forked from Rockachopa/Timmy-time-dashboard
4e11dd2490
Move 97 test files from flat tests/ into 13 subdirectories: tests/dashboard/ (8 files — routes, mobile, mission control) tests/swarm/ (17 files — coordinator, docker, routing, tasks) tests/timmy/ (12 files — agent, backends, CLI, tools) tests/self_coding/ (14 files — git safety, indexer, self-modify) tests/lightning/ (3 files — L402, LND, interface) tests/creative/ (8 files — assembler, director, image/music/video) tests/integrations/ (10 files — chat bridge, telegram, voice, websocket) tests/mcp/ (4 files — bootstrap, discovery, executor) tests/spark/ (3 files — engine, tools, events) tests/hands/ (3 files — registry, oracle, phase5) tests/scripture/ (1 file) tests/infrastructure/ (3 files — router cascade, API) tests/security/ (3 files — XSS, regression) Fix Path(__file__) reference in test_mobile_scenarios.py for new depth. Add __init__.py to all test subdirectories. Tests: 1503 passed, 9 failed (pre-existing), 53 errors (pre-existing) https://claude.ai/code/session_019oMFNvD8uSGSSmBMGkBfQN
70 lines
2.4 KiB
Python
70 lines
2.4 KiB
Python
import pytest
|
|
from fastapi.templating import Jinja2Templates
|
|
|
|
def test_agent_chat_msg_xss_prevention():
|
|
"""Verify XSS prevention in agent_chat_msg.html."""
|
|
templates = Jinja2Templates(directory="src/dashboard/templates")
|
|
payload = "<script>alert('xss')</script>"
|
|
class MockAgent:
|
|
def __init__(self):
|
|
self.name = "TestAgent"
|
|
self.id = "test-agent"
|
|
|
|
response = templates.get_template("partials/agent_chat_msg.html").render({
|
|
"message": payload,
|
|
"response": payload,
|
|
"error": payload,
|
|
"agent": MockAgent(),
|
|
"timestamp": "12:00:00"
|
|
})
|
|
|
|
# Check that payload is escaped
|
|
assert "<script>alert('xss')</script>" in response
|
|
assert payload not in response
|
|
|
|
def test_agent_panel_xss_prevention():
|
|
"""Verify XSS prevention in agent_panel.html."""
|
|
templates = Jinja2Templates(directory="src/dashboard/templates")
|
|
payload = "<script>alert('xss')</script>"
|
|
class MockAgent:
|
|
def __init__(self):
|
|
self.name = payload
|
|
self.id = "test-agent"
|
|
self.status = "idle"
|
|
self.capabilities = payload
|
|
|
|
class MockTask:
|
|
def __init__(self):
|
|
self.id = "task-1"
|
|
self.status = type('obj', (object,), {'value': 'completed'})
|
|
self.created_at = "2026-02-26T12:00:00"
|
|
self.description = payload
|
|
self.result = payload
|
|
|
|
response = templates.get_template("partials/agent_panel.html").render({
|
|
"agent": MockAgent(),
|
|
"tasks": [MockTask()]
|
|
})
|
|
|
|
assert "<script>alert('xss')</script>" in response
|
|
assert payload not in response
|
|
|
|
def test_swarm_sidebar_xss_prevention():
|
|
"""Verify XSS prevention in swarm_agents_sidebar.html."""
|
|
templates = Jinja2Templates(directory="src/dashboard/templates")
|
|
payload = "<script>alert('xss')</script>"
|
|
class MockAgent:
|
|
def __init__(self):
|
|
self.name = payload
|
|
self.id = "test-agent"
|
|
self.status = "idle"
|
|
self.capabilities = payload
|
|
self.last_seen = "2026-02-26T12:00:00"
|
|
|
|
response = templates.get_template("partials/swarm_agents_sidebar.html").render({
|
|
"agents": [MockAgent()]
|
|
})
|
|
|
|
assert "<script>alert('xss')</script>" in response
|
|
assert payload not in response
|