volochay/thisORthat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

Some bugfix in CI

Browse Source
This commit is contained in:
IgorVolochay
2026-08-27 11:03:02 +03:00
parent 7566c4dcc8
commit fd70dc11b5
1 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/tests/test_security.py
+5 -5
View File
@@ -351,7 +351,7 @@ class TestAutoIPBan:
After auto_ban_threshold (3) suspicious requests, the IP should be banned. After auto_ban_threshold (3) suspicious requests, the IP should be banned.
Subsequent requests (even legitimate ones) should return 403. Subsequent requests (even legitimate ones) should return 403.
""" """
async with AsyncClient(transport=ASGITransport(app=app, client=("127.0.0.1", 50000)), base_url="http://test") as client: async with AsyncClient(transport=ASGITransport(app=app, client=("7.214.201.94", 50000)), base_url="http://test") as client:
# Send suspicious requests sequentially (SQL injection variants) # Send suspicious requests sequentially (SQL injection variants)
injection_payloads = [ injection_payloads = [
"1' OR '1'='1", "1' OR '1'='1",
@@ -387,7 +387,7 @@ class TestAutoIPBan:
""" """
If IP is banned, all endpoints should return 403. If IP is banned, all endpoints should return 403.
""" """
async with AsyncClient(transport=ASGITransport(app=app, client=("127.0.0.1", 50000)), base_url="http://test") as client: async with AsyncClient(transport=ASGITransport(app=app, client=("7.214.201.94", 50000)), base_url="http://test") as client:
# Send various attacks to guarantee hitting the threshold # Send various attacks to guarantee hitting the threshold
attacks = [ attacks = [
"1' OR '1'='1; --", "1' OR '1'='1; --",
@@ -425,7 +425,7 @@ class TestAutoIPBan:
@pytest.mark.asyncio(loop_scope="session") @pytest.mark.asyncio(loop_scope="session")
async def test_banned_ip_message(self): async def test_banned_ip_message(self):
"""Banned IP should receive 'IP address banned' message.""" """Banned IP should receive 'IP address banned' message."""
async with AsyncClient(transport=ASGITransport(app=app, client=("127.0.0.1", 50000)), base_url="http://test") as client: async with AsyncClient(transport=ASGITransport(app=app, client=("7.214.201.94", 50000)), base_url="http://test") as client:
attacks = [ attacks = [
"1' OR '1'='1; --", "1' OR '1'='1; --",
"1; DROP TABLE cards; --", "1; DROP TABLE cards; --",
@@ -454,7 +454,7 @@ class TestSuspiciousHeaders:
@pytest.mark.asyncio(loop_scope="session") @pytest.mark.asyncio(loop_scope="session")
async def test_suspicious_user_agent(self): async def test_suspicious_user_agent(self):
"""Request with suspicious User-Agent may be blocked.""" """Request with suspicious User-Agent may be blocked."""
async with AsyncClient(transport=ASGITransport(app=app, client=("127.0.0.1", 50000)), base_url="http://test") as client: async with AsyncClient(transport=ASGITransport(app=app, client=("7.214.201.94", 50000)), base_url="http://test") as client:
resp = await client.get( resp = await client.get(
"/check_user", "/check_user",
params={"user_id": 1}, params={"user_id": 1},
@@ -470,7 +470,7 @@ class TestSuspiciousHeaders:
@pytest.mark.asyncio(loop_scope="session") @pytest.mark.asyncio(loop_scope="session")
async def test_xss_in_headers(self): async def test_xss_in_headers(self):
"""XSS attack via custom headers.""" """XSS attack via custom headers."""
async with AsyncClient(transport=ASGITransport(app=app, client=("127.0.0.1", 50000)), base_url="http://test") as client: async with AsyncClient(transport=ASGITransport(app=app, client=("7.214.201.94", 50000)), base_url="http://test") as client:
resp = await client.get( resp = await client.get(
"/check_user", "/check_user",
params={"user_id": 1}, params={"user_id": 1},