# Copyright 2016-2017 Versada # License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl). from odoo.tests import TransactionCase from ..logutils import SanitizeOdooCookiesProcessor class TestOdooCookieSanitizer(TransactionCase): def test_cookie_as_string(self): data = { 'request': { 'cookies': 'website_lang=en_us;' 'session_id=hello;' 'Session_ID=hello;' 'foo=bar', }, } proc = SanitizeOdooCookiesProcessor() result = proc.process(data) self.assertTrue('request' in result) http = result['request'] self.assertEqual( http['cookies'], 'website_lang=en_us;' 'session_id={m};' 'Session_ID={m};' 'foo=bar'.format( m=proc.MASK, ), ) def test_cookie_as_string_with_partials(self): data = { 'request': { 'cookies': 'website_lang=en_us;session_id;foo=bar', }, } proc = SanitizeOdooCookiesProcessor() result = proc.process(data) self.assertTrue('request' in result) http = result['request'] self.assertEqual( http['cookies'], 'website_lang=en_us;session_id;foo=bar', ) def test_cookie_header(self): data = { 'request': { 'headers': { 'Cookie': 'foo=bar;' 'session_id=hello;' 'Session_ID=hello;' 'a_session_id_here=hello', }, }, } proc = SanitizeOdooCookiesProcessor() result = proc.process(data) self.assertTrue('request' in result) http = result['request'] self.assertEqual( http['headers']['Cookie'], 'foo=bar;' 'session_id={m};' 'Session_ID={m};' 'a_session_id_here={m}'.format(m=proc.MASK))