didericis
c62b3204a8
test / run tests/run_tests.py (pull_request) Successful in 25s
The classifier is a pure dotted-quad regex check — nothing pipelock-specific about it. Pipelock now imports it from util. test_pipelock_classify.py retargets at the new location. Two manifest-accessor functions in pipelock.py (pipelock_bottle_allowlist, pipelock_bottle_ssh_hostnames) look generic but are 1-line wrappers used only internally; they stay for now.
34 lines
940 B
Python
34 lines
940 B
Python
"""Unit: is_ipv4_literal — the classifier that decides whether
|
|
bottle.ssh[].Hostname goes into pipelock's ssrf.ip_allowlist (IPv4
|
|
literal) or trusted_domains (hostname)."""
|
|
|
|
import unittest
|
|
|
|
from claude_bottle.util import is_ipv4_literal
|
|
|
|
|
|
class TestIPv4Classify(unittest.TestCase):
|
|
def test_positive(self):
|
|
for ip in ("127.0.0.1", "10.0.0.5", "100.78.141.42", "0.0.0.0", "255.255.255.255"):
|
|
with self.subTest(ip=ip):
|
|
self.assertTrue(is_ipv4_literal(ip), ip)
|
|
|
|
def test_negative(self):
|
|
for hn in (
|
|
"github.com",
|
|
"gitea.dideric.is",
|
|
"100.78.141",
|
|
"100.78.141.42.5",
|
|
"::1",
|
|
"fe80::1",
|
|
"localhost",
|
|
"",
|
|
"1.2.3.4.example.com",
|
|
):
|
|
with self.subTest(hn=hn):
|
|
self.assertFalse(is_ipv4_literal(hn), hn)
|
|
|
|
|
|
if __name__ == "__main__":
|
|
unittest.main()
|