External-Mirrors/awx
2
0
Fork 0
mirror of https://github.com/ansible/awx.git synced 2026-01-14 11:20:39 -03:30
Code Issues Packages Projects Releases Wiki Activity

add xss test for jobs schedules

Browse Source 
* Test for tooltip regression on job schedules list entries
This commit is contained in:
Chris Meyers 2018-02-01 09:52:53 -05:00
parent e43879d44e
commit 290a296f9f
3 changed files with 46 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
awx/ui/test/e2e/fixtures.js
View File

@ -282,7 +282,7 @@ const getJobTemplateSchedule = (namespace = session) => getJobTemplate(namespace
.then(template => getOrCreate(template.related.schedules, {
name: `${template.name}-schedule`,
description: namespace,
rrule: 'DTSTART:20171104T040000Z RRULE:FREQ=DAILY;INTERVAL=1;COUNT=1'
rrule: 'DTSTART:20351104T040000Z RRULE:FREQ=DAILY;INTERVAL=1;COUNT=1'
}));
module.exports = {

21
awx/ui/test/e2e/objects/jobs.js Normal file
View File

@ -0,0 +1,21 @@
import _ from 'lodash';
import actions from './sections/actions';
import breadcrumb from './sections/breadcrumb';
import createFormSection from './sections/createFormSection';
import createTableSection from './sections/createTableSection';
import header from './sections/header';
import lookupModal from './sections/lookupModal';
import navigation from './sections/navigation';
import pagination from './sections/pagination';
import permissions from './sections/permissions';
import search from './sections/search';
module.exports = {
url () {
return `${this.api.globals.launch_url}/#/jobs`;
},
sections: {}, // TODO: Fill this out
elements: {}, // TODO: Fill this out
commands: [], // TODO: Fill this out as needed
};

24
awx/ui/test/e2e/tests/test-xss.js
View File

@ -12,6 +12,7 @@ import {
getSmartInventory,
getTeam,
getUpdatedProject,
getJobs,
} from '../fixtures';
const data = {};
@ -49,6 +50,7 @@ module.exports = {
pages.teams = client.page.teams();
pages.users = client.page.users();
pages.notificationTemplates = client.page.notificationTemplates();
pages.jobs = client.page.jobs();
urls.organization = `${pages.organizations.url()}/${data.organization.id}`;
urls.inventory = `${pages.inventories.url()}/inventory/${data.inventory.id}`;
@ -63,6 +65,8 @@ module.exports = {
urls.team = `${pages.teams.url()}/${data.team.id}`;
urls.user = `${pages.users.url()}/${data.user.id}`;
urls.notification = `${pages.notificationTemplates.url()}/${data.notification.id}`;
urls.jobs = `${pages.jobs.url()}`;
urls.jobsSchedules = `${pages.jobs.url()}/schedules`;
client.useCss();
client.login();
@ -655,6 +659,26 @@ module.exports = {
client.navigateTo(urls.jobTemplateSchedule);
client.expect.element('#xss').not.present;
client.expect.element('[class=xss]').not.present;
},
'check job schedules view for unsanitized content': client => {
const itemRow = `#schedules_table tr[id="${data.jobTemplateSchedule.id}"]`;
const itemName = `${itemRow} td[class*="name-"] a`;
client.navigateTo(urls.jobsSchedules);
client.moveToElement(itemName, 0, 0, () => {
client.expect.element(itemName).attribute('aria-describedby');
client.getAttribute(itemName, 'aria-describedby', ({ value }) => {
const tooltip = `#${value}`;
client.expect.element(tooltip).present;
client.expect.element(tooltip).visible;
client.expect.element('#xss').not.present;
client.expect.element('[class=xss]').not.present;
client.expect.element(tooltip).attribute('innerHTML')
.contains('<div id="xss" class="xss">test</div>');
});
});
client.end();
},
};