Reject non-PNG signature export data (#1651)

This commit is contained in:
red person
2026-06-03 08:10:54 +03:00
committed by GitHub
parent 558d6ddf24
commit 40e1d6e876
2 changed files with 17 additions and 2 deletions
+13 -1
View File
@@ -26,7 +26,8 @@ def _load_signature_cli(monkeypatch):
def test_decode_png_data_accepts_data_url(monkeypatch):
cli = _load_signature_cli(monkeypatch)
assert cli._decode_png_data("data:image/png;base64,aGVsbG8=") == b"hello"
png = b"\x89PNG\r\n\x1a\nrest"
assert cli._decode_png_data("data:image/png;base64,iVBORw0KGgpyZXN0") == png
def test_decode_png_data_rejects_invalid_base64(monkeypatch):
@@ -38,3 +39,14 @@ def test_decode_png_data_rejects_invalid_base64(monkeypatch):
assert exc.code == 1
else:
raise AssertionError("expected invalid base64 to exit")
def test_decode_png_data_rejects_non_png_bytes(monkeypatch):
cli = _load_signature_cli(monkeypatch)
try:
cli._decode_png_data("aGVsbG8=")
except SystemExit as exc:
assert exc.code == 1
else:
raise AssertionError("expected non-PNG bytes to exit")