mirror of https://github.com/django/django.git
77 lines
2.7 KiB
Python
77 lines
2.7 KiB
Python
import time
|
|
|
|
from django.conf import settings
|
|
from django.contrib.comments.forms import CommentForm
|
|
from django.contrib.comments.models import Comment
|
|
from django.test.utils import override_settings
|
|
|
|
from . import CommentTestCase
|
|
from ..models import Article
|
|
|
|
|
|
class CommentFormTests(CommentTestCase):
|
|
def testInit(self):
|
|
f = CommentForm(Article.objects.get(pk=1))
|
|
self.assertEqual(f.initial['content_type'], str(Article._meta))
|
|
self.assertEqual(f.initial['object_pk'], "1")
|
|
self.assertNotEqual(f.initial['security_hash'], None)
|
|
self.assertNotEqual(f.initial['timestamp'], None)
|
|
|
|
def testValidPost(self):
|
|
a = Article.objects.get(pk=1)
|
|
f = CommentForm(a, data=self.getValidData(a))
|
|
self.assertTrue(f.is_valid(), f.errors)
|
|
return f
|
|
|
|
def tamperWithForm(self, **kwargs):
|
|
a = Article.objects.get(pk=1)
|
|
d = self.getValidData(a)
|
|
d.update(kwargs)
|
|
f = CommentForm(Article.objects.get(pk=1), data=d)
|
|
self.assertFalse(f.is_valid())
|
|
return f
|
|
|
|
def testHoneypotTampering(self):
|
|
self.tamperWithForm(honeypot="I am a robot")
|
|
|
|
def testTimestampTampering(self):
|
|
self.tamperWithForm(timestamp=str(time.time() - 28800))
|
|
|
|
def testSecurityHashTampering(self):
|
|
self.tamperWithForm(security_hash="Nobody expects the Spanish Inquisition!")
|
|
|
|
def testContentTypeTampering(self):
|
|
self.tamperWithForm(content_type="auth.user")
|
|
|
|
def testObjectPKTampering(self):
|
|
self.tamperWithForm(object_pk="3")
|
|
|
|
def testSecurityErrors(self):
|
|
f = self.tamperWithForm(honeypot="I am a robot")
|
|
self.assertTrue("honeypot" in f.security_errors())
|
|
|
|
def testGetCommentObject(self):
|
|
f = self.testValidPost()
|
|
c = f.get_comment_object()
|
|
self.assertIsInstance(c, Comment)
|
|
self.assertEqual(c.content_object, Article.objects.get(pk=1))
|
|
self.assertEqual(c.comment, "This is my comment")
|
|
c.save()
|
|
self.assertEqual(Comment.objects.count(), 1)
|
|
|
|
@override_settings(PROFANITIES_LIST=["rooster"])
|
|
def testProfanities(self):
|
|
"""Test COMMENTS_ALLOW_PROFANITIES and PROFANITIES_LIST settings"""
|
|
a = Article.objects.get(pk=1)
|
|
d = self.getValidData(a)
|
|
|
|
# Try with COMMENTS_ALLOW_PROFANITIES off
|
|
with self.settings(COMMENTS_ALLOW_PROFANITIES=False):
|
|
f = CommentForm(a, data=dict(d, comment="What a rooster!"))
|
|
self.assertFalse(f.is_valid())
|
|
|
|
# Now with COMMENTS_ALLOW_PROFANITIES on
|
|
with self.settings(COMMENTS_ALLOW_PROFANITIES=True):
|
|
f = CommentForm(a, data=dict(d, comment="What a rooster!"))
|
|
self.assertTrue(f.is_valid())
|