Skip to content

erp5
erp5
Commit 921507f0 authored by Jérome Perrin's avatar Jérome Perrin
Browse files
Options

testRestrictedPythonSecurity: simplify and normalize multi lines tests 

Always use textwrap.dedent implicitly so that we don't have to do it in
every test and disable the way of making multi lines scripts by passing
multiple arguments. Now there's only one way to do and every tests use the
same way
parent ef4060d7
Hide whitespace changes
Inline Side-by-side
Showing with 372 additions and 357 deletions
bt5/erp5_core_test/TestTemplateItem/portal_components/test.erp5.testRestrictedPythonSecurity.py
View file @ 921507f0
...@@ -51,14 +51,13 @@ class TestRestrictedPythonSecurity(ERP5TypeTestCase): ...@@ -51,14 +51,13 @@ class TestRestrictedPythonSecurity(ERP5TypeTestCase):
func = getattr(self.portal, name) func = getattr(self.portal, name)
return func(**kwargs) return func(**kwargs)
def createAndRunScript(self, *args, **kwargs): def createAndRunScript(self, code, **kwargs):
# we do not care the script name for security test thus use uuid1 # we do not care the script name for security test thus use uuid1
name = str(uuid.uuid1()) name = str(uuid.uuid1())
code = '\n'.join(args)
expected = kwargs.get('expected', None) expected = kwargs.get('expected', None)
script_container = self.portal.portal_skins.custom script_container = self.portal.portal_skins.custom
try: try:
createZODBPythonScript(script_container, name, '**kw', code) createZODBPythonScript(script_container, name, '**kw', textwrap.dedent(code))
if expected: if expected:
self.assertEqual(self.runScript(script_container, name, kwargs.get('kwargs', {})), expected) self.assertEqual(self.runScript(script_container, name, kwargs.get('kwargs', {})), expected)
else: else:
...@@ -72,13 +71,30 @@ class TestRestrictedPythonSecurity(ERP5TypeTestCase): ...@@ -72,13 +71,30 @@ class TestRestrictedPythonSecurity(ERP5TypeTestCase):
and running the Script. and running the Script.
""" """
self.createAndRunScript('import datetime') self.createAndRunScript('import datetime')
self.createAndRunScript('import datetime', 'return datetime.datetime.now()') self.createAndRunScript('''
self.createAndRunScript('import datetime', 'return datetime.time.max') import datetime
self.createAndRunScript('import datetime', 'return datetime.date.today()') return datetime.datetime.now()
self.createAndRunScript('import datetime', 'return datetime.timedelta.min') ''')
self.createAndRunScript('import datetime', 'return datetime.tzinfo') self.createAndRunScript('''
self.createAndRunScript('import datetime', import datetime
"return datetime.datetime.strptime('', '')") return datetime.time.max
''')
self.createAndRunScript('''
import datetime
return datetime.date.today()
''')
self.createAndRunScript('''
import datetime
return datetime.timedelta.min
''')
self.createAndRunScript('''
import datetime
return datetime.tzinfo
''')
self.createAndRunScript('''
import datetime
return datetime.datetime.strptime('', '')
''')
def testDictClassMethod(self): def testDictClassMethod(self):
# This is intended to be allowed from the beggining # This is intended to be allowed from the beggining
...@@ -86,176 +102,193 @@ class TestRestrictedPythonSecurity(ERP5TypeTestCase): ...@@ -86,176 +102,193 @@ class TestRestrictedPythonSecurity(ERP5TypeTestCase):
def testDecimalClassMethod(self): def testDecimalClassMethod(self):
# Now it is not allowed # Now it is not allowed
self.assertRaises(Unauthorized, self.assertRaises(
