mirror of
https://github.com/ruby/ruby.git
synced 2022-11-09 12:17:21 -05:00
c7c2ad5749
In future versions of Psych, the `load` method will be mostly the same as the `safe_load` method. In other words, the `load` method won't allow arbitrary object deserialization (which can be used to escalate to an RCE). People that need to load *trusted* documents can use the `unsafe_load` method. This commit introduces the `unsafe_load` method so that people can incrementally upgrade. For example, if they try to upgrade to 4.0.0 and something breaks, they can downgrade, audit callsites, change to `safe_load` or `unsafe_load` as required, and then upgrade to 4.0.0 smoothly. https://github.com/ruby/psych/commit/cb50aa8d3f
134 lines
3.6 KiB
Ruby
134 lines
3.6 KiB
Ruby
# frozen_string_literal: true
|
|
require 'test/unit'
|
|
require 'stringio'
|
|
require 'tempfile'
|
|
require 'date'
|
|
|
|
require 'psych'
|
|
|
|
module Psych
|
|
class TestCase < Test::Unit::TestCase
|
|
def self.suppress_warning
|
|
verbose, $VERBOSE = $VERBOSE, nil
|
|
yield
|
|
ensure
|
|
$VERBOSE = verbose
|
|
end
|
|
|
|
def with_default_external(enc)
|
|
verbose, $VERBOSE = $VERBOSE, nil
|
|
origenc, Encoding.default_external = Encoding.default_external, enc
|
|
$VERBOSE = verbose
|
|
yield
|
|
ensure
|
|
verbose, $VERBOSE = $VERBOSE, nil
|
|
Encoding.default_external = origenc
|
|
$VERBOSE = verbose
|
|
end
|
|
|
|
def with_default_internal(enc)
|
|
verbose, $VERBOSE = $VERBOSE, nil
|
|
origenc, Encoding.default_internal = Encoding.default_internal, enc
|
|
$VERBOSE = verbose
|
|
yield
|
|
ensure
|
|
verbose, $VERBOSE = $VERBOSE, nil
|
|
Encoding.default_internal = origenc
|
|
$VERBOSE = verbose
|
|
end
|
|
|
|
#
|
|
# Convert between Psych and the object to verify correct parsing and
|
|
# emitting
|
|
#
|
|
def assert_to_yaml( obj, yaml, loader = :load )
|
|
assert_equal( obj, Psych.send(loader, yaml) )
|
|
assert_equal( obj, Psych::parse( yaml ).transform )
|
|
assert_equal( obj, Psych.send(loader, obj.to_yaml) )
|
|
assert_equal( obj, Psych::parse( obj.to_yaml ).transform )
|
|
assert_equal( obj, Psych.send(loader,
|
|
obj.to_yaml(
|
|
:UseVersion => true, :UseHeader => true, :SortKeys => true
|
|
)
|
|
))
|
|
rescue Psych::DisallowedClass, Psych::BadAlias
|
|
assert_to_yaml obj, yaml, :unsafe_load
|
|
end
|
|
|
|
#
|
|
# Test parser only
|
|
#
|
|
def assert_parse_only( obj, yaml )
|
|
begin
|
|
assert_equal obj, Psych::load( yaml )
|
|
rescue Psych::DisallowedClass, Psych::BadAlias
|
|
assert_equal obj, Psych::unsafe_load( yaml )
|
|
end
|
|
assert_equal obj, Psych::parse( yaml ).transform
|
|
end
|
|
|
|
def assert_cycle( obj )
|
|
v = Visitors::YAMLTree.create
|
|
v << obj
|
|
if obj.nil?
|
|
assert_nil Psych.load(v.tree.yaml)
|
|
assert_nil Psych::load(Psych.dump(obj))
|
|
assert_nil Psych::load(obj.to_yaml)
|
|
else
|
|
begin
|
|
assert_equal(obj, Psych.load(v.tree.yaml))
|
|
assert_equal(obj, Psych::load(Psych.dump(obj)))
|
|
assert_equal(obj, Psych::load(obj.to_yaml))
|
|
rescue Psych::DisallowedClass, Psych::BadAlias
|
|
assert_equal(obj, Psych.unsafe_load(v.tree.yaml))
|
|
assert_equal(obj, Psych::unsafe_load(Psych.dump(obj)))
|
|
assert_equal(obj, Psych::unsafe_load(obj.to_yaml))
|
|
end
|
|
end
|
|
end
|
|
|
|
#
|
|
# Make a time with the time zone
|
|
#
|
|
def mktime( year, mon, day, hour, min, sec, usec, zone = "Z" )
|
|
usec = Rational(usec.to_s) * 1000000
|
|
val = Time::utc( year.to_i, mon.to_i, day.to_i, hour.to_i, min.to_i, sec.to_i, usec )
|
|
if zone != "Z"
|
|
hour = zone[0,3].to_i * 3600
|
|
min = zone[3,2].to_i * 60
|
|
ofs = (hour + min)
|
|
val = Time.at( val.tv_sec - ofs, val.tv_nsec / 1000.0 )
|
|
end
|
|
return val
|
|
end
|
|
end
|
|
end
|
|
|
|
# backport so that tests will run on 2.0.0
|
|
unless Tempfile.respond_to? :create
|
|
def Tempfile.create(basename, *rest)
|
|
tmpfile = nil
|
|
Dir::Tmpname.create(basename, *rest) do |tmpname, n, opts|
|
|
mode = File::RDWR|File::CREAT|File::EXCL
|
|
perm = 0600
|
|
if opts
|
|
mode |= opts.delete(:mode) || 0
|
|
opts[:perm] = perm
|
|
perm = nil
|
|
else
|
|
opts = perm
|
|
end
|
|
tmpfile = File.open(tmpname, mode, opts)
|
|
end
|
|
if block_given?
|
|
begin
|
|
yield tmpfile
|
|
ensure
|
|
tmpfile.close if !tmpfile.closed?
|
|
File.unlink tmpfile
|
|
end
|
|
else
|
|
tmpfile
|
|
end
|
|
end
|
|
end
|