mirror of https://gitee.com/bigwinds/arangodb
25 lines
574 B
JavaScript
25 lines
574 B
JavaScript
'use strict';
|
|
|
|
|
|
var assert = require('assert');
|
|
var fs = require('fs');
|
|
var path = require('path');
|
|
var yaml = require('../../lib/js-yaml');
|
|
|
|
|
|
var badThings = [];
|
|
|
|
|
|
global.makeBadThing = function (thing) {
|
|
badThings.push(thing);
|
|
};
|
|
|
|
|
|
test('Function constructor must not allow to execute any code while parsing.', function () {
|
|
var filename = path.join(__dirname, 'parse-function-security.yml'),
|
|
contents = fs.readFileSync(filename, 'utf8');
|
|
|
|
assert.throws(function () { yaml.load(contents); }, yaml.YAMLException);
|
|
assert.deepEqual(badThings, []);
|
|
});
|