self.createAndRunScript, 'import decimal', Unauthorized,
'return decimal.Decimal.from_float(3.3)') self.createAndRunScript,
'''
import decimal
return decimal.Decimal.from_float(3.3)
''')
# allow it only in this test class to check # allow it only in this test class to check
import decimal import decimal
allow_class_attribute(decimal.Decimal, {"from_float":1}) allow_class_attribute(decimal.Decimal, {"from_float":1})
# make sure now we can run without raising Unauthorized # make sure now we can run without raising Unauthorized
self.createAndRunScript('import decimal', self.createAndRunScript('''
'return decimal.Decimal.from_float(3.3)') import decimal
return decimal.Decimal.from_float(3.3)
''')
def test_urlparse(self): def test_urlparse(self):
self.createAndRunScript( self.createAndRunScript('''
'import urlparse', import urlparse
'return urlparse.urlparse("http://example.com/pa/th/?q=s").path', return urlparse.urlparse("http://example.com/pa/th/?q=s").path
''',
expected='/pa/th/' expected='/pa/th/'
) )
# access computed attributes (property) is also OK # access computed attributes (property) is also OK
self.createAndRunScript( self.createAndRunScript('''
'import urlparse', import urlparse
'return urlparse.urlparse("http://example.com/pa/th/?q=s").hostname', return urlparse.urlparse("http://example.com/pa/th/?q=s").hostname
''',
expected='example.com' expected='example.com'
) )
self.createAndRunScript( self.createAndRunScript('''
'import urlparse', import urlparse
'return urlparse.urlsplit("http://example.com/pa/th/?q=s").path', return urlparse.urlsplit("http://example.com/pa/th/?q=s").path
''',
expected='/pa/th/' expected='/pa/th/'
) )
self.createAndRunScript( self.createAndRunScript('''
'import urlparse', import urlparse
'return urlparse.urldefrag("http://example.com/#frag")[1]', return urlparse.urldefrag("http://example.com/#frag")[1]
''',
expected='frag' expected='frag'
) )
self.createAndRunScript( self.createAndRunScript('''
'import urlparse', import urlparse
'return urlparse.parse_qs("q=s")', return urlparse.parse_qs("q=s")
''',
expected={'q': ['s']} expected={'q': ['s']}
) )
self.createAndRunScript( self.createAndRunScript('''
'import urlparse', import urlparse
'return urlparse.parse_qsl("q=s")', return urlparse.parse_qsl("q=s")
''',
expected=[('q', 's')] expected=[('q', 's')]
) )
def testRandom(self): def testRandom(self):
self.createAndRunScript('import random', self.createAndRunScript('''
'return random.Random().getrandbits(10)') import random
return random.Random().getrandbits(10)
''')
def testSystemRandom(self): def testSystemRandom(self):
self.createAndRunScript('import random', self.createAndRunScript('''
'return random.SystemRandom().getrandbits(10)') import random
return random.SystemRandom().getrandbits(10)
''')
def test_os_urandom(self): def test_os_urandom(self):
self.createAndRunScript('import os', self.createAndRunScript('''
'return os.urandom(10)') import os
return os.urandom(10)
''')
# other "unsafe" os members are not exposed # other "unsafe" os members are not exposed
self.assertRaises(Unauthorized, self.assertRaises(
self.createAndRunScript, 'import os', Unauthorized,
'return os.path.exists("/")') self.createAndRunScript,
self.assertRaises(Unauthorized, '''
self.createAndRunScript, 'import os', import os
'return os.system') return os.path.exists("/")
''')
self.assertRaises(
Unauthorized,
self.createAndRunScript,
'''
import os
return os.system
''')
