## Alternatives
- [django-sql-explorer](https://github.com/groveco/django-sql-explorer) provides a related set of functionality that also works against database backends other than PostgreSQL
================================================
FILE: conftest.py
================================================
import pytest
from django.contrib.auth.models import Permission
from django_sql_dashboard.models import Dashboard
def pytest_collection_modifyitems(items):
"""Add django_db marker with databases to tests that need database access."""
for item in items:
fixturenames = getattr(item, "fixturenames", ())
# Tests using client fixtures or dashboard_db need both databases
if any(f in fixturenames for f in ("admin_client", "client", "dashboard_db")):
item.add_marker(pytest.mark.django_db(databases=["default", "dashboard"]))
@pytest.fixture
def dashboard_db(settings):
settings.DATABASES["dashboard"]["OPTIONS"] = {
"options": "-c default_transaction_read_only=on -c statement_timeout=100"
}
@pytest.fixture
def execute_sql_permission():
return Permission.objects.get(
content_type__app_label="django_sql_dashboard",
content_type__model="dashboard",
codename="execute_sql",
)
@pytest.fixture
def saved_dashboard(dashboard_db):
dashboard = Dashboard.objects.create(
slug="test",
title="Test dashboard",
description="This [supports markdown](http://example.com/)",
view_policy="public",
)
dashboard.queries.create(sql="select 11 + 33")
dashboard.queries.create(sql="select 22 + 55")
return dashboard
================================================
FILE: django_sql_dashboard/__init__.py
================================================
urls = "django_sql_dashboard.urls"
================================================
FILE: django_sql_dashboard/admin.py
================================================
from html import escape
from django.contrib import admin
from django.utils.safestring import mark_safe
from .models import Dashboard, DashboardQuery
class DashboardQueryInline(admin.TabularInline):
model = DashboardQuery
extra = 1
def has_change_permission(self, request, obj=None):
if obj is None:
return True
return obj.user_can_edit(request.user)
def get_readonly_fields(self, request, obj=None):
if not request.user.has_perm("django_sql_dashboard.execute_sql"):
return ("sql",)
else:
return tuple()
@admin.register(Dashboard)
class DashboardAdmin(admin.ModelAdmin):
list_display = ("slug", "title", "owned_by", "view_policy", "view_dashboard")
inlines = [
DashboardQueryInline,
]
raw_id_fields = ("owned_by",)
fieldsets = (
(
None,
{"fields": ("slug", "title", "description", "owned_by", "created_at")},
),
(
"Permissions",
{"fields": ("view_policy", "edit_policy", "view_group", "edit_group")},
),
)
def view_dashboard(self, obj):
return mark_safe(
'{path}'.format(path=escape(obj.get_absolute_url()))
)
def save_model(self, request, obj, form, change):
if not obj.owned_by_id:
obj.owned_by = request.user
obj.save()
def has_change_permission(self, request, obj=None):
if obj is None:
return True
if request.user.is_superuser:
return True
return obj.user_can_edit(request.user)
def get_readonly_fields(self, request, obj):
readonly_fields = ["created_at"]
if not request.user.is_superuser:
readonly_fields.append("owned_by")
return readonly_fields
def get_queryset(self, request):
if request.user.is_superuser:
# Superusers should be able to see all dashboards.
return super().get_queryset(request)
# Otherwise, show only the dashboards the user has edit access to.
return Dashboard.get_editable_by_user(request.user)
================================================
FILE: django_sql_dashboard/apps.py
================================================
from django.apps import AppConfig
class DjangoSqlDashboardConfig(AppConfig):
name = "django_sql_dashboard"
default_auto_field = "django.db.models.AutoField"
================================================
FILE: django_sql_dashboard/migrations/0001_initial.py
================================================
# Generated by Django 3.1.7 on 2021-03-13 04:32
import django.db.models.deletion
from django.db import migrations, models
class Migration(migrations.Migration):
