cronekorkn/left4me
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
left4me/l4d2web/tests
History
mwiegand 74b7f61437
harden(l4d2web): default security response headers and generic error handlers 
- after_request hook sets X-Content-Type-Options=nosniff, X-Frame-Options=DENY, Referrer-Policy=strict-origin-when-cross-origin, and a strict CSP (default-src 'self', script-src self+nonce, frame-ancestors 'none', form-action 'self'); HSTS added on secure non-test responses
- per-request CSP nonce minted in g.csp_nonce; servers.html's inline showModal script picks it up
- 404 and 500 handlers return short plain-text responses so a misbehaving deployment can't leak tracebacks via Werkzeug's debug page
2026-05-14 22:21:36 +02:00
..
test_admin_users.py auth: reject sessions older than user.password_changed_at 2026-05-11 21:54:13 +02:00
test_alembic_migrations.py feat(l4d2-web): script overlay schema — add overlay.script + last_build_status, drop globals tables 2026-05-08 15:33:04 +02:00
test_auth.py harden(l4d2web): auth/session — clear on login+logout, constant-time CSRF, role-change invalidation 2026-05-14 22:18:46 +02:00
test_blueprints.py auth: reject sessions older than user.password_changed_at 2026-05-11 21:54:13 +02:00
test_cli.py tests/cli: cover running+cancelling idempotency, tighten app-context scope 2026-05-11 23:18:54 +02:00
test_config.py config: allow SESSION_COOKIE_SECURE override and disable on test deploy 2026-05-07 00:56:48 +02:00
test_console_routes.py feat(l4d2-web): console panel UI on server detail page 2026-05-14 21:39:21 +02:00
test_health.py security: harden boundary inputs and production defaults 2026-05-07 00:53:33 +02:00
test_host_commands.py fix(l4d2-web): keep SSE log stream from pinning gunicorn threads 2026-05-08 11:18:56 +02:00
test_job_logs.py auth: reject sessions older than user.password_changed_at 2026-05-11 21:54:13 +02:00
test_job_worker.py job_worker: don't duplicate streamed stderr on HostCommandError 2026-05-10 22:52:54 +02:00
test_l4d2_facade.py feat(l4d2-web): add hostname edit form to server detail page 2026-05-13 15:42:46 +02:00
test_live_state_poller.py feat(live-state): start daemon poller, prune history, close stuck sessions 2026-05-12 22:10:55 +02:00
test_migrations.py feat(live-state): add schema for snapshots, sessions, steam profiles 2026-05-12 21:18:24 +02:00
test_models.py feat(live-state): add schema for snapshots, sessions, steam profiles 2026-05-12 21:18:24 +02:00
test_overlay_builders.py overlay_builders: restore symlink overwrite guards + nits 2026-05-11 23:01:38 +02:00
test_overlay_creation.py feat(l4d2-web): overlay path helpers and creation 2026-05-07 16:38:39 +02:00
test_overlay_files.py feat(files-overlay): user-managed file content as a third overlay type 2026-05-09 18:59:32 +02:00
test_overlay_files_routes.py auth: reject sessions older than user.password_changed_at 2026-05-11 21:54:13 +02:00
test_overlays.py auth: reject sessions older than user.password_changed_at 2026-05-11 21:54:13 +02:00
test_pages.py tests: harden refresh-hidden-during-build with positive assertion 2026-05-11 23:13:39 +02:00
test_profile.py tests/test_profile: hoist sqlalchemy import to module top 2026-05-11 22:01:29 +02:00
test_rate_limit.py rate-limit: extract generic helper, reuse from login 2026-05-11 21:45:51 +02:00
test_rcon.py feat(l4d2-web): add execute_command to rcon service with full test coverage 2026-05-14 21:21:41 +02:00
test_script_overlay_routes.py auth: reject sessions older than user.password_changed_at 2026-05-11 21:54:13 +02:00
test_security.py harden(l4d2web): default security response headers and generic error handlers 2026-05-14 22:21:36 +02:00
test_seed_script_overlays.py feat(l4d2-web): seed example script overlays from examples/script-overlays/ 2026-05-08 18:41:08 +02:00
test_servers.py feat(l4d2-web): accept hostname on server update, default empty on create 2026-05-13 14:29:53 +02:00
test_status_and_server_logs.py auth: reject sessions older than user.password_changed_at 2026-05-11 21:54:13 +02:00
test_steam_users.py feat(live-state): use Steam avatarfull (184x184), downscale in CSS 2026-05-12 23:17:51 +02:00
test_steam_workshop.py feat(l4d2-web): steam workshop API client and downloader 2026-05-07 16:37:39 +02:00
test_workshop_overlay_models.py feat(l4d2-web): script overlay schema — add overlay.script + last_build_status, drop globals tables 2026-05-08 15:33:04 +02:00
test_workshop_paths.py feat(l4d2-web): overlay path helpers and creation 2026-05-07 16:38:39 +02:00
test_workshop_routes.py workshop_routes: narrow refresh's steam exception handler 2026-05-11 23:08:41 +02:00