self.assertRaises(Unauthorized, self.assertRaises(Unauthorized,
self.createAndRunScript, 'from os import system') self.createAndRunScript, 'from os import system')
def test_set(self): def test_set(self):
self.createAndRunScript( self.createAndRunScript('''
textwrap.dedent('''\ s = set()
s = set() s.add(1)
s.add(1) s.clear()
s.clear() s.copy()
s.copy() s = set([1, 2])
s = set([1, 2]) s.difference([1])
s.difference([1]) s.difference_update([1])
s.difference_update([1]) s.discard(1)
s.discard(1) s.intersection([1])
s.intersection([1]) s.intersection_update([1])
s.intersection_update([1]) s.isdisjoint([1])
s.isdisjoint([1]) s.issubset([1])
s.issubset([1]) s.issuperset([1])
s.issuperset([1]) s.add(1)
s.add(1) s.pop()
s.pop() s.add(1)
s.add(1) s.remove(1)
s.remove(1) s.symmetric_difference([1])
s.symmetric_difference([1]) s.symmetric_difference_update([1])
s.symmetric_difference_update([1]) s.union([1])
s.union([1]) s.update()
s.update() ''')
'''),
)
def test_frozenset(self): def test_frozenset(self):
self.createAndRunScript( self.createAndRunScript('''
textwrap.dedent('''\ s = frozenset([1, 2])
s = frozenset([1, 2]) s.copy()
s.copy() s.difference([1])
s.difference([1]) s.intersection([1])
s.intersection([1]) s.isdisjoint([1])
s.isdisjoint([1]) s.issubset([1])
s.issubset([1]) s.issuperset([1])
s.issuperset([1]) s.symmetric_difference([1])
s.symmetric_difference([1]) s.union([1])
s.union([1]) ''')
'''),
)
def test_sorted(self): def test_sorted(self):
self.createAndRunScript( self.createAndRunScript('''
textwrap.dedent('''\ returned = []
returned = [] for i in sorted([2, 3, 1]):
for i in sorted([2, 3, 1]): returned.append(i)
returned.append(i) return returned
return returned ''',
'''),
expected=[1, 2, 3], expected=[1, 2, 3],
) )
def test_reversed(self): def test_reversed(self):
self.createAndRunScript( self.createAndRunScript('''
textwrap.dedent('''\ returned = []
returned = [] for i in reversed(('3', '2', '1')):
for i in reversed(('3', '2', '1')): returned.append(i)
returned.append(i) return returned
return returned ''',
'''),
expected=['1', '2', '3'], expected=['1', '2', '3'],
) )
self.createAndRunScript( self.createAndRunScript('''
textwrap.dedent('''\ returned = []
returned = [] for i in reversed([3, 2, 1]):
for i in reversed([3, 2, 1]): returned.append(i)
returned.append(i) return returned
return returned ''',
'''),
expected=[1, 2, 3], expected=[1, 2, 3],
) )
self.createAndRunScript( self.createAndRunScript('''
textwrap.dedent('''\ returned = []
returned = [] for i in reversed('321'):
for i in reversed('321'): returned.append(i)
returned.append(i) return returned
return returned ''',
'''),
expected=['1', '2', '3'], expected=['1', '2', '3'],
) )
def test_enumerate(self): def test_enumerate(self):
self.createAndRunScript( self.createAndRunScript('''
textwrap.dedent('''\ returned = []
returned = [] for i in enumerate(["zero", "one", "two",]):
for i in enumerate(["zero", "one", "two",]): returned.append(i)
returned.append(i) return returned
return returned ''',
'''),
expected=[(0, "zero"), (1, "one"), (2, "two"), ], expected=[(0, "zero"), (1, "one"), (2, "two"), ],
) )
# with start= argument # with start= argument
self.createAndRunScript( self.createAndRunScript('''
textwrap.dedent('''\ returned = []
returned = [] for i in enumerate(["one", "two", "three"], start=1):
for i in enumerate(["one", "two", "three"], start=1): returned.append(i)
returned.append(i) return returned
return returned ''',
'''),
