secubox-deb/packages/secubox-metablogizer/api/tests
CyberMind-FR 8396f76123 fix(metablogizer): WAF route gates publish (vhost advisory); portable safe tar-extract
Live gk2 findings: haproxyctl vhost-add is blocked by its drift-guard and is
redundant with default_backend mitmproxy_inspector, so route_ok now reflects the
WAF route (the operative mechanism), vhost stays advisory. And the board runs
Python 3.11.2 (no tarfile filter= kwarg) — replaced filter=data with a portable
manual member check (rejects traversal/absolute/links).

Co-Authored-By: Gerald KERMA <devel@cybermind.fr>
2026-07-11 13:49:38 +02:00
..
__init__.py feat(metablog-api): site_schema validator + enricher module (ref #101) 2026-05-12 17:18:49 +02:00
test_publish_backup.py fix(metablogizer): WAF route gates publish (vhost advisory); portable safe tar-extract 2026-07-11 13:49:38 +02:00
test_publish_certs.py feat(metablogizer): cert provisioning (wildcard for gk2, certbot for custom) 2026-07-11 13:04:39 +02:00
test_publish_content.py fix(metablogizer): wizard reads sites_root from config; clean tempdirs; corrupt-zip -> 400 2026-07-11 13:19:04 +02:00
test_publish_router.py fix(publish): delegate vhost/WAF/cert to metablogizer /publish/route; drop illegal root-config writes 2026-07-11 13:28:32 +02:00
test_publish_routing.py fix(metablogizer): WAF route gates publish (vhost advisory); portable safe tar-extract 2026-07-11 13:49:38 +02:00
test_publishctl.py fix(metablogizer): publishctl — valid JSON on all paths + real vhost failure reporting 2026-07-11 12:54:06 +02:00
test_rmtree_force.py fix(metablog-api): DELETE /site/<name> survives locked .git subtrees (ref #106) 2026-05-12 19:45:19 +02:00
test_site_schema.py feat(metablog-api): site_schema validator + enricher module (ref #101) 2026-05-12 17:18:49 +02:00
test_sites_cache.py fix(metablog-api): cache load_sites() + fix /sites double-call (ref #111) 2026-05-12 20:06:46 +02:00
test_webhook.py fix(metablog-webhook): pass safe.directory to git on every call (ref #117) 2026-05-13 07:43:18 +02:00