HAL9000
cef70ff98a
Add Robot Framework integration test verifying that load_from_entry_points does not call ep.load() for entry points with disallowed module prefixes (security regression test for issue #7476). Also add HAL 9000 to CONTRIBUTORS.md per CONTRIBUTING.md process rules. ISSUES CLOSED: #7476
103 lines
4.7 KiB
Plaintext
103 lines
4.7 KiB
Plaintext
*** Settings ***
|
|
Documentation Integration tests for Plugin Architecture Framework
|
|
Resource ${CURDIR}/common.resource
|
|
Suite Setup Setup Test Environment
|
|
Suite Teardown Cleanup Test Environment
|
|
|
|
*** Variables ***
|
|
${HELPER} ${CURDIR}/helper_plugin_architecture.py
|
|
|
|
*** Test Cases ***
|
|
PluginLoader Loads Valid Class
|
|
[Documentation] Verify PluginLoader can import a class from module:ClassName
|
|
${result}= Run Process ${PYTHON} ${HELPER} load-class cwd=${WORKSPACE}
|
|
Log ${result.stdout}
|
|
Log ${result.stderr}
|
|
Should Be Equal As Integers ${result.rc} 0
|
|
Should Contain ${result.stdout} plugin-load-class-ok
|
|
|
|
PluginLoader Rejects Disallowed Module Prefix
|
|
[Documentation] Verify PluginLoader security prefix allowlist
|
|
${result}= Run Process ${PYTHON} ${HELPER} prefix-security cwd=${WORKSPACE}
|
|
Log ${result.stdout}
|
|
Log ${result.stderr}
|
|
Should Be Equal As Integers ${result.rc} 0
|
|
Should Contain ${result.stdout} plugin-prefix-security-ok
|
|
|
|
PluginLoader Protocol Validation Pass
|
|
[Documentation] Verify protocol validation succeeds for conforming class
|
|
${result}= Run Process ${PYTHON} ${HELPER} protocol-pass cwd=${WORKSPACE}
|
|
Log ${result.stdout}
|
|
Log ${result.stderr}
|
|
Should Be Equal As Integers ${result.rc} 0
|
|
Should Contain ${result.stdout} plugin-protocol-pass-ok
|
|
|
|
PluginLoader Protocol Validation Fail
|
|
[Documentation] Verify protocol validation fails for non-conforming class
|
|
${result}= Run Process ${PYTHON} ${HELPER} protocol-fail cwd=${WORKSPACE}
|
|
Log ${result.stdout}
|
|
Log ${result.stderr}
|
|
Should Be Equal As Integers ${result.rc} 0
|
|
Should Contain ${result.stdout} plugin-protocol-fail-ok
|
|
|
|
PluginManager Lifecycle
|
|
[Documentation] Verify register -> activate -> deactivate lifecycle
|
|
${result}= Run Process ${PYTHON} ${HELPER} lifecycle cwd=${WORKSPACE}
|
|
Log ${result.stdout}
|
|
Log ${result.stderr}
|
|
Should Be Equal As Integers ${result.rc} 0
|
|
Should Contain ${result.stdout} plugin-lifecycle-ok
|
|
|
|
PluginManager Config-Driven Registration
|
|
[Documentation] Verify config-driven plugin registration
|
|
${result}= Run Process ${PYTHON} ${HELPER} config-registration cwd=${WORKSPACE}
|
|
Log ${result.stdout}
|
|
Log ${result.stderr}
|
|
Should Be Equal As Integers ${result.rc} 0
|
|
Should Contain ${result.stdout} plugin-config-registration-ok
|
|
|
|
PluginManager Error Handling
|
|
[Documentation] Verify error transitions and exception types
|
|
${result}= Run Process ${PYTHON} ${HELPER} error-handling cwd=${WORKSPACE}
|
|
Log ${result.stdout}
|
|
Log ${result.stderr}
|
|
Should Be Equal As Integers ${result.rc} 0
|
|
Should Contain ${result.stdout} plugin-error-handling-ok
|
|
|
|
DI Container PluginManager Resolution
|
|
[Documentation] Verify DI container resolves PluginManager singleton
|
|
${result}= Run Process ${PYTHON} ${HELPER} di-resolution cwd=${WORKSPACE}
|
|
Log ${result.stdout}
|
|
Log ${result.stderr}
|
|
Should Be Equal As Integers ${result.rc} 0
|
|
Should Contain ${result.stdout} plugin-di-resolution-ok
|
|
|
|
PluginManager Thread Safety
|
|
[Documentation] Verify concurrent plugin registration is thread-safe
|
|
${result}= Run Process ${PYTHON} ${HELPER} thread-safety cwd=${WORKSPACE}
|
|
Log ${result.stdout}
|
|
Log ${result.stderr}
|
|
Should Be Equal As Integers ${result.rc} 0
|
|
Should Contain ${result.stdout} plugin-thread-safety-ok
|
|
|
|
PluginManager Extension Points
|
|
[Documentation] Verify extension point registration and listing
|
|
${result}= Run Process ${PYTHON} ${HELPER} extension-points cwd=${WORKSPACE}
|
|
Log ${result.stdout}
|
|
Log ${result.stderr}
|
|
Should Be Equal As Integers ${result.rc} 0
|
|
Should Contain ${result.stdout} plugin-extension-points-ok
|
|
|
|
PluginLoader Entry Point Security - Disallowed Prefix Not Loaded
|
|
[Documentation] Security regression test for issue #7476.
|
|
...
|
|
... Verifies that load_from_entry_points does NOT call ep.load()
|
|
... for entry points whose module prefix is not in the allowlist.
|
|
... This ensures arbitrary code execution is prevented even when
|
|
... a malicious package registers an entry point.
|
|
${result}= Run Process ${PYTHON} ${HELPER} entry-point-security cwd=${WORKSPACE}
|
|
Log ${result.stdout}
|
|
Log ${result.stderr}
|
|
Should Be Equal As Integers ${result.rc} 0
|
|
Should Contain ${result.stdout} plugin-entry-point-security-ok
|