expected=[(1, "one"), (2, "two"), (3, "three")], expected=[(1, "one"), (2, "two"), (3, "three")],
) )
def test_generator_iteration(self): def test_generator_iteration(self):
generator_iteration_script = textwrap.dedent( generator_iteration_script = textwrap.dedent(
'''\ '''
result = [] result = []
for elem in kw['generator']: for elem in kw['generator']:
result.append(elem) result.append(elem)
...@@ -298,327 +331,309 @@ class TestRestrictedPythonSecurity(ERP5TypeTestCase): ...@@ -298,327 +331,309 @@ class TestRestrictedPythonSecurity(ERP5TypeTestCase):
kwargs={'generator': generator_with_not_allowed_objects()}, kwargs={'generator': generator_with_not_allowed_objects()},
) )
self.createAndRunScript( self.createAndRunScript('''
textwrap.dedent('''\ result = []
result = [] i = iter(kw['generator'])
i = iter(kw['generator']) for _ in range(100): # prevent infinite loop
for _ in range(100): # prevent infinite loop try:
try: result.append(next(i))
result.append(next(i)) except StopIteration:
except StopIteration: break
break except Exception as e:
except Exception as e: result.append(repr(e))
result.append(repr(e)) return result
return result ''',
'''),
kwargs={'generator': generator_with_not_allowed_objects()}, kwargs={'generator': generator_with_not_allowed_objects()},
expected=["one", "Unauthorized()", 2], expected=["one", "Unauthorized()", 2],
) )
def test_json(self): def test_json(self):
self.createAndRunScript( self.createAndRunScript('''
textwrap.dedent('''\ import json
import json return json.loads(json.dumps({"ok": [True]}))
return json.loads(json.dumps({"ok": [True]})) ''',
'''),
expected={"ok": [True]} expected={"ok": [True]}
) )
def test_calendar(self): def test_calendar(self):
self.createAndRunScript( self.createAndRunScript('''
textwrap.dedent('''\ import calendar
import calendar calendar.IllegalMonthError
calendar.IllegalMonthError calendar.IllegalWeekdayError
calendar.IllegalWeekdayError calendar.calendar(2020)
calendar.calendar(2020) calendar.firstweekday()
calendar.firstweekday() calendar.isleap(2020)
calendar.isleap(2020) calendar.leapdays(200, 2020)
calendar.leapdays(200, 2020) calendar.month(2020, 1)
calendar.month(2020, 1) calendar.monthcalendar(2020, 1)
calendar.monthcalendar(2020, 1) calendar.monthrange(2020, 1)
calendar.monthrange(2020, 1) calendar.setfirstweekday(1)
calendar.setfirstweekday(1) calendar.timegm((2020, 1, 1, 0, 0, 0))
calendar.timegm((2020, 1, 1, 0, 0, 0)) calendar.weekday(2020, 1, 1)
calendar.weekday(2020, 1, 1) calendar.Calendar().getfirstweekday()
calendar.Calendar().getfirstweekday() calendar.HTMLCalendar().getfirstweekday()
calendar.HTMLCalendar().getfirstweekday() ''')
'''),
)
def test_collections_Counter(self): def test_collections_Counter(self):
self.createAndRunScript( self.createAndRunScript('''
textwrap.dedent('''\ from collections import Counter
from collections import Counter c = Counter(["a", "b"])
c = Counter(["a", "b"]) c["a"] = c["a"] + 1
c["a"] = c["a"] + 1 del c["b"]
del c["b"] c.update({"a": 1})
c.update({"a": 1}) return c.most_common(1)
return c.most_common(1) ''',
'''),
expected=[('a', 3)] expected=[('a', 3)]
) )
def test_collections_defaultdict(self): def test_collections_defaultdict(self):
self.createAndRunScript( self.createAndRunScript('''
textwrap.dedent('''\ from collections import defaultdict
from collections import defaultdict d = defaultdict(list)
d = defaultdict(list) d["x"].append(1)
d["x"].append(1) d["y"] = 2
d["y"] = 2 del d["y"]
