316. r = HttpResponse(['abc', 'def', 'ghi'])
  317. self.assertEqual(r.content, b'abcdefghi')
  318. # test iter content via property
  319. r = HttpResponse()
  320. r.content = ['idan', 'alex', 'jacob']
  321. self.assertEqual(r.content, b'idanalexjacob')
  322. r = HttpResponse()
  323. r.content = [1, 2, 3]
  324. self.assertEqual(r.content, b'123')
  325. # test odd inputs
  326. r = HttpResponse()
  327. r.content = ['1', '2', 3, '\u079e']
  328. # '\xde\x9e' == unichr(1950).encode()
  329. self.assertEqual(r.content, b'123\xde\x9e')
  330. # .content can safely be accessed multiple times.
  331. r = HttpResponse(iter(['hello', 'world']))
  332. self.assertEqual(r.content, r.content)
  333. self.assertEqual(r.content, b'helloworld')
  334. # __iter__ can safely be called multiple times (#20187).
  335. self.assertEqual(b''.join(r), b'helloworld')
  336. self.assertEqual(b''.join(r), b'helloworld')
  337. # Accessing .content still works.
  338. self.assertEqual(r.content, b'helloworld')
  339. # Accessing .content also works if the response was iterated first.
  340. r = HttpResponse(iter(['hello', 'world']))
  341. self.assertEqual(b''.join(r), b'helloworld')
  342. self.assertEqual(r.content, b'helloworld')
  343. # Additional content can be written to the response.
  344. r = HttpResponse(iter(['hello', 'world']))
  345. self.assertEqual(r.content, b'helloworld')
  346. r.write('!')
  347. self.assertEqual(r.content, b'helloworld!')
  348. def test_iterator_isnt_rewound(self):
  349. # Regression test for #13222
  350. r = HttpResponse('abc')
  351. i = iter(r)
  352. self.assertEqual(list(i), [b'abc'])
  353. self.assertEqual(list(i), [])
  354. def test_lazy_content(self):
  355. r = HttpResponse(lazystr('helloworld'))
  356. self.assertEqual(r.content, b'helloworld')
  357. def test_file_interface(self):
  358. r = HttpResponse()
  359. r.write(b"hello")
  360. self.assertEqual(r.tell(), 5)
  361. r.write("привет")
  362. self.assertEqual(r.tell(), 17)
  363. r = HttpResponse(['abc'])
  364. r.write('def')
  365. self.assertEqual(r.tell(), 6)
  366. self.assertEqual(r.content, b'abcdef')
  367. # with Content-Encoding header
  368. r = HttpResponse()
  369. r['Content-Encoding'] = 'winning'
  370. r.write(b'abc')
  371. r.write(b'def')
  372. self.assertEqual(r.content, b'abcdef')
  373. def test_stream_interface(self):
  374. r = HttpResponse('asdf')
  375. self.assertEqual(r.getvalue(), b'asdf')
  376. r = HttpResponse()
  377. self.assertIs(r.writable(), True)
  378. r.writelines(['foo\n', 'bar\n', 'baz\n'])
  379. self.assertEqual(r.content, b'foo\nbar\nbaz\n')
  380. def test_unsafe_redirect(self):
  381. bad_urls = [
  382. 'data:text/html,<script>window.alert("xss")</script>',
  383. 'mailto:test@example.com',
  384. 'file:///etc/passwd',
  385. ]
  386. for url in bad_urls:
  387. with self.assertRaises(DisallowedRedirect):
  388. HttpResponseRedirect(url)
  389. with self.assertRaises(DisallowedRedirect):
  390. HttpResponsePermanentRedirect(url)
  391. class HttpResponseSubclassesTests(SimpleTestCase):
  392. def test_redirect(self):
  393. response = HttpResponseRedirect('/redirected/')
  394. self.assertEqual(response.status_code, 302)
  395. # Standard HttpResponse init args can be used
  396. response = HttpResponseRedirect(
  397. '/redirected/',
  398. content='The resource has temporarily moved',
  399. content_type='text/html',
  400. )
  401. self.assertContains(response, 'The resource has temporarily moved', status_code=302)
  402. self.assertEqual(response.url, response['Location'])
  403. def test_redirect_lazy(self):
  404. """Make sure HttpResponseRedirect works with lazy strings."""
  405. r = HttpResponseRedirect(lazystr('/redirected/'))
  406. self.assertEqual(r.url, '/redirected/')
  407. def test_redirect_repr(self):
  408. response = HttpResponseRedirect('/redirected/')
  409. expected = '<HttpResponseRedirect status_code=302, "text/html; charset=utf-8", url="/redirected/">'
  410. self.assertEqual(repr(response), expected)
  411. def test_invalid_redirect_repr(self):
  412. """
  413. If HttpResponseRedirect raises DisallowedRedirect, its __repr__()
  414. should work (in the debug view, for example).
