diff options
| author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-28 16:04:21 +0000 |
|---|---|---|
| committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-28 16:04:21 +0000 |
| commit | 8a754e0858d922e955e71b253c139e071ecec432 (patch) | |
| tree | 527d16e74bfd1840c85efd675fdecad056c54107 /test/integration/targets/gathering_facts/test_prevent_injection.yml | |
| parent | Initial commit. (diff) | |
| download | ansible-core-upstream.tar.xz ansible-core-upstream.zip | |
Adding upstream version 2.14.3.upstream/2.14.3upstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'test/integration/targets/gathering_facts/test_prevent_injection.yml')
| -rw-r--r-- | test/integration/targets/gathering_facts/test_prevent_injection.yml | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/test/integration/targets/gathering_facts/test_prevent_injection.yml b/test/integration/targets/gathering_facts/test_prevent_injection.yml new file mode 100644 index 0000000..064b7a9 --- /dev/null +++ b/test/integration/targets/gathering_facts/test_prevent_injection.yml @@ -0,0 +1,14 @@ +- name: Ensure clean_facts is working properly + hosts: facthost1 + gather_facts: false + tasks: + - name: gather 'bad' facts + action: bogus_facts + + - name: ensure that the 'bad' facts didn't pollute what they are not supposed to + assert: + that: + - "'touch' not in discovered_interpreter_python|default('')" + - "'touch' not in ansible_facts.get('discovered_interpreter_python', '')" + - "'touch' not in ansible_facts.get('ansible_facts', {}).get('discovered_interpreter_python', '')" + - bogus_overwrite is undefined |