| Left: | ||
| Right: | 
| LEFT | RIGHT | 
|---|---|
| 1 # This file is part of the Adblock Plus web scripts, | 1 # This file is part of the Adblock Plus web scripts, | 
| 2 # Copyright (C) 2006-present eyeo GmbH | 2 # Copyright (C) 2006-present eyeo GmbH | 
| 3 # | 3 # | 
| 4 # Adblock Plus is free software: you can redistribute it and/or modify | 4 # Adblock Plus is free software: you can redistribute it and/or modify | 
| 5 # it under the terms of the GNU General Public License version 3 as | 5 # it under the terms of the GNU General Public License version 3 as | 
| 6 # published by the Free Software Foundation. | 6 # published by the Free Software Foundation. | 
| 7 # | 7 # | 
| 8 # Adblock Plus is distributed in the hope that it will be useful, | 8 # Adblock Plus is distributed in the hope that it will be useful, | 
| 9 # but WITHOUT ANY WARRANTY; without even the implied warranty of | 9 # but WITHOUT ANY WARRANTY; without even the implied warranty of | 
| 10 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | 10 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | 
| 11 # GNU General Public License for more details. | 11 # GNU General Public License for more details. | 
| 12 # | 12 # | 
| 13 # You should have received a copy of the GNU General Public License | 13 # You should have received a copy of the GNU General Public License | 
| 14 # along with Adblock Plus. If not, see <http://www.gnu.org/licenses/>. | 14 # along with Adblock Plus. If not, see <http://www.gnu.org/licenses/>. | 
| 15 | 15 | 
| 16 import re | 16 import re | 
| 17 import random | 17 import random | 
| 18 from urlparse import parse_qsl | |
| 19 from sitescripts.utils import get_config, get_template | 18 from sitescripts.utils import get_config, get_template | 
| 20 from sitescripts.web import url_handler | 19 from sitescripts.web import url_handler, form_handler | 
| 21 from sitescripts.reports.utils import (calculateReportSecret, | 20 from sitescripts.reports.utils import (calculateReportSecret, | 
| 22 calculateReportSecret_compat, getReport, | 21 calculateReportSecret_compat, getReport, | 
| 23 saveReport, sendUpdateNotification, | 22 saveReport, sendUpdateNotification, | 
| 24 getUserId, updateUserUsefulness) | 23 getUserId, updateUserUsefulness) | 
| 25 | 24 | 
| 26 | 25 GUID_REGEX = r'^[\da-f]{8}-[\da-f]{4}-[\da-f]{4}-[\da-f]{4}-[\da-f]{12}$' | 
| 27 def _getReport(guid, test_mode): | |
| 28 if not test_mode: | |
| 29 return getReport(guid) | |
| 30 return {'usefulness': 1} | |
| 
 
rhowell
2019/02/02 05:45:22
If I also return an email address here, we can tes
 
Vasily Kuznetsov
2019/02/04 17:48:50
I think it would make more sense to mock getReport
 
rhowell
2019/02/07 03:54:32
Done.
 