  415. """
  416. response = HttpResponseRedirect.__new__(HttpResponseRedirect)
  417. with self.assertRaisesMessage(DisallowedRedirect, "Unsafe redirect to URL with protocol 'ssh'"):
  418. HttpResponseRedirect.__init__(response, 'ssh://foo')
  419. expected = '<HttpResponseRedirect status_code=302, "text/html; charset=utf-8", url="ssh://foo">'
  420. self.assertEqual(repr(response), expected)
  421. def test_not_modified(self):
  422. response = HttpResponseNotModified()
  423. self.assertEqual(response.status_code, 304)
  424. # 304 responses should not have content/content-type
  425. with self.assertRaises(AttributeError):
  426. response.content = "Hello dear"
  427. self.assertNotIn('content-type', response)
  428. def test_not_modified_repr(self):
  429. response = HttpResponseNotModified()
  430. self.assertEqual(repr(response), '<HttpResponseNotModified status_code=304>')
  431. def test_not_allowed(self):
  432. response = HttpResponseNotAllowed(['GET'])
  433. self.assertEqual(response.status_code, 405)
  434. # Standard HttpResponse init args can be used
  435. response = HttpResponseNotAllowed(['GET'], content='Only the GET method is allowed', content_type='text/html')
  436. self.assertContains(response, 'Only the GET method is allowed', status_code=405)
  437. def test_not_allowed_repr(self):
  438. response = HttpResponseNotAllowed(['GET', 'OPTIONS'], content_type='text/plain')
  439. expected = '<HttpResponseNotAllowed [GET, OPTIONS] status_code=405, "text/plain">'
  440. self.assertEqual(repr(response), expected)
  441. def test_not_allowed_repr_no_content_type(self):
  442. response = HttpResponseNotAllowed(('GET', 'POST'))
  443. del response['Content-Type']
  444. self.assertEqual(repr(response), '<HttpResponseNotAllowed [GET, POST] status_code=405>')
  445. class JsonResponseTests(SimpleTestCase):
  446. def test_json_response_non_ascii(self):
  447. data = {'key': 'łóżko'}
  448. response = JsonResponse(data)
  449. self.assertEqual(json.loads(response.content.decode()), data)
  450. def test_json_response_raises_type_error_with_default_setting(self):
  451. with self.assertRaisesMessage(
  452. TypeError,
  453. 'In order to allow non-dict objects to be serialized set the '
  454. 'safe parameter to False'
  455. ):
  456. JsonResponse([1, 2, 3])
  457. def test_json_response_text(self):
  458. response = JsonResponse('foobar', safe=False)
  459. self.assertEqual(json.loads(response.content.decode()), 'foobar')
  460. def test_json_response_list(self):
  461. response = JsonResponse(['foo', 'bar'], safe=False)
  462. self.assertEqual(json.loads(response.content.decode()), ['foo', 'bar'])
  463. def test_json_response_uuid(self):
  464. u = uuid.uuid4()
  465. response = JsonResponse(u, safe=False)
  466. self.assertEqual(json.loads(response.content.decode()), str(u))
  467. def test_json_response_custom_encoder(self):
  468. class CustomDjangoJSONEncoder(DjangoJSONEncoder):
  469. def encode(self, o):
  470. return json.dumps({'foo': 'bar'})
  471. response = JsonResponse({}, encoder=CustomDjangoJSONEncoder)
  472. self.assertEqual(json.loads(response.content.decode()), {'foo': 'bar'})
  473. def test_json_response_passing_arguments_to_json_dumps(self):
  474. response = JsonResponse({'foo': 'bar'}, json_dumps_params={'indent': 2})
  475. self.assertEqual(response.content.decode(), '{\n "foo": "bar"\n}')
  476. class StreamingHttpResponseTests(SimpleTestCase):
  477. def test_streaming_response(self):
  478. r = StreamingHttpResponse(iter(['hello', 'world']))
  479. # iterating over the response itself yields bytestring chunks.
  480. chunks = list(r)
  481. self.assertEqual(chunks, [b'hello', b'world'])
  482. for chunk in chunks:
  483. self.assertIsInstance(chunk, bytes)
  484. # and the response can only be iterated once.
  485. self.assertEqual(list(r), [])
  486. # even when a sequence that can be iterated many times, like a list,
  487. # is given as content.
