innov
/
django1
1
0
Fork 0
Code Issues Pull Requests 1 Projects Releases Wiki Activity
django1/tests/validators/invalid_urls.txt

77 lines
1.7 KiB
Plaintext
Raw Normal View History

Refactored URLValidator tests by moving URLs to text files.
2014-11-04 01:00:18 +08:00
foo
http://
http://example
http://example.
http://.com
http://invalid-.com
http://-invalid.com
http://invalid.com-
Fixed #26204 -- Reallowed dashes in top-level domains for URLValidator. Thanks Shai Berger for the review.
2016-02-11 23:39:53 +08:00
http://invalid.-com
Refactored URLValidator tests by moving URLs to text files.
2014-11-04 01:00:18 +08:00
http://inv-.alid-.com
http://inv-.-alid.com
file://localhost/path
git://example.com/
Fixed #20003 -- Improved and extended URLValidator This adds support for authentication data (`user:password`) in URLs, IPv6 addresses, and unicode domains. The test suite has been improved by adding test URLs from http://mathiasbynens.be/demo/url-regex (with a few adjustments, like allowing local and reserved IPs). The previous URL validation regex failed this test suite on 13 occasions, the validator was updated based on https://gist.github.com/dperini/729294.
2014-11-04 01:01:31 +08:00
http://.
http://..
http://../
http://?
http://??
http://??/
http://#
http://##
http://##/
http://foo.bar?q=Spaces should be encoded
//
//a
///a
///
http:///a
foo.com
rdar://1234
h://test
http:// shouldfail.com
:// should fail
http://foo.bar/foo(bar)baz quux
http://-error-.invalid/
Fixed #26204 -- Reallowed dashes in top-level domains for URLValidator. Thanks Shai Berger for the review.
2016-02-11 23:39:53 +08:00
http://dashinpunytld.trailingdot.xn--.
http://dashinpunytld.xn---
Fixed #20003 -- Improved and extended URLValidator This adds support for authentication data (`user:password`) in URLs, IPv6 addresses, and unicode domains. The test suite has been improved by adding test URLs from http://mathiasbynens.be/demo/url-regex (with a few adjustments, like allowing local and reserved IPs). The previous URL validation regex failed this test suite on 13 occasions, the validator was updated based on https://gist.github.com/dperini/729294.
2014-11-04 01:01:31 +08:00
http://-a.b.co
http://a.b-.co
Fixed catastrophic backtracking in URLValidator. Thanks João Silva for reporting the problem and Tim Graham for finding the problematic RE and for review. This is a security fix; disclosure to follow shortly.
2015-06-30 06:09:21 +08:00
http://a.-b.co
http://a.b-.c.co
Fixed #20003 -- Improved and extended URLValidator This adds support for authentication data (`user:password`) in URLs, IPv6 addresses, and unicode domains. The test suite has been improved by adding test URLs from http://mathiasbynens.be/demo/url-regex (with a few adjustments, like allowing local and reserved IPs). The previous URL validation regex failed this test suite on 13 occasions, the validator was updated based on https://gist.github.com/dperini/729294.
2014-11-04 01:01:31 +08:00
http:/
http://
http://
http://1.1.1.1.1
http://123.123.123
http://3628126748
http://123
Fixed CVE-2021-33571 -- Prevented leading zeros in IPv4 addresses. validate_ipv4_address() was affected only on Python < 3.9.5, see [1]. URLValidator() uses a regular expressions and it was affected on all Python versions. [1] https://bugs.python.org/issue36384
2021-05-24 15:55:14 +08:00
http://000.000.000.000
http://016.016.016.016
http://192.168.000.001
http://01.2.3.4
http://01.2.3.4
http://1.02.3.4
http://1.2.03.4
http://1.2.3.04
Fixed #20003 -- Improved and extended URLValidator This adds support for authentication data (`user:password`) in URLs, IPv6 addresses, and unicode domains. The test suite has been improved by adding test URLs from http://mathiasbynens.be/demo/url-regex (with a few adjustments, like allowing local and reserved IPs). The previous URL validation regex failed this test suite on 13 occasions, the validator was updated based on https://gist.github.com/dperini/729294.
2014-11-04 01:01:31 +08:00
http://.www.foo.bar/
http://.www.foo.bar./
http://[::1:2::3]:8080/
http://[]
http://[]:8080
Fixed #25620 -- Made URLValidator prohibit URLs with consecutive dots in the domain section.
2015-10-28 14:54:57 +08:00
http://example..com/
Fixed #25637 -- Added URLValidator hostname length validation. URLValidator now validates the maximum length of a hostname and the maximum length of all labels inside the hostname.
2015-11-07 18:08:16 +08:00
http://aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.example.com
http://example.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.com
http://example.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
http://aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaa
Fixed #26119 -- Fixed URLValidator crash on URLs with brackets.
2016-01-22 12:33:34 +08:00
https://test.[com
Fixed #31267 -- Added tests cases with empty username or password for URLValidator. Follow up to cdcf4164bec9dc09465424d7042c3f9d4f0f1fdc.
2020-02-02 18:15:42 +08:00
http://@example.com
http://:@example.com
http://:bar@example.com
Fixed #29528 -- Made URLValidator reject invalid characters in the username and password.
2018-07-23 22:30:01 +08:00
http://foo@bar@example.com
http://foo/bar@example.com
http://foo:bar:baz@example.com
http://foo:bar@baz@example.com
http://foo:bar/baz@example.com
http://invalid-.com/?m=foo@example.com