diff options
Diffstat (limited to 'tests/unit/test_plugin_self_info.py')
| -rw-r--r-- | tests/unit/test_plugin_self_info.py | 94 |
1 files changed, 80 insertions, 14 deletions
diff --git a/tests/unit/test_plugin_self_info.py b/tests/unit/test_plugin_self_info.py index 4a2e6c416..f67a4f25f 100644 --- a/tests/unit/test_plugin_self_info.py +++ b/tests/unit/test_plugin_self_info.py @@ -1,5 +1,5 @@ # SPDX-License-Identifier: AGPL-3.0-or-later -# pylint: disable=missing-module-docstring,disable=missing-class-docstring,invalid-name +# pylint: disable=missing-module-docstring,disable=missing-class-docstring,invalid-name,line-too-long from parameterized.parameterized import parameterized @@ -35,19 +35,85 @@ class PluginIPSelfInfo(SearxTestCase): def test_plugin_store_init(self): self.assertEqual(1, len(self.storage)) - def test_pageno_1_2(self): - - with self.app.test_request_context(): - sxng_request.preferences = self.pref - sxng_request.remote_addr = "127.0.0.1" - sxng_request.headers = {"X-Forwarded-For": "1.2.3.4, 127.0.0.1", "X-Real-IP": "127.0.0.1"} # type: ignore - answer = Answer(answer=gettext("Your IP is: ") + "127.0.0.1") - - search = do_post_search("ip", self.storage, pageno=1) - self.assertIn(answer, search.result_container.answers) - - search = do_post_search("ip", self.storage, pageno=2) - self.assertEqual(list(search.result_container.answers), []) + def test_IPv4_X_Forwarded_For(self): + headers = {"X-Forwarded-For": "1.2.3.4, 127.0.0.1"} + answer = gettext("Your IP is: ") + "1.2.3.4" + + result = self.client.post("/search", data={"q": "ip"}, headers=headers) + self.assertIn(answer, str(result.data)) + result = self.client.post("/search", data={"q": "ip", "pageno": "2"}, headers=headers) + self.assertNotIn(answer, str(result.data)) + + def test_IPv6_X_Forwarded_For(self): + headers = { + "X-Forwarded-For": "fd0f:a306:f289:0000:0000:0000:ffff:bbbb, ::1, 127.0.0.1", + "X-Real-IP": "fd0f:a306:f289:0000:0000:0000:ffff:aaaa", + } + # value from X-Forwarded-For should win + answer = gettext("Your IP is: ") + "fd0f:a306:f289::ffff:bbbb" + result = self.client.post("/search", data={"q": "ip"}, headers=headers) + self.assertIn(answer, str(result.data)) + + def test_IPv6_X_Forwarded_For_all_trusted(self): + headers = { + "X-Forwarded-For": "127.0.0.1, 127.0.0.2, 127.0.0.3, ::1", + } + # value from X-Forwarded-For should win + answer = gettext("Your IP is: ") + "127.0.0.1" + result = self.client.post("/search", data={"q": "ip"}, headers=headers) + self.assertIn(answer, str(result.data)) + + def test_IPv6_X_Real_IP(self): + headers = { + "X-Real-IP": "fd0f:a306:f289:0000:0000:0000:ffff:aaaa", + } + # X-Forwarded-For is not set, X-Real-IP should win + answer = gettext("Your IP is: ") + "fd0f:a306:f289::ffff:aaaa" + result = self.client.post("/search", data={"q": "ip"}, headers=headers) + self.assertIn(answer, str(result.data)) + + def test_REMOTE_ADDR_is_invalid(self): + # X-Forwarded-For and X-Real-IP ar unset and REMOTE_ADDR is invalid + answer = gettext("Your IP is: ") + "100::" + headers = {} + environ_overrides = {"REMOTE_ADDR": "1.2.3.4.5"} + with self.assertLogs("searx.botdetection", level="ERROR") as ctx: + result = self.client.post("/search", data={"q": "ip"}, headers=headers, environ_overrides=environ_overrides) + self.assertIn(answer, str(result.data)) + self.assertIn( + "ERROR:searx.botdetection:REMOTE_ADDR: '1.2.3.4.5' does not appear to be an IPv4 or IPv6 address / discard REMOTE_ADDR from WSGI environment", + ctx.output, + ) + + def test_X_Real_IP_is_invalid(self): + # when a client fakes a X-Real-IP header with an invalid IP 1.2.3.4.5 in + answer = gettext("Your IP is: ") + "96.7.128.186" + headers = {"X-Real-IP": "1.2.3.4.5", "X-Forwarded-For": "96.7.128.186, 127.0.0.1"} + environ_overrides = {"REMOTE_ADDR": "127.0.0.1"} + + with self.assertLogs("searx.botdetection", level="ERROR") as ctx: + result = self.client.post("/search", data={"q": "ip"}, headers=headers, environ_overrides=environ_overrides) + self.assertIn(answer, str(result.data)) + self.assertIn( + "ERROR:searx.botdetection:X-Real-IP: '1.2.3.4.5' does not appear to be an IPv4 or IPv6 address / discard HTTP_X_REAL_IP from WSGI environment", + ctx.output, + ) + + def test_X_Forwarded_For_is_invalid(self): + # when a client fakes a X-Forwarded-For header with an invalid IP + # 1.2.3.4.5 in and the Proxy set a X-Real-IP + answer = gettext("Your IP is: ") + "96.7.128.186" + headers = { + "X-Forwarded-For": "1.2.3.4, 1.2.3.4.5, 127.0.0.1", + "X-Real-IP": "96.7.128.186", + } + with self.assertLogs("searx.botdetection", level="ERROR") as ctx: + result = self.client.post("/search", data={"q": "ip"}, headers=headers) + self.assertIn(answer, str(result.data)) + self.assertIn( + "ERROR:searx.botdetection:X-Forwarded-For: '1.2.3.4.5' does not appear to be an IPv4 or IPv6 address / discard HTTP_X_FORWARDED_FOR from WSGI environment", + ctx.output, + ) @parameterized.expand( [ |