  488. r = StreamingHttpResponse(['abc', 'def'])
  489. self.assertEqual(list(r), [b'abc', b'def'])
  490. self.assertEqual(list(r), [])
  491. # iterating over strings still yields bytestring chunks.
  492. r.streaming_content = iter(['hello', 'café'])
  493. chunks = list(r)
  494. # '\xc3\xa9' == unichr(233).encode()
  495. self.assertEqual(chunks, [b'hello', b'caf\xc3\xa9'])
  496. for chunk in chunks:
  497. self.assertIsInstance(chunk, bytes)
  498. # streaming responses don't have a `content` attribute.
  499. self.assertFalse(hasattr(r, 'content'))
  500. # and you can't accidentally assign to a `content` attribute.
  501. with self.assertRaises(AttributeError):
  502. r.content = 'xyz'
  503. # but they do have a `streaming_content` attribute.
  504. self.assertTrue(hasattr(r, 'streaming_content'))
  505. # that exists so we can check if a response is streaming, and wrap or
  506. # replace the content iterator.
  507. r.streaming_content = iter(['abc', 'def'])
  508. r.streaming_content = (chunk.upper() for chunk in r.streaming_content)
  509. self.assertEqual(list(r), [b'ABC', b'DEF'])
  510. # coercing a streaming response to bytes doesn't return a complete HTTP
  511. # message like a regular response does. it only gives us the headers.
  512. r = StreamingHttpResponse(iter(['hello', 'world']))
  513. self.assertEqual(bytes(r), b'Content-Type: text/html; charset=utf-8')
  514. # and this won't consume its content.
  515. self.assertEqual(list(r), [b'hello', b'world'])
  516. # additional content cannot be written to the response.
  517. r = StreamingHttpResponse(iter(['hello', 'world']))
  518. with self.assertRaises(Exception):
  519. r.write('!')
  520. # and we can't tell the current position.
  521. with self.assertRaises(Exception):
  522. r.tell()
  523. r = StreamingHttpResponse(iter(['hello', 'world']))
  524. self.assertEqual(r.getvalue(), b'helloworld')
  525. class FileCloseTests(SimpleTestCase):
  526. def setUp(self):
  527. # Disable the request_finished signal during this test
  528. # to avoid interfering with the database connection.
  529. request_finished.disconnect(close_old_connections)
  530. def tearDown(self):
  531. request_finished.connect(close_old_connections)
  532. def test_response(self):
  533. filename = os.path.join(os.path.dirname(__file__), 'abc.txt')
  534. # file isn't closed until we close the response.
  535. file1 = open(filename)
  536. r = HttpResponse(file1)
  537. self.assertTrue(file1.closed)
  538. r.close()
  539. # when multiple file are assigned as content, make sure they are all
  540. # closed with the response.
  541. file1 = open(filename)
  542. file2 = open(filename)
  543. r = HttpResponse(file1)
  544. r.content = file2
  545. self.assertTrue(file1.closed)
  546. self.assertTrue(file2.closed)
  547. def test_streaming_response(self):
  548. filename = os.path.join(os.path.dirname(__file__), 'abc.txt')
  549. # file isn't closed until we close the response.
  550. file1 = open(filename)
  551. r = StreamingHttpResponse(file1)
  552. self.assertFalse(file1.closed)
  553. r.close()
  554. self.assertTrue(file1.closed)
  555. # when multiple file are assigned as content, make sure they are all
  556. # closed with the response.
  557. file1 = open(filename)
  558. file2 = open(filename)
  559. r = StreamingHttpResponse(file1)
  560. r.streaming_content = file2
  561. self.assertFalse(file1.closed)
  562. self.assertFalse(file2.closed)
  563. r.close()
  564. self.assertTrue(file1.closed)
  565. self.assertTrue(file2.closed)
  566. class CookieTests(unittest.TestCase):
  567. def test_encode(self):
  568. """Semicolons and commas are encoded."""
  569. c = SimpleCookie()
  570. c['test'] = "An,awkward;value"
  571. self.assertNotIn(";", c.output().rstrip(';')) # IE compat
  572. self.assertNotIn(",", c.output().rstrip(';')) # Safari compat
  573. def test_decode(self):
  574. """Semicolons and commas are decoded."""
