Hans-Christoph Steiner 3df276cc3c fix all bandit B310 urllib_urlopen ...

"Audit url open for permitted schemes. Allowing use of ‘file:’’ or custom
schemes is often unexpected."

https://bandit.readthedocs.io/en/latest/blacklists/blacklist_calls.html#b310-urllib-urlopen

2020-01-31 15:37:30 +01:00

..

build-tools

Added test aapt output files for build-tools 28.0.3

2019-01-13 19:27:02 +01:00

extra

rewritemeta yaml: fixed boolen mapping for build flags

2017-07-04 11:51:08 +02:00

getsig

include test cases for python getsig replacement

2014-11-07 09:20:33 +00:00

gnupghome

gpg-sign all valid files in the repo, including source tarballs

2016-11-07 14:53:01 +01:00

metadata

update: treat target and min sdk version as int

2019-02-01 09:56:21 +01:00

metadata-rewrite-yml

Revert "Merge branch 'write-yaml-overhaul' into 'master'"

2019-04-01 10:24:00 +00:00

repo

update: use graphics filename with hash in index to support caching

2019-08-29 08:23:51 +02:00

signindex

Support ETag when downloading repository index

2017-05-02 15:37:02 -03:00

source-files

build: fix bad regexs when removing signingConfig from srclibs

2019-10-23 12:44:47 +02:00

stats

tests: include info.zwanenburg.caffeinetile in index tests

2018-10-10 16:02:34 +02:00

triple-t-2

update: parse Triple-T v2.x layout

2019-10-04 14:11:40 +02:00

valid-package-names

add strict, tested validation of Android/F-Droid package names

2018-09-07 14:17:39 +02:00

androguard_test.py

update: find aapt when it is not in the PATH

2017-05-18 17:21:05 +02:00

bad-unicode-πÇÇ现代通用字-български-عربي1.apk

rename test files to work round filename length limits

2017-11-27 16:57:30 +01:00

build.TestCase

build: reuse common methods for getting metadata from APKs

2018-09-18 10:55:51 +02:00

check-fdroid-apk

use standard User-Agent in check-fdroid-apk

2018-01-26 10:18:41 +01:00

checkupdates.TestCase

fix all bandit B310 urllib_urlopen

2020-01-31 15:37:30 +01:00

common.TestCase

git_mirror_size_limit config option to set max git mirror size

2020-01-14 11:36:08 +01:00

complete-ci-tests

move pylint run to standalone gitlab-ci job

2018-05-14 15:25:33 +02:00

config.py

update: do not set targetSdkVersion if the APK is missing it

2018-10-10 15:29:02 +02:00

corrupt-featureGraphic.png

update: log errors on bad graphics, and then ignore the file

2019-09-26 22:06:21 +02:00

description-parsing.py

tests: switch to python3

2016-03-11 13:27:00 +00:00

dummy-keystore.jks

added functions for storing/loading signer fingerprints to stats

2017-09-26 14:11:09 +02:00

dump_internal_metadata_format.py

fix metadata dump test to run on CI servers

2017-02-28 12:08:04 +01:00

exception.TestCase

added cwd setup boiler-plate to *.TestCase where missing

2018-08-14 10:34:13 +02:00

gradle-release-checksums.py

gitlab-ci: check gradle checksums against official list

2019-09-12 14:18:07 +02:00

import_proxy.py

add a basic test of fdroid import

2015-09-10 11:08:40 +02:00

import.TestCase

added cwd setup boiler-plate to *.TestCase where missing

2018-08-14 10:34:13 +02:00

index.TestCase

made index.TestCase run independant of cwd

2018-08-14 10:08:03 +02:00

install.TestCase

added cwd setup boiler-plate to *.TestCase where missing

2018-08-14 10:34:13 +02:00

IsMD5Disabled.java

tests: support Java setups where MD5 is not disabled by default

2017-09-19 20:16:08 +02:00

janus.apk

update: reject APKs with invalid file sig, probably Janus exploits

2017-12-14 16:57:22 +01:00

keystore.jks

tests: add test for correctly handling CVC when archiving

2019-12-24 17:35:54 +01:00

lint.TestCase

lint: improve HTTPS check

2019-10-04 11:12:48 +02:00

main.TestCase

remove dscanner subcommand

2020-01-31 14:17:12 +01:00

metadata.TestCase

parse yaml: ignore (and warn) deprecated field: Provides

2019-07-15 15:45:02 +02:00

openssl-version-check-test.py

update: update openssl KnownVuln scan to handle all recent versions

2017-07-06 13:31:42 +02:00

org.bitbucket.tickytacky.mirrormirror_1.apk

update: allow_disabled_algorithms option to keep MD5 sigs in repo

2017-07-03 10:02:51 +02:00

org.bitbucket.tickytacky.mirrormirror_2.apk

update: allow_disabled_algorithms option to keep MD5 sigs in repo

2017-07-03 10:02:51 +02:00

org.bitbucket.tickytacky.mirrormirror_3.apk

update: allow_disabled_algorithms option to keep MD5 sigs in repo

2017-07-03 10:02:51 +02:00

org.bitbucket.tickytacky.mirrormirror_4.apk

update: allow_disabled_algorithms option to keep MD5 sigs in repo

2017-07-03 10:02:51 +02:00

org.dyndns.fules.ck_20.apk

use androguard if aapt isn't found

2017-05-04 23:35:17 +02:00

publish.TestCase

added cwd setup boiler-plate to *.TestCase where missing

2018-08-14 10:34:13 +02:00

rewritemeta.TestCase

do not delete yml metadata when raumel not installed

2019-08-27 15:38:40 +02:00

run-tests

git_mirror_size_limit config option to set max git mirror size

2020-01-14 11:36:08 +01:00

scanner.TestCase

Update scanner.TestCase to match new regex regime

2019-11-02 18:54:54 +00:00

server.TestCase

added tests for update_serverwebroot

2018-06-19 12:24:52 +02:00

signatures.TestCase

added cwd setup boiler-plate to *.TestCase where missing

2018-08-14 10:34:13 +02:00

SpeedoMeterApp.main_1.apk

update: do not crash with androguard when working with apps without icons

2018-03-12 17:55:45 +01:00

testcommon.py

added signatures subcommand

2017-09-07 00:03:35 +02:00

update.TestCase

update: parse Triple-T v2.x layout

2019-10-04 14:11:40 +02:00

urzip-badcert.apk

include test cases for python getsig replacement

2014-11-07 09:20:33 +00:00

urzip-badsig.apk

include test cases for python getsig replacement

2014-11-07 09:20:33 +00:00

urzip-release-unsigned.apk

added test case for common.isApkDebuggable()

2014-12-14 13:25:20 +01:00

urzip-release.apk

added test case for common.isApkDebuggable()

2014-12-14 13:25:20 +01:00

urzip.apk

tests: try fdroid update after adding an APK to an existing repo

2014-06-04 21:54:55 -04:00

v2.only.sig_2.apk

support APK Signature V2 when apksigner is installed

2019-02-01 09:17:56 +01:00