Classes

Class	Line #	Total Statements	% Filtered	Complexity	Uncovered Elements	TOTAL Coverage	Actions
SecureGroovyCompilationCustomizerTest	44	32	0%	8	1	0.97435997.4%	Show methods

Class SecureGroovyCompilationCustomizerTest

Class SecureGroovyCompilationCustomizerTest	Line # 44	Total Statements 32	% Filtered 0%	Complexity 8	Uncovered Elements 1	TOTAL Coverage 0.97435997.4%
executeWithSecureCustomizerWhenNoProgrammingRights() : void   executeWithSecureCustomizerWhenNoProgrammingRights() : void	4848	5.05	0.00%	1.01	0.00	1.0 1.0100%
<init>, line 71()   <init>, line 71()	7171	4.04	0.00%	1.01	0.00	1.0 1.0100%
executeWithSecureCustomizerWhenProgrammingRights() : void   executeWithSecureCustomizerWhenProgrammingRights() : void	6464	8.08	0.00%	1.01	0.00	1.0 1.0100%
<init>, line 96()   <init>, line 96()	9696	4.04	0.00%	1.01	0.00	1.0 1.0100%
setUpWhenNoProgrammingRights() : void   setUpWhenNoProgrammingRights() : void	9090	7.07	0.00%	1.01	0.00	1.0 1.0100%
assertProtectedScript(String) : void   assertProtectedScript(String) : void	111111	3.03	0.00%	2.02	1.01	0.6666667 0.666666766.7%
assertSafeScript(String) : void   assertSafeScript(String) : void	121121	1.01	0.00%	1.01	0.00	1.0 1.0100%

 

Contributing tests

Contributing tests

Select all

	Test contribution	Test	Result	Actions
	0.61538464	org.xwiki.groovy.internal.SecureGroovyCompilationCustomizerTest.executeWithSecureCustomizerWhenNoProgrammingRightsorg.xwiki.groovy.internal.SecureGroovyCompilationCustomizerTest.executeWithSecureCustomizerWhenNoProgrammingRights	1PASS
	0.35897437	org.xwiki.groovy.internal.SecureGroovyCompilationCustomizerTest.executeWithSecureCustomizerWhenProgrammingRightsorg.xwiki.groovy.internal.SecureGroovyCompilationCustomizerTest.executeWithSecureCustomizerWhenProgrammingRights	1PASS

 

