36 lines
1.1 KiB
Python
36 lines
1.1 KiB
Python
import pytest
|
|
|
|
from app.schema_security import (
|
|
ExternalSchemaReferenceError,
|
|
UnresolvableLocalSchemaReferenceError,
|
|
reject_external_schema_references,
|
|
)
|
|
|
|
|
|
@pytest.mark.parametrize(
|
|
"schema",
|
|
[
|
|
{"$ref": "file:///host/private-schema.json"},
|
|
{"properties": {"value": {"$ref": "https://schema.invalid/value.json"}}},
|
|
{"allOf": [{"$dynamicRef": "https://schema.invalid/dynamic"}]},
|
|
],
|
|
)
|
|
def test_external_json_schema_references_are_rejected(schema) -> None:
|
|
with pytest.raises(ExternalSchemaReferenceError):
|
|
reject_external_schema_references(schema)
|
|
|
|
|
|
def test_local_json_schema_fragment_reference_is_allowed() -> None:
|
|
reject_external_schema_references(
|
|
{
|
|
"$defs": {"value": {"type": "string"}},
|
|
"properties": {"value": {"$ref": "#/$defs/value"}},
|
|
}
|
|
)
|
|
|
|
|
|
@pytest.mark.parametrize("reference", ["#/$defs/missing", "#missing-anchor"])
|
|
def test_unresolvable_local_schema_reference_is_rejected(reference: str) -> None:
|
|
with pytest.raises(UnresolvableLocalSchemaReferenceError):
|
|
reject_external_schema_references({"type": "object", "$ref": reference})
|