forked from mrlan/EnglishPal
				
			删除test_login.py中添加的代码,添加test_login_security_fix.py用来检验bug是否修复
							parent
							
								
									d21dfc8da3
								
							
						
					
					
						commit
						d6e64e3465
					
				|  | @ -60,21 +60,5 @@ def test_login(): | |||
|         driver.save_screenshot('./app/test/test_login_pic4.png')     | ||||
|         assert 'EnglishPal Study Room for ' + uname in  driver.title | ||||
| 
 | ||||
|         #logout | ||||
|         driver.get(HOME_PAGE + 'logout') | ||||
| 
 | ||||
|         # 测试bug是否修复 | ||||
|         driver.get(HOME_PAGE) | ||||
|         elem = driver.find_element_by_link_text('登录') | ||||
|         elem.click() | ||||
|         uname = 'lanhui' | ||||
|         elem = driver.find_element_by_name('username') | ||||
|         elem.send_keys(uname) | ||||
|         elem = driver.find_element_by_name('password') | ||||
|         elem.send_keys("' or 'a'='a'or'a'='a") | ||||
|         elem = driver.find_element_by_xpath('//form[1]/p[3]/input[1]') # 找到登录按钮 | ||||
|         elem.click() | ||||
|         driver.save_screenshot('./app/test/test_login_pic5.png') | ||||
|         assert '无法通过验证。' in driver.page_source | ||||
|     finally: | ||||
|         driver.quit() | ||||
|  |  | |||
|  | @ -0,0 +1,35 @@ | |||
| # -*- coding: utf-8 -*- | ||||
| # Run the docker image using the following command: | ||||
| # docker run -d -p 4444:4444 selenium/standalone-chrome | ||||
| from selenium import webdriver | ||||
| from selenium.webdriver.common.desired_capabilities import DesiredCapabilities | ||||
| 
 | ||||
| import random, string | ||||
| 
 | ||||
| driver = webdriver.Remote('http://localhost:4444/wd/hub', DesiredCapabilities.CHROME) | ||||
| driver.implicitly_wait(10) | ||||
| 
 | ||||
| HOME_PAGE = 'http://121.4.94.30:91/' | ||||
| 
 | ||||
| def test_login_security_fix(): | ||||
|     try: | ||||
|         driver.get(HOME_PAGE) | ||||
|          | ||||
|         elem = driver.find_element_by_link_text('登录') | ||||
|         elem.click() | ||||
|          | ||||
|         uname = 'lanhui' | ||||
|         elem = driver.find_element_by_name('username') | ||||
|         elem.send_keys(uname) | ||||
|          | ||||
|         elem = driver.find_element_by_name('password') | ||||
|         # 使用原有漏洞密码登录 | ||||
|         elem.send_keys("' or 'a'='a'or'a'='a") | ||||
|          | ||||
|         elem = driver.find_element_by_xpath('//form[1]/p[3]/input[1]') # 找到登录按钮 | ||||
|         elem.click() | ||||
|          | ||||
|         driver.save_screenshot('./app/test/test_login_security_fix0.png') | ||||
|         assert '无法通过验证。' in driver.page_source | ||||
|     finally: | ||||
|         driver.quit() | ||||
		Loading…
	
		Reference in New Issue