| from unittest.mock import patch | |
| from fastapi.testclient import TestClient | |
| from app import main | |
| def test_nuclei_template_check_reports_supported_and_unsupported(): | |
| async def fake(paths): | |
| if paths[0].endswith("bad.yaml"): | |
| raise ValueError("Only GET/HEAD templates supported") | |
| return {paths[0]: "safe"} | |
| with patch.object(main.nuclei_catalog, "community_files", fake): | |
| with TestClient(main.app) as client: | |
| res=client.post("/api/nuclei/check",json={"paths":["http/web/a.yaml","http/web/bad.yaml"]}) | |
| assert res.status_code==200 | |
| assert res.json()["compatible"]==["http/web/a.yaml"] | |
| assert len(res.json()["rejected"])==1 | |
| def test_nuclei_template_check_rejects_disallowed_repo_paths(): | |
| with TestClient(main.app) as client: | |
| response=client.post("/api/nuclei/check",json={"paths":["http/../../etc/passwd"]}) | |
| assert response.status_code==422 | |
| def test_nuclei_template_check_rejects_duplicate_paths(): | |
| with TestClient(main.app) as client: | |
| response=client.post("/api/nuclei/check",json={"paths":["http/a.yaml","http/a.yaml"]}) | |
| assert response.status_code==422 | |