]j; d Z ddlZddlZddlmZ ddlmZ ej j d Z ej j d Z
ej j d Z y)zThis file and its contents are licensed under the Apache License 2.0. Please see the included NOTICE for copyright information and LICENSE for a copy of the license.
N)
FileUpload)settingsc dt _ d}t j | }d| j j
d}| j
|d|i }|j dk( sJ d}t j j |j d d
j j j }t d j! |j# d j% d
kD sJ d j! |j% d j! |j# d j% k( sJ y)z2Upload malicious SVG file - remove harmful contentT
/api/projects/ /import?commit_to_project=true xss_svg.svg z
file_upload_idsr id UTF-8d N)r SVG_SECURITY_CLEANUPioStringIOprojectr
post status_coder objectsfilterdatalastfilereadlenjoindecodesplitsetup_project_dialog xml_dirtyfendpointrexpectedactuals L/root/env/lib/python3.12/site-packages/label_studio/tests/test_upload_svg.pytest_svg_upload_sanitizer*
s %)H!I I A 4 < < ? ? @@^_H !!(]A,>?A ==C H
&
&!&&1B*CA*F
&
G
L
L
N
S
S
X
X
ZF rwwv}}W-3356 7# == =
778>># $
g0F0L0L0N(O OO O c dt _ d}t j | }d| j j
d}| j
|d|i }|j dk( sJ d}t j j |j d d
j j j }d j |j! d j |j# d j! k( sJ y
)z(Upload invalid SVG file - still acceptedTa
r r r r
z_
gibberish
r r r r r N)r r r r r r
r r r r r r r r r r r r r! s r) test_svg_upload_invalid_formatr- ( s %)H!lI I A 4 < < ? ? @@^_H !!(]A,>?A ==C H
&
&!&&1B*CA*F
&
G
L
L
N
S
S
X
X
ZF
778>># $
g0F0L0L0N(O OO Or+ c 2 dt _ d}t j | }d| j j
d}| j
|d|i }|j dk( sJ t j j |j d d j j j }d
j |j! d
j |j# d j% d d
j! k( sJ y
)z.Upload SVG file - do not sanitize file contentFr r r r r
r r r r r
N)r r r r r r
r r r r r r r r r r r r replace)r" r# r$ r% r& r( s r) test_svg_upload_do_not_sanitizer1 @ s %*H!I I A 4 < < ? ? @@^_H !!(]A,>?A ==C
&
&!&&1B*CA*F
&
G
L
L
N
S
S
X
X
ZF
779??$ % w1G1O1OPTVX1Y1_1_1a)b bb br+ ) __doc__r pytestdata_import.modelsr django.confr mark django_dbr* r- r1 r+ r) r9 sv
) P P: P P. c cr+