See <https://ci-builds.apache.org/job/Allura/job/Allura-py3.14/339/display/redirect?page=changes>
Changes: [Guillermo Cruz] additional tests added to catch redirection attacks ------------------------------------------ [...truncated 80.62 KiB...] ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 /allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4: UserWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html. The pkg_resources package is slated for removal as early as 2025-11-30. Refrain from using this package or pin to Setuptools<81. import pkg_resources -- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html ---------- generated xml file: /allura/ForgeFeedback/pytest.junit.xml ---------- ======================= 13 passed, 4 warnings in 36.10s ======================== finished `pytest --junit-xml=pytest.junit.xml -n 4 --dist loadfile` in ForgeFeedback, with returncode: 0 ........... [100%] =============================== warnings summary =============================== ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 /allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4: UserWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html. The pkg_resources package is slated for removal as early as 2025-11-30. Refrain from using this package or pin to Setuptools<81. import pkg_resources -- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html ---------- generated xml file: /allura/ForgeShortUrl/pytest.junit.xml ---------- ======================= 11 passed, 4 warnings in 43.88s ======================== finished `pytest --junit-xml=pytest.junit.xml -n 4 --dist loadfile` in ForgeShortUrl, with returncode: 0 ............ [100%] =============================== warnings summary =============================== ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 /allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4: UserWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html. The pkg_resources package is slated for removal as early as 2025-11-30. Refrain from using this package or pin to Setuptools<81. import pkg_resources -- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html --------- generated xml file: /allura/ForgeUserStats/pytest.junit.xml ---------- ======================= 12 passed, 4 warnings in 45.17s ======================== ................... [100%] =============================== warnings summary =============================== ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 /allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4: UserWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html. The pkg_resources package is slated for removal as early as 2025-11-30. Refrain from using this package or pin to Setuptools<81. import pkg_resources -- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html ------------ generated xml file: /allura/ForgeLink/pytest.junit.xml ------------ ======================= 19 passed, 4 warnings in 45.38s ======================== finished `pytest --junit-xml=pytest.junit.xml -n 4 --dist loadfile` in ForgeUserStats, with returncode: 0 finished `pytest --junit-xml=pytest.junit.xml -n 4 --dist loadfile` in ForgeLink, with returncode: 0 .............. [100%] =============================== warnings summary =============================== ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 /allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4: UserWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html. The pkg_resources package is slated for removal as early as 2025-11-30. Refrain from using this package or pin to Setuptools<81. import pkg_resources -- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html ----------- generated xml file: /allura/ForgeFiles/pytest.junit.xml ------------ ======================= 14 passed, 4 warnings in 47.27s ======================== finished `pytest --junit-xml=pytest.junit.xml -n 4 --dist loadfile` in ForgeFiles, with returncode: 0 s..........................................s.....s..ss..ss.............. [ 96%] ........................................................................ [ 10%] ...................... [100%] =============================== warnings summary =============================== ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 /allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4: UserWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html. The pkg_resources package is slated for removal as early as 2025-11-30. Refrain from using this package or pin to Setuptools<81. import pkg_resources -- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html ---------- generated xml file: /allura/ForgeActivity/pytest.junit.xml ---------- ======================= 22 passed, 4 warnings in 54.26s ======================== finished `pytest --junit-xml=pytest.junit.xml -n 4 --dist loadfile` in ForgeActivity, with returncode: 0 ........................................................................ [ 35%] ....s [100%] =============================== warnings summary =============================== ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 /allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4: UserWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html. The pkg_resources package is slated for removal as early as 2025-11-30. Refrain from using this package or pin to Setuptools<81. import pkg_resources -- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html --------- generated xml file: /allura/ForgeImporters/pytest.junit.xml ---------- ============ 141 passed, 8 skipped, 4 warnings in 61.53s (0:01:01) ============= finished `pytest --junit-xml=pytest.junit.xml -n 4 --dist loadfile` in ForgeImporters, with returncode: 0 ........................s.................................. [100%] =============================== warnings summary =============================== ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 /allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4: UserWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html. The pkg_resources package is slated for removal as early as 2025-11-30. Refrain from using this package or pin to Setuptools<81. import pkg_resources -- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html ------------ generated xml file: /allura/ForgeBlog/pytest.junit.xml ------------ ============= 58 passed, 1 skipped, 4 warnings in 66.20s (0:01:06) ============= finished `pytest --junit-xml=pytest.junit.xml -n 4 --dist loadfile` in ForgeBlog, with returncode: 0 . [100%] ----------- generated xml file: /allura/AlluraTest/pytest.junit.xml ------------ ========================= 1 passed in 69.07s (0:01:09) ========================= finished `pytest --junit-xml=pytest.junit.xml -n 4 --dist loadfile` in AlluraTest, with returncode: 0 .......F.s.........s.................................................... [ 16%] forgegit/tests/functional/test_controllers.py .......................... [ 22%] ........................................................................ [ 21%] s....................................................................... [ 92%] ........................................................................ [100%] =============================== warnings summary =============================== ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 /allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4: UserWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html. The pkg_resources package is slated for removal as early as 2025-11-30. Refrain from using this package or pin to Setuptools<81. import pkg_resources -- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html --------- generated xml file: /allura/ForgeDiscussion/pytest.junit.xml --------- ================== 72 passed, 4 warnings in 110.37s (0:01:50) ================== finished `pytest --junit-xml=pytest.junit.xml -n 4 --dist loadfile` in ForgeDiscussion, with returncode: 0 forgesvn/tests/functional/test_controllers.py ........................ [ 29%] ...... [100%] =============================== warnings summary =============================== ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 /allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4: UserWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html. The pkg_resources package is slated for removal as early as 2025-11-30. Refrain from using this package or pin to Setuptools<81. import pkg_resources -- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html ------------ generated xml file: /allura/ForgeWiki/pytest.junit.xml ------------ ============ 77 passed, 1 skipped, 4 warnings in 113.11s (0:01:53) ============= finished `pytest --junit-xml=pytest.junit.xml -n 4 --dist loadfile` in ForgeWiki, with returncode: 0 ........................................................................ [ 26%] ........................................................................ [ 32%] ........................................................................ [ 37%] ........................................................................ [ 43%] forgesvn/tests/model/test_repository.py ................................ [ 66%] ........................................................................ [ 48%] ....................................................... [ 57%] ................... [ 88%] forgesvn/tests/model/test_svnimplementation.py .... [ 93%] ........................................................................ [ 53%] forgesvn/tests/test_svn_app.py .. [ 95%] forgesvn/tests/test_tasks.py .... [100%] =============================== warnings summary =============================== ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 /allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4: UserWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html. The pkg_resources package is slated for removal as early as 2025-11-30. Refrain from using this package or pin to Setuptools<81. import pkg_resources -- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html ------------ generated xml file: /allura/ForgeSVN/pytest.junit.xml ------------- ================== 87 passed, 1 warning in 181.59s (0:03:01) =================== finished `pytest --junit-xml=pytest.junit.xml ` in ForgeSVN, with returncode: 0 ........................................................................ [ 70%] ........................................................................ [ 59%] forgegit/tests/model/test_repository.py ................................ [ 78%] ..................................................s..........s.......... [ 64%] ........................... [ 95%] forgegit/tests/test_git_app.py .. [ 96%] forgegit/tests/test_tasks.py ..... [100%] =============================== warnings summary =============================== ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 /allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4: UserWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html. The pkg_resources package is slated for removal as early as 2025-11-30. Refrain from using this package or pin to Setuptools<81. import pkg_resources -- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html ------------ generated xml file: /allura/ForgeGit/pytest.junit.xml ------------- ================== 156 passed, 1 warning in 214.50s (0:03:34) ================== finished `pytest --junit-xml=pytest.junit.xml ` in ForgeGit, with returncode: 0 .............s...............................s.......................... [ 69%] .....................................................................s.. [ 75%] ........................................................................ [ 80%] ........................................................................ [ 86%] .................................ssssssss............................... [ 91%] ........................................................................ [ 96%] ............................................................ [100%] =============================== warnings summary =============================== ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 /allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4: UserWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html. The pkg_resources package is slated for removal as early as 2025-11-30. Refrain from using this package or pin to Setuptools<81. import pkg_resources -- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html ---------- generated xml file: /allura/ForgeTracker/pytest.junit.xml ----------- ================= 204 passed, 4 warnings in 288.02s (0:04:48) ================== finished `pytest --junit-xml=pytest.junit.xml -n 4 --dist loadfile` in ForgeTracker, with returncode: 0 ........................................... [100%] =================================== FAILURES =================================== _________________________ TestAuth.test_evil_payloads __________________________ [gw1] linux -- Python 3.14.3 /allura-data/virtualenv/bin/python3.14 allura/tests/functional/test_auth.py:283: in test_evil_payloads assert loc_split.netloc == base_split.netloc, f"payload={p!r} Location={loc!r}" E AssertionError: payload='////evil.com' Location='http://evil.com' E assert 'evil.com' == 'localhost' E E - localhost E + evil.com =============================== warnings summary =============================== ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 ../../allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4 /allura-data/virtualenv/lib/python3.14/site-packages/paste/script/copydir.py:4: UserWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html. The pkg_resources package is slated for removal as early as 2025-11-30. Refrain from using this package or pin to Setuptools<81. import pkg_resources -- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html ------------- generated xml file: /allura/Allura/pytest.junit.xml -------------- =========================== short test summary info ============================ FAILED allura/tests/functional/test_auth.py::TestAuth::test_evil_payloads - A... ====== 1 failed, 1322 passed, 16 skipped, 4 warnings in 291.06s (0:04:51) ====== finished `pytest allura/tests/ --junit-xml=pytest.junit.xml -n 4 --dist loadfile` in Allura, with returncode: 1 ============================================================================= Shutdown ============================================================================= Container allura-web-1 Stopping Container allura-web-1 Stopped Container allura-web-1 Removing Container allura-web-1 Removed Container allura-mongo-1 Stopping Container allura-solr-1 Stopping Container allura-mongo-1 Stopped Container allura-mongo-1 Removing Container allura-mongo-1 Removed Container allura-solr-1 Stopped Container allura-solr-1 Removing Container allura-solr-1 Removed Network allura_default Removing Network allura_default Removed Total reclaimed space: 0B Deleted Volumes: c3a1d6cbdc9f5cc3b314d88bd5798781a9a3d89836a48aaf118fd60cd077aea3 Total reclaimed space: 0B Build step 'Execute shell' marked build as failure Recording test results [Checks API] No suitable checks publisher found.