del d["y"] return d
return d ''',
'''),
expected={"x": [1]} expected={"x": [1]}
) )
def test_collections_namedtuple(self): def test_collections_namedtuple(self):
self.createAndRunScript( self.createAndRunScript('''
textwrap.dedent('''\ from collections import namedtuple
from collections import namedtuple Object = namedtuple("Object", ["a", "b", "c"])
Object = namedtuple("Object", ["a", "b", "c"]) return Object(a=1, b=2, c=3).a
return Object(a=1, b=2, c=3).a ''',
'''),
expected=1 expected=1
) )
# also make sure we can iterate on nametuples # also make sure we can iterate on nametuples
self.createAndRunScript( self.createAndRunScript('''
textwrap.dedent('''\ from collections import namedtuple
from collections import namedtuple Object = namedtuple("Object", ["a", "b", "c"])
Object = namedtuple("Object", ["a", "b", "c"]) returned = []
returned = [] for x in Object(a=1, b=2, c=3):
for x in Object(a=1, b=2, c=3): returned.append(x)
returned.append(x) return returned
return returned ''',
'''),
expected=[1, 2, 3] expected=[1, 2, 3]
) )
def test_collections_OrderedDict(self): def test_collections_OrderedDict(self):
self.createAndRunScript( self.createAndRunScript('''
textwrap.dedent('''\ from collections import OrderedDict
from collections import OrderedDict d = OrderedDict()
d = OrderedDict() d["a"] = 1
d["a"] = 1 d["b"] = 2
d["b"] = 2 d["c"] = 3
d["c"] = 3 del d["c"]
del d["c"] return list(d.items())
return list(d.items()) ''',
'''),
expected=[("a", 1), ("b", 2)] expected=[("a", 1), ("b", 2)]
) )
def test_lax_name(self): def test_lax_name(self):
self.createAndRunScript( self.createAndRunScript('''
textwrap.dedent('''\ def _function():
def _function(): pass
pass class SimpleObject:
class SimpleObject: def __init__(self):
def __init__(self): self.attribute = 1
self.attribute = 1 def _method(self):
def _method(self): _variable = 1
_variable = 1 return SimpleObject().attribute
return SimpleObject().attribute ''',
'''),
expected=1 expected=1
) )
def test_StringIO(self): def test_StringIO(self):
self.createAndRunScript( self.createAndRunScript('''
textwrap.dedent('''\ import StringIO
import StringIO s = StringIO.StringIO()
s = StringIO.StringIO() s.write("ok")
s.write("ok") return s.getvalue()
return s.getvalue() ''',
'''),
expected="ok" expected="ok"
) )
self.createAndRunScript( self.createAndRunScript('''
textwrap.dedent('''\ import StringIO
import StringIO return StringIO.StringIO("ok").getvalue()
return StringIO.StringIO("ok").getvalue() ''',
'''),
expected="ok" expected="ok"
) )
def test_cStringIO(self): def test_cStringIO(self):
self.createAndRunScript( self.createAndRunScript('''
textwrap.dedent('''\ import cStringIO
import cStringIO s = cStringIO.StringIO()
s = cStringIO.StringIO() s.write("ok")
s.write("ok") return s.getvalue()
return s.getvalue() ''',
'''),
expected="ok" expected="ok"
) )
self.createAndRunScript( self.createAndRunScript('''
textwrap.dedent('''\ import cStringIO
import cStringIO return cStringIO.StringIO("ok").getvalue()
return cStringIO.StringIO("ok").getvalue() ''',
'''),
expected="ok" expected="ok"
) )
def testNumpy(self): def testNumpy(self):
self.createAndRunScript( self.createAndRunScript('''
textwrap.dedent(''' import numpy as np
import numpy as np return [x for x in (np.dtype('int32').name, np.timedelta64(1, 'D').nbytes)]
return [x for x in (np.dtype('int32').name, np.timedelta64(1, 'D').nbytes)] ''',
'''), expected=["int32", 8]
expected=["int32", 8]
) )
def testNdarrayWrite(self): def testNdarrayWrite(self):