Source view

1		/*
2		* See the NOTICE file distributed with this work for additional
3		* information regarding copyright ownership.
4		*
5		* This is free software; you can redistribute it and/or modify it
6		* under the terms of the GNU Lesser General Public License as
7		* published by the Free Software Foundation; either version 2.1 of
8		* the License, or (at your option) any later version.
9		*
10		* This software is distributed in the hope that it will be useful,
11		* but WITHOUT ANY WARRANTY; without even the implied warranty of
12		* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
13		* Lesser General Public License for more details.
14		*
15		* You should have received a copy of the GNU Lesser General Public
16		* License along with this software; if not, write to the Free
17		* Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
18		* 02110-1301 USA, or see the FSF site: http://www.fsf.org.
19		*/
20		package org.xwiki.groovy.internal;
21
22		import java.util.Arrays;
23		import java.util.Collections;
24
25		import javax.script.ScriptEngine;
26		import javax.script.ScriptEngineFactory;
27		import javax.script.ScriptEngineManager;
28		import javax.script.ScriptException;
29
30		import org.jmock.Expectations;
31		import org.junit.Assert;
32		import org.junit.Test;
33		import org.xwiki.configuration.ConfigurationSource;
34		import org.xwiki.security.authorization.ContextualAuthorizationManager;
35		import org.xwiki.security.authorization.Right;
36		import org.xwiki.test.jmock.AbstractComponentTestCase;
37
38		/**
39		* Unit tests for {@link SecureGroovyCompilationCustomizer}.
40		*
41		* @version $Id: dcbc28748174197385af32f59eb3dcb4d217aae6 $
42		* @since 4.1M1
43		*/
		97.4% Uncovered Elements: 1 (39) Complexity: 8 Complexity Density: 0.25
44		public class SecureGroovyCompilationCustomizerTest extends AbstractComponentTestCase
45		{
46		private ScriptEngine engine;
47
		100% Uncovered Elements: 0 (5) Complexity: 1 Complexity Density: 0.2 1PASS
48	1	@Test...
49		public void executeWithSecureCustomizerWhenNoProgrammingRights() throws Exception
50		{
51	1	setUpWhenNoProgrammingRights();
52
53		// Verify synchronized statements are not authorized
54	1	assertProtectedScript("synchronized(this) { }");
55		// Verify we can't call System methods
56	1	assertProtectedScript("System.exit(0)");
57		// Verify we can't access private variables
58	1	assertProtectedScript("\"Hello World\".value[0]");
59
60		// Verify we can do a new and use Integer class
61	1	assertSafeScript("new Integer(6)");
62		}
63
		100% Uncovered Elements: 0 (8) Complexity: 1 Complexity Density: 0.12 1PASS
64	1	@Test...
65		public void executeWithSecureCustomizerWhenProgrammingRights() throws Exception
66		{
67	1	final ConfigurationSource source = registerMockComponent(ConfigurationSource.class);
68	1	final ContextualAuthorizationManager cam = registerMockComponent(ContextualAuthorizationManager.class);
69
70	1	getMockery().checking(new Expectations()
		100% Uncovered Elements: 0 (4) Complexity: 1 Complexity Density: 0.25
71	1	{{...
72	1	oneOf(source).getProperty("groovy.compilationCustomizers", Collections.emptyList());
73	1	will(returnValue(Arrays.asList("secure")));
74	1	oneOf(cam).hasAccess(Right.PROGRAM);
75	1	will(returnValue(true));
76		}});
77
78	1	ScriptEngineManager manager = new ScriptEngineManager();
79	1	ScriptEngineFactory groovyScriptEngineFactory =
80		getComponentManager().getInstance(ScriptEngineFactory.class, "groovy");
81	1	manager.registerEngineName("groovy", groovyScriptEngineFactory);
82
83	1	final ScriptEngine engine = manager.getEngineByName("groovy");
84
85		// Verify that the Secure AST Customizer is not active by running a Groovy script that raise an exception
86		// when the Secure AST Customizer is active
87	1	engine.eval("synchronized(this) { }");
88		}
89
		100% Uncovered Elements: 0 (7) Complexity: 1 Complexity Density: 0.14
90	1	private void setUpWhenNoProgrammingRights() throws Exception...
91		{
92	1	final ConfigurationSource source = registerMockComponent(ConfigurationSource.class);
93	1	final ContextualAuthorizationManager cam = registerMockComponent(ContextualAuthorizationManager.class);
94
95	1	getMockery().checking(new Expectations()
		100% Uncovered Elements: 0 (4) Complexity: 1 Complexity Density: 0.25
96	1	{{...
97	1	oneOf(source).getProperty("groovy.compilationCustomizers", Collections.emptyList());
98	1	will(returnValue(Arrays.asList("secure")));
99	1	oneOf(cam).hasAccess(Right.PROGRAM);
100	1	will(returnValue(false));
101		}});
102
103	1	ScriptEngineManager manager = new ScriptEngineManager();
104	1	ScriptEngineFactory groovyScriptEngineFactory =
105		getComponentManager().getInstance(ScriptEngineFactory.class, "groovy");
106	1	manager.registerEngineName("groovy", groovyScriptEngineFactory);
107
108	1	this.engine = manager.getEngineByName("groovy");
109		}
110
		66.7% Uncovered Elements: 1 (3) Complexity: 2 Complexity Density: 0.67
111	3	private void assertProtectedScript(String script)...
112		{
113	3	try {
114	3	engine.eval(script);
115	0	Assert.fail("Should have thrown an exception here");
116		} catch (ScriptException e) {
117		// Expected, test passed!
118		}
119		}
120
		100% Uncovered Elements: 0 (1) Complexity: 1 Complexity Density: 1
121	1	private void assertSafeScript(String script) throws Exception...
122		{
123	1	engine.eval(script);
124		}
125		}