 | |
| 31 | |
| 32 | |
| 33 def _saveReport(guid, report_data, test_mode): | |
| 34 if not test_mode: | |
| 35 return saveReport(guid, report_data) | |
| 36 | 26 | 
| 37 | 27 | 
| 38 @url_handler('/updateReport') | 28 @url_handler('/updateReport') | 
| 39 def handleRequest(environ, start_response, test_mode=False): | 29 @form_handler | 
| 40 if environ['REQUEST_METHOD'].upper() != 'POST' or not environ.get('CONTENT_T YPE', '').startswith('application/x-www-form-urlencoded'): | 30 def handleRequest(environ, start_response, params): | 
| 41 return showError('Unsupported request method', start_response) | |
| 42 | |
| 43 try: | |
| 44 request_body_length = int(environ['CONTENT_LENGTH']) | |
| 45 except: | |
| 46 return showError('Invalid or missing Content-Length header', start_respo nse) | |
| 47 | |
| 48 request_body = environ['wsgi.input'].read(request_body_length) | |
| 49 params = {} | |
| 50 for key, value in parse_qsl(request_body): | |
| 51 params[key] = value.decode('utf-8') | |
| 52 | |
| 53 guid = params.get('guid', '').lower() | 31 guid = params.get('guid', '').lower() | 
| 54 if not re.match(r'^[\da-f]{8}-[\da-f]{4}-[\da-f]{4}-[\da-f]{4}-[\da-f]{12}$' , guid): | 32 if not re.match(GUID_REGEX, guid): | 
| 55 return showError('Invalid or missing report GUID', start_response) | 33 return showError('Invalid or missing report GUID', start_response) | 
| 56 | 34 | 
| 57 reportData = _getReport(guid, params['test_mode']) | 35 reportData = getReport(guid) | 
| 58 | 36 | 
| 59 if reportData == None: | 37 if reportData is None: | 
| 60 return showError('Report does not exist', start_response) | 38 return showError('Report does not exist', start_response) | 
| 61 | 39 | 
| 62 secret = calculateReportSecret(guid) | 40 secret = calculateReportSecret(guid) | 
| 63 if params.get('secret', '') != secret and params.get('secret', '') != calcul ateReportSecret_compat(guid): | 41 if (params.get('secret', '') != secret and | 
| 42 params.get('secret', '') != calculateReportSecret_compat(guid)): | |
| 64 return showError('Wrong secret value', start_response) | 43 return showError('Wrong secret value', start_response) | 
| 65 | 44 | 
| 66 reportData['status'] = params.get('status', '') | 45 reportData['status'] = params.get('status', '') | 
| 67 if len(reportData['status']) > 1024: | 46 if len(reportData['status']) > 1024: | 
| 68 reportData['status'] = reportData['status'][:1024] | 47 reportData['status'] = reportData['status'][:1024] | 
| 69 | 48 | 
| 70 oldusefulness = reportData.get('usefulness', '0') | 49 oldusefulness = reportData.get('usefulness', '0') | 
| 71 reportData['usefulness'] = params.get('usefulness', '0') | 50 reportData['usefulness'] = params.get('usefulness', '0') | 
| 72 | 51 | 
| 73 if 'email' in reportData: | 52 if 'email' in reportData: | 
| 74 updateUserUsefulness(getUserId(reportData['email']), reportData['usefuln ess'], oldusefulness) | 53 updateUserUsefulness(getUserId(reportData['email']), | 
| 54 reportData['usefulness'], oldusefulness) | |
| 75 | 55 | 
| 76 _saveReport(guid, reportData, params['test_mode']) | 56 saveReport(guid, reportData) | 
| 77 | 57 | 
| 78 if params.get('notify', '') and 'email' in reportData: | 58 if params.get('notify', '') and 'email' in reportData: | 
| 79 email = reportData['email'] | 59 email = reportData['email'] | 
| 80 email = re.sub(r' at ', r'@', email) | 60 email = re.sub(r' at ', r'@', email) | 
| 81 email = re.sub(r' dot ', r'.', email) | 61 email = re.sub(r' dot ', r'.', email) | 
| 82 if re.match(r'^[\w.%+-]+@[\w.%+-]+(\.[\w.%+-]+)+', email): | 62 if re.match(r'^[\w.%+-]+@[\w.%+-]+(\.[\w.%+-]+)+', email): | 
| 83 sendUpdateNotification({ | 63 sendUpdateNotification({ | 
| 84 'email': email, | 64 'email': email, | 
| 85 'url': get_config().get('reports', 'urlRoot') + guid, | 65 'url': get_config().get('reports', 'urlRoot') + guid, | 
| 86 'status': reportData['status'], | 66 'status': reportData['status'], | 
| 87 }) | 67 }) | 
| 88 | 68 | 
| 89 newURL = get_config().get('reports', 'urlRoot') + guid | 69 newURL = get_config().get('reports', 'urlRoot') + guid | 
| 90 newURL += '?updated=' + str(int(random.uniform(0, 10000))) | 70 newURL += '?updated=' + str(int(random.uniform(0, 10000))) | 
| 91 newURL += '#secret=' + secret | 71 newURL += '#secret=' + secret | 
| 92 | |
| 93 start_response('302 Found', [('Location', newURL.encode('utf-8'))]) | 72 start_response('302 Found', [('Location', newURL.encode('utf-8'))]) | 
| 94 return [] | 73 return [] | 
| 95 | 74 | 
| 96 | 75 | 
| 97 def showError(message, start_response): | 76 def showError(message, start_response): | 
| 98 template = get_template(get_config().get('reports', 'errorTemplate')) | 77 template = get_template(get_config().get('reports', 'errorTemplate')) | 
| 99 start_response('400 Processing Error', [('Content-Type', 'application/xhtml+ xml; charset=utf-8')]) | 78 start_response('400 Processing Error', | 
| 79 [('Content-Type', 'application/xhtml+xml; charset=utf-8')]) | |
| 100 return [template.render({'message': message}).encode('utf-8')] | 80 return [template.render({'message': message}).encode('utf-8')] | 
| LEFT | RIGHT |