pub/mongoengine
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Handle unsafe expressions when using startswith/endswith/contains with unsafe expressions. Closes #58

Browse Source
This commit is contained in:
flosch 2010-07-26 16:42:10 +02:00
parent 2f991ac6f1
commit 7ab2e21c10
2 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
mongoengine/fields.py
View File

@ -66,6 +66,9 @@ class StringField(BaseField):
regex = r'%s$' regex = r'%s$'
elif op == 'exact': elif op == 'exact':
regex = r'^%s$' regex = r'^%s$'
# escape unsafe characters which could lead to a re.error
value = re.escape(value)
value = re.compile(regex % value, flags) value = re.compile(regex % value, flags)
return value return value

7
tests/queryset.py
View File

@ -288,6 +288,13 @@ class QuerySetTest(unittest.TestCase):
self.assertEqual(obj, person) self.assertEqual(obj, person)
obj = self.Person.objects(Q(name__iexact='gUIDO VAN rOSSU')).first() obj = self.Person.objects(Q(name__iexact='gUIDO VAN rOSSU')).first()
self.assertEqual(obj, None) self.assertEqual(obj, None)
# Test unsafe expressions
person = self.Person(name='Guido van Rossum [.\'Geek\']')
person.save()
obj = self.Person.objects(Q(name__icontains='[.\'Geek')).first()
self.assertEqual(obj, person)
def test_filter_chaining(self): def test_filter_chaining(self):
"""Ensure filters can be chained together. """Ensure filters can be chained together.