Add test for directory traversal

2021-08-16 06:38:36 +02:00 · 2021-08-16 06:38:36 +02:00 · abddb3ef25
commit abddb3ef25
parent c6af4f6c6b
1 changed files with 4 additions and 0 deletions
--- a/tests/rpc/test_rpc_apiserver.py
+++ b/tests/rpc/test_rpc_apiserver.py
@ -109,6 +109,10 @@ def test_api_ui_fallback(botclient):
    rc = client_get(client, "/something")
    assert rc.status_code == 200

+    rc = client_get(client, '%2F%2F%2Fetc/passwd')
+    assert rc.status_code == 200
+    assert '`freqtrade install-ui`' in rc.text
+

 def test_api_ui_version(botclient, mocker):
    ftbot, client = botclient