########################################################################## # # pgAdmin 4 - PostgreSQL Tools # # Copyright (C) 2013 - 2019, The pgAdmin Development Team # This software is released under the PostgreSQL Licence # ########################################################################## from __future__ import print_function import os from selenium.webdriver.support.ui import WebDriverWait from selenium.webdriver.common.by import By from selenium.webdriver.support import expected_conditions as EC from regression.feature_utils.base_feature_test import BaseFeatureTest from regression.python_test_utils import test_utils from regression.python_test_utils import test_gui_helper from regression.feature_utils.locators import NavMenuLocators class PGUtilitiesBackupFeatureTest(BaseFeatureTest): """ This class test PG utilities - Backup and Restore test scenarios """ scenarios = [ ("Test for PG utilities - Backup and Restore", dict( database_name="pg_utility_test_db", is_xss_check=False, )), ("Test for XSS in Backup and Restore", dict( database_name="

test_me

", is_xss_check=True, )), ] def before(self): if self.server['default_binary_paths'] is None: self.skipTest( "default_binary_paths is not set for the server {0}".format( self.server['name'] ) ) if '<' in self.database_name and os.name == 'nt': self.skipTest( "HTML tags '<' and '>' in object name does not " "work for windows so skipping the test case" ) connection = test_utils.get_db_connection( self.server['db'], self.server['username'], self.server['db_password'], self.server['host'], self.server['port'], self.server['sslmode'] ) test_utils.drop_database(connection, self.database_name) test_utils.create_database(self.server, self.database_name) self.page.add_server(self.server) self.wait = WebDriverWait(self.page.driver, 20) test_gui_helper.close_bgprocess_popup(self) def runTest(self): self.page.toggle_open_server(self.server['name']) self.page.toggle_open_tree_item('Databases') self.page.toggle_open_tree_item(self.database_name) # Backup self.page.retry_click( (By.LINK_TEXT, NavMenuLocators.tools_menu_link_text), (By.CSS_SELECTOR, NavMenuLocators.backup_obj_css)) backup_object = self.wait.until(EC.visibility_of_element_located( (By.CSS_SELECTOR, NavMenuLocators.backup_obj_css))) backup_object.click() # Enter the file name of the backup to be taken self.wait.until(EC.visibility_of_element_located( (By.NAME, NavMenuLocators.backup_filename_txt_box_name))) element = self.wait.until(EC.element_to_be_clickable( (By.NAME, NavMenuLocators.backup_filename_txt_box_name))) element.click() self.page.fill_input_by_field_name( NavMenuLocators.backup_filename_txt_box_name, "test_backup", loose_focus=True) # Click on the take Backup button take_bckup = self.page.find_by_xpath( NavMenuLocators.backup_btn_xpath) click = True while click: try: take_bckup.click() if self.page.wait_for_element_to_disappear( lambda driver: driver.find_element_by_name( NavMenuLocators.backup_filename_txt_box_name)): click = False except Exception as e: pass # Wait for the backup status alertfier self.wait.until(EC.visibility_of_element_located( (By.CSS_SELECTOR, NavMenuLocators.bcg_process_status_alertifier_css))) status = test_utils.get_watcher_dialogue_status(self) if status != "Successfully completed.": test_gui_helper.close_bgprocess_popup(self) self.assertEquals(status, "Successfully completed.") self.page.find_by_css_selector( NavMenuLocators.status_alertifier_more_btn_css).click() self.wait.until(EC.visibility_of_element_located( (By.XPATH, NavMenuLocators.process_watcher_alertfier))) backup_file = None # Check for XSS in Backup details if self.is_xss_check: self._check_detailed_window_for_xss('Backup') else: command = self.page.find_by_css_selector( NavMenuLocators.process_watcher_detailed_command_canvas_css).\ text self.assertIn(self.server['name'], str(command)) self.assertIn("from database 'pg_utility_test_db'", str(command)) # On windows a modified path may be shown so skip this test if os.name is not 'nt': self.assertIn("test_backup", str(command)) self.assertIn("pg_dump", str(command)) if command: backup_file = command[int(command.find('--file')) + 8:int(command.find('--host')) - 2] close_btn = self.page.find_by_xpath( NavMenuLocators.process_watcher_close_button_xpath) close_btn.click() # Restore tools_menu = self.driver.find_element_by_link_text( NavMenuLocators.tools_menu_link_text) tools_menu.click() restore_obj = self.page.find_by_css_selector( NavMenuLocators.restore_obj_css) restore_obj.click() self.wait.until(EC.visibility_of_element_located( (By.NAME, NavMenuLocators.restore_file_name_txt_box_name))) self.wait.until(EC.element_to_be_clickable( (By.NAME, NavMenuLocators.restore_file_name_txt_box_name))).click() self.page.fill_input_by_field_name( NavMenuLocators.restore_file_name_txt_box_name, "test_backup", loose_focus=True) restore_btn = self.page.find_by_xpath( NavMenuLocators.restore_button_xpath) restore_btn.click() self.page.wait_for_element_to_disappear( lambda driver: driver.find_element_by_css_selector( NavMenuLocators.restore_file_name_txt_box_name)) # Wait for the backup status alertfier self.wait.until(EC.visibility_of_element_located( (By.CSS_SELECTOR, NavMenuLocators.bcg_process_status_alertifier_css))) status = test_utils.get_watcher_dialogue_status(self) if status != "Successfully completed.": test_gui_helper.close_bgprocess_popup(self) self.assertEquals(status, "Successfully completed.") self.page.find_by_css_selector( NavMenuLocators.status_alertifier_more_btn_css).click() self.wait.until(EC.visibility_of_element_located( (By.XPATH, NavMenuLocators.process_watcher_alertfier))) # Check for XSS in Restore details if self.is_xss_check: self._check_detailed_window_for_xss('Restore') else: command = self.page.find_by_css_selector( NavMenuLocators.process_watcher_detailed_command_canvas_css).\ text self.assertIn(self.server['name'], str(command)) if os.name is not 'nt': self.assertIn("test_backup", str(command)) self.assertIn("pg_restore", str(command)) close_watcher = self.page.find_by_xpath( NavMenuLocators.process_watcher_close_button_xpath) close_watcher.click() if backup_file is not None: if os.path.isfile(backup_file): os.remove(backup_file) def after(self): test_gui_helper.close_bgprocess_popup(self) self.page.remove_server(self.server) connection = test_utils.get_db_connection( self.server['db'], self.server['username'], self.server['db_password'], self.server['host'], self.server['port'], self.server['sslmode'] ) test_utils.drop_database(connection, self.database_name) def _check_detailed_window_for_xss(self, tool_name): source_code = self.page.find_by_css_selector( NavMenuLocators.process_watcher_detailed_command_canvas_css ).get_attribute('innerHTML') self._check_escaped_characters( source_code, '<h1>test_me</h1>', '{0} detailed window'.format(tool_name) ) def _check_escaped_characters(self, source_code, string_to_find, source): # For XSS we need to search against element's html code assert source_code.find(string_to_find) != - \ 1, "{0} might be vulnerable to XSS ".format(source)