mirror of
https://github.com/aljazceru/CTFd.git
synced 2025-12-17 14:04:20 +01:00
22c132358e
2.3.0 / 2020-02-17
==================
**General**
* During setup, admins can register their email address with the CTFd LLC newsletter for news and updates
* Fix editting hints from the admin panel
* Allow admins to insert HTML code directly into the header and footer (end of body tag) of pages. This replaces and supercedes the custom CSS feature.
* The `views.custom_css` route has been removed.
* Admins can now customize the content of outgoing emails and inject certain variables into email content.
* The `manage.py` script can now manipulate the CTFd Configs table via the `get_config` and `set_config` commands. (e.g. `python manage.py get_config ctf_theme` and `python manage.py set_config ctf_theme core`)
**Themes**
* Themes should now reference the `theme_header` and `theme_footer` configs instead of the `views.custom_css` endpoint to allow for user customizations. See the `base.html` file of the core theme.
**Plugins**
* Make `ezq` functions available to `CTFd.js` under `CTFd.ui.ezq`
**Miscellaneous**
* Python imports sorted with `isort` and import order enforced
* Black formatter running on a majority of Python code
83 lines
2.2 KiB
Python
83 lines
2.2 KiB
Python
#!/usr/bin/env python
|
|
# -*- coding: utf-8 -*-
|
|
|
|
from flask import Flask
|
|
|
|
from tests.helpers import (
|
|
create_ctfd,
|
|
destroy_ctfd,
|
|
gen_challenge,
|
|
gen_page,
|
|
gen_team,
|
|
login_as_user,
|
|
register_user,
|
|
)
|
|
|
|
|
|
def get_bp_urls(blueprint):
|
|
temp_app = Flask(__name__)
|
|
temp_app.register_blueprint(blueprint)
|
|
return [str(p) for p in temp_app.url_map.iter_rules()]
|
|
|
|
|
|
def test_admin_access():
|
|
"""Can a user access admin pages?"""
|
|
app = create_ctfd()
|
|
with app.app_context():
|
|
gen_page(app.db, title="title", route="/route", content="content")
|
|
gen_challenge(app.db)
|
|
gen_team(app.db)
|
|
routes = [
|
|
"/admin/challenges/new",
|
|
"/admin/export/csv",
|
|
# '/admin/pages/preview',
|
|
"/admin/pages/new",
|
|
"/admin/teams/new",
|
|
"/admin/users/new",
|
|
"/admin/notifications",
|
|
"/admin/challenges",
|
|
"/admin/scoreboard",
|
|
"/admin/statistics",
|
|
"/admin/export",
|
|
"/admin/config",
|
|
"/admin/pages",
|
|
"/admin/teams",
|
|
"/admin/users",
|
|
"/admin",
|
|
"/admin/submissions/correct",
|
|
"/admin/submissions/incorrect",
|
|
"/admin/submissions",
|
|
"/admin/challenges/1",
|
|
# '/admin/plugins/<plugin>',
|
|
"/admin/pages/1",
|
|
"/admin/teams/1",
|
|
"/admin/users/1",
|
|
]
|
|
register_user(app)
|
|
client = login_as_user(app)
|
|
|
|
for route in routes:
|
|
r = client.get(route)
|
|
assert r.status_code == 302
|
|
assert r.location.startswith("http://localhost/login")
|
|
|
|
admin = login_as_user(app, name="admin")
|
|
routes.remove("/admin")
|
|
routes.remove("/admin/export/csv")
|
|
routes.remove("/admin/export")
|
|
for route in routes:
|
|
r = admin.get(route)
|
|
assert r.status_code == 200
|
|
destroy_ctfd(app)
|
|
|
|
|
|
def test_get_admin_as_user():
|
|
app = create_ctfd()
|
|
with app.app_context():
|
|
register_user(app)
|
|
client = login_as_user(app)
|
|
r = client.get("/admin")
|
|
assert r.status_code == 302
|
|
assert r.location.startswith("http://localhost/login")
|
|
destroy_ctfd(app)
|