Function TestValidateCondValue

edgraph/server_test.go:380–430

(t *testing.T)

}

func TestValidateCondValue(t *testing.T) {
	// Valid conditions that should pass.
	valid := []string{
		``,
		`@if(eq(len(v), 0))`,
		` @if(eq(len(v), 0)) `,
		`@if(eq(name, "Alice"))`,
		`@if(le(len(c1), 100) AND lt(len(c2), 100))`,
		`@if(not(eq(len(v), 0)))`,
		`@if(eq(name, "has (parens) inside"))`,
		`@filter(eq(len(v), 0))`,
		// Spaces between directive and opening paren should be allowed (issue #9687).
		`@if (eq(len(v), 0))`,
		`@if  (eq(len(v), 0))`,
		`@filter (eq(len(v), 0))`,
		` @if ( NOT eq(len(RoutesId), 0) ) `,
	}
	for _, c := range valid {
		require.NoError(t, validateCondValue(c), "expected valid: %q", c)
	}

	// Invalid conditions that should be rejected.
	invalid := []struct {
		cond string
		desc string
	}{
		{
			cond: "@if(eq(name, \"x\"))\n  leak(func: has(dgraph.type)) { uid }",
			desc: "DQL injection via newline and extra query block",
		},
		{
			cond: "@if(eq(name, \"x\")) } leak(func: uid(0x1)) { uid",
			desc: "DQL injection closing brace then new block",
		},
		{
			cond: "eq(name, \"x\")",
			desc: "missing @if/@filter prefix",
		},
		{
			cond: "@if(eq(name, \"x\")",
			desc: "unbalanced parentheses",
		},
		{
			cond: "@if(eq(name, \"x\")) extra",
			desc: "trailing content after condition",
		},
	}
	for _, tc := range invalid {
		require.Error(t, validateCondValue(tc.cond), "expected invalid (%s): %q", tc.desc, tc.cond)
	}
}

func TestValidateValObjectId(t *testing.T) {
	valid := []string{