  575. c = SimpleCookie()
  576. c['test'] = "An,awkward;value"
  577. c2 = SimpleCookie()
  578. c2.load(c.output()[12:])
  579. self.assertEqual(c['test'].value, c2['test'].value)
  580. c3 = parse_cookie(c.output()[12:])
  581. self.assertEqual(c['test'].value, c3['test'])
  582. def test_nonstandard_keys(self):
  583. """
  584. A single non-standard cookie name doesn't affect all cookies (#13007).
  585. """
  586. self.assertIn('good_cookie', parse_cookie('good_cookie=yes;bad:cookie=yes'))
  587. def test_repeated_nonstandard_keys(self):
  588. """
  589. A repeated non-standard name doesn't affect all cookies (#15852).
  590. """
  591. self.assertIn('good_cookie', parse_cookie('a:=b; a:=c; good_cookie=yes'))
  592. def test_python_cookies(self):
  593. """
  594. Test cases copied from Python's Lib/test/test_http_cookies.py
  595. """
  596. self.assertEqual(parse_cookie('chips=ahoy; vienna=finger'), {'chips': 'ahoy', 'vienna': 'finger'})
  597. # Here parse_cookie() differs from Python's cookie parsing in that it
  598. # treats all semicolons as delimiters, even within quotes.
  599. self.assertEqual(
  600. parse_cookie('keebler="E=mc2; L=\\"Loves\\"; fudge=\\012;"'),
  601. {'keebler': '"E=mc2', 'L': '\\"Loves\\"', 'fudge': '\\012', '': '"'}
  602. )
  603. # Illegal cookies that have an '=' char in an unquoted value.
  604. self.assertEqual(parse_cookie('keebler=E=mc2'), {'keebler': 'E=mc2'})
  605. # Cookies with ':' character in their name.
  606. self.assertEqual(parse_cookie('key:term=value:term'), {'key:term': 'value:term'})
  607. # Cookies with '[' and ']'.
  608. self.assertEqual(parse_cookie('a=b; c=[; d=r; f=h'), {'a': 'b', 'c': '[', 'd': 'r', 'f': 'h'})
  609. def test_cookie_edgecases(self):
  610. # Cookies that RFC6265 allows.
  611. self.assertEqual(parse_cookie('a=b; Domain=example.com'), {'a': 'b', 'Domain': 'example.com'})
  612. # parse_cookie() has historically kept only the last cookie with the
  613. # same name.
  614. self.assertEqual(parse_cookie('a=b; h=i; a=c'), {'a': 'c', 'h': 'i'})
  615. def test_invalid_cookies(self):
  616. """
  617. Cookie strings that go against RFC6265 but browsers will send if set
  618. via document.cookie.
  619. """
  620. # Chunks without an equals sign appear as unnamed values per
  621. # https://bugzilla.mozilla.org/show_bug.cgi?id=169091
  622. self.assertIn('django_language', parse_cookie('abc=def; unnamed; django_language=en'))
  623. # Even a double quote may be an unnamed value.
  624. self.assertEqual(parse_cookie('a=b; "; c=d'), {'a': 'b', '': '"', 'c': 'd'})
  625. # Spaces in names and values, and an equals sign in values.
  626. self.assertEqual(parse_cookie('a b c=d e = f; gh=i'), {'a b c': 'd e = f', 'gh': 'i'})
  627. # More characters the spec forbids.
  628. self.assertEqual(parse_cookie('a b,c<>@:/[]?{}=d " =e,f g'), {'a b,c<>@:/[]?{}': 'd " =e,f g'})
  629. # Unicode characters. The spec only allows ASCII.
  630. self.assertEqual(parse_cookie('saint=André Bessette'), {'saint': 'André Bessette'})
  631. # Browsers don't send extra whitespace or semicolons in Cookie headers,
  632. # but parse_cookie() should parse whitespace the same way
  633. # document.cookie parses whitespace.
  634. self.assertEqual(parse_cookie(' = b ; ; = ; c = ; '), {'': 'b', 'c': ''})
  635. def test_samesite(self):
  636. c = SimpleCookie('name=value; samesite=lax; httponly')
  637. self.assertEqual(c['name']['samesite'], 'lax')
  638. self.assertIn('SameSite=lax', c.output())
  639. def test_httponly_after_load(self):
  640. c = SimpleCookie()
  641. c.load("name=val")
  642. c['name']['httponly'] = True
  643. self.assertTrue(c['name']['httponly'])
  644. def test_load_dict(self):
  645. c = SimpleCookie()
  646. c.load({'name': 'val'})
  647. self.assertEqual(c['name'].value, 'val')
  648. def test_pickle(self):
  649. rawdata = 'Customer="WILE_E_COYOTE"; Path=/acme; Version=1'
  650. expected_output = 'Set-Cookie: %s' % rawdata
  651. C = SimpleCookie()
  652. C.load(rawdata)
  653. self.assertEqual(C.output(), expected_output)
  654. for proto in range(pickle.HIGHEST_PROTOCOL + 1):
  655. C1 = pickle.loads(pickle.dumps(C, protocol=proto))
  656. self.assertEqual(C1.output(), expected_output)