self.createAndRunScript( self.createAndRunScript('''
textwrap.dedent(''' import numpy as np
import numpy as np z = np.array([[1,2],[3,4]])
z = np.array([[1,2],[3,4]]) z[0][0] = 99
z[0][0] = 99 return z[0][0]
return z[0][0] ''',
'''), expected=99
expected=99
) )
def testPandasSeries(self): def testPandasSeries(self):
self.createAndRunScript( self.createAndRunScript('''
textwrap.dedent(''' import pandas as pd
import pandas as pd return pd.Series([1,2,3]).tolist()
return pd.Series([1,2,3]).tolist() ''',
'''), expected=[1,2,3]
expected=[1,2,3]
) )
def testPandasTimestamp(self): def testPandasTimestamp(self):
self.createAndRunScript( self.createAndRunScript('''
textwrap.dedent(''' import pandas as pd
import pandas as pd return pd.Timestamp('2020-01').year
return pd.Timestamp('2020-01').year ''',
'''), expected=2020
expected=2020
) )
def testPandasDatetimeIndex(self): def testPandasDatetimeIndex(self):
self.createAndRunScript( self.createAndRunScript('''
textwrap.dedent(''' import pandas as pd
import pandas as pd df = pd.DataFrame({'date':['2020-01-01','2020-03-01']})
df = pd.DataFrame({'date':['2020-01-01','2020-03-01']}) df['date'] = pd.to_datetime(df['date'])
df['date'] = pd.to_datetime(df['date']) df.set_index('date', inplace=True)
df.set_index('date', inplace=True) return str(df.index.name)
return str(df.index.name) ''',
'''), expected='date'
expected='date'
) )
def testPandasMultiIndex(self): def testPandasMultiIndex(self):
self.createAndRunScript( self.createAndRunScript('''
textwrap.dedent(''' import pandas as pd
import pandas as pd df = pd.DataFrame({'a':[1,2],'b':[3,4],'c':[5,6]})
df = pd.DataFrame({'a':[1,2],'b':[3,4],'c':[5,6]}) df2 = df.set_index(['a','b'],drop=True)
df2 = df.set_index(['a','b'],drop=True) return list(df2.index.names)
return list(df2.index.names) ''',
'''), expected=['a','b']
expected=['a','b']
) )
def testPandasIndex(self): def testPandasIndex(self):
self.createAndRunScript( self.createAndRunScript('''
textwrap.dedent(''' import pandas as pd
import pandas as pd df = pd.DataFrame({'a':[1,2],'b':[3,4]})
df = pd.DataFrame({'a':[1,2],'b':[3,4]}) df2 = df.set_index(['a'],drop=True)
df2 = df.set_index(['a'],drop=True) return list(df2.index.names)
return list(df2.index.names) ''',
'''), expected=['a']
expected=['a']
) )
def testPandasGroupBy(self): def testPandasGroupBy(self):
# test pandas.core.groupby.DataFrameGroupBy,SeriesGroupBy # test pandas.core.groupby.DataFrameGroupBy,SeriesGroupBy
self.createAndRunScript( self.createAndRunScript('''
textwrap.dedent(''' import pandas as pd
import pandas as pd df2 = pd.DataFrame({'id':[1,1,2],'quantity':[3,4,5],'price':[6,7,8]})
df2 = pd.DataFrame({'id':[1,1,2],'quantity':[3,4,5],'price':[6,7,8]}) return list(df2.groupby(['id'])['quantity'].agg('sum'))
return list(df2.groupby(['id'])['quantity'].agg('sum')) ''',
'''), expected=[7,5]
expected=[7,5]
) )
def testPandasLocIndexer(self): def testPandasLocIndexer(self):
self.createAndRunScript( self.createAndRunScript('''
textwrap.dedent(''' import pandas as pd
import pandas as pd df = pd.DataFrame({'a':[1,2],'b':[3,4]})
df = pd.DataFrame({'a':[1,2],'b':[3,4]}) return df.loc[df['a'] == 1]['b'][0]
return df.loc[df['a'] == 1]['b'][0] ''',
'''), expected=3
expected=3
) )
def testPandasDataFrameWrite(self): def testPandasDataFrameWrite(self):
self.createAndRunScript( self.createAndRunScript('''
textwrap.dedent(''' import pandas as pd
import pandas as pd df = pd.DataFrame({'a':[1,2], 'b':[3,4]})
