python3Packages.datasette: add patch for CVE-2021-32670

enable included test
This commit is contained in:
Robert Scott 2021-06-09 00:04:28 +01:00
parent a76d51dc52
commit eabf99b8d8
1 changed files with 11 additions and 0 deletions

View File

@ -1,6 +1,7 @@
{ lib
, buildPythonPackage
, fetchFromGitHub
, fetchpatch
, aiofiles
, asgi-csrf
, click
@ -36,6 +37,14 @@ buildPythonPackage rec {
sha256 = "sha256-Ixh56X9dI/FIJPXHXXGnFiYj3qeBmvW5L1FF7/0ofUQ=";
};
patches = [
(fetchpatch {
name = "CVE-2021-32670.patch";
url = "https://github.com/simonw/datasette/commit/26fc539312bca2551b6f048b6bcf4ffbb491289f.patch";
sha256 = "1d4yy6dqb4l7y0c5xpdvl66522ckdb34wnqvzqw73pdl2hr5jsml";
})
];
nativeBuildInputs = [ pytestrunner ];
propagatedBuildInputs = [
@ -80,6 +89,8 @@ buildPythonPackage rec {
# just run the csv tests, as this should give some indictation of correctness
pytestFlagsArray = [
"tests/test_csv.py"
# covers patched CVE-2021-32670
"tests/test_html.py"
];
disabledTests = [
"facet"