df = pd.DataFrame({'a':[1,2], 'b':[3,4]}) df.iloc[0, 0] = 999
df.iloc[0, 0] = 999 return df['a'][0]
return df['a'][0] ''',
'''), expected=999
expected=999
) )
def testPandasIORead(self): def testPandasIORead(self):
self.assertRaises(Unauthorized, self.assertRaises(
self.createAndRunScript, Unauthorized,
textwrap.dedent(''' self.createAndRunScript,
import pandas as pd '''
pd.read_csv('testPandasIORead.csv') import pandas as pd
''')) pd.read_csv('testPandasIORead.csv')
''')
# Test the black_list configuration validity # Test the black_list configuration validity
for read_method in pandas_black_list: for read_method in pandas_black_list:
self.assertRaises(Unauthorized, self.assertRaises(
self.createAndRunScript, Unauthorized,
textwrap.dedent(''' self.createAndRunScript,
import pandas as pd '''
read_method = pd.{read_method} import pandas as pd
read_method('testPandasIORead.data') read_method = pd.{read_method}
'''.format(read_method=read_method))) read_method('testPandasIORead.data')
'''.format(read_method=read_method))
def testPandasDataFrameIOWrite(self): def testPandasDataFrameIOWrite(self):
self.assertRaises(ZopeGuardsUnauthorized, self.assertRaises(
self.createAndRunScript, ZopeGuardsUnauthorized,
textwrap.dedent(''' self.createAndRunScript,
import pandas as pd '''
df = pd.DataFrame({'a':[1,2,3]}) import pandas as pd
df.to_csv('testPandasDataFrameIOWrite.csv') df = pd.DataFrame({'a':[1,2,3]})
''')) df.to_csv('testPandasDataFrameIOWrite.csv')
''')
# Test the black_list configuration validity # Test the black_list configuration validity
for write_method in dataframe_black_list: for write_method in dataframe_black_list:
self.assertRaises(ZopeGuardsUnauthorized, self.assertRaises(
self.createAndRunScript, ZopeGuardsUnauthorized,
textwrap.dedent(''' self.createAndRunScript,
import pandas as pd '''
df = pd.DataFrame(columns=['a','b'],data=[[1,2]]) import pandas as pd
write_method = df.{write_method} df = pd.DataFrame(columns=['a','b'],data=[[1,2]])
write_method('testPandasDataFrameIOWrite.data') write_method = df.{write_method}
'''.format(write_method=write_method))) write_method('testPandasDataFrameIOWrite.data')
'''.format(write_method=write_method))
def testPandasSeriesIOWrite(self): def testPandasSeriesIOWrite(self):
self.assertRaises(ZopeGuardsUnauthorized, self.assertRaises(
self.createAndRunScript, ZopeGuardsUnauthorized,
textwrap.dedent('''
import pandas as pd
df = pd.Series([4,5,6])
df.to_csv('testPandasSeriesIOWrite.csv')
'''))
# Test the black_list configuration validity
for write_method in series_black_list:
self.assertRaises(ZopeGuardsUnauthorized,
self.createAndRunScript, self.createAndRunScript,
textwrap.dedent(''' '''
import pandas as pd import pandas as pd
df = pd.Series([4,5,6]) df = pd.Series([4,5,6])
write_method = df.{write_method} df.to_csv('testPandasSeriesIOWrite.csv')
write_method('testPandasSeriesIOWrite.data') ''')
'''.format(write_method=write_method)))
# Test the black_list configuration validity
for write_method in series_black_list:
self.assertRaises(
ZopeGuardsUnauthorized,
self.createAndRunScript,
'''
import pandas as pd
df = pd.Series([4,5,6])
write_method = df.{write_method}
write_method('testPandasSeriesIOWrite.data')
'''.format(write_method=write_method))
def test_suite(): def test_suite():
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment
GitLab Nexedi Edition | About GitLab | About Nexedi | 沪ICP备2021021310号-2 | 沪ICP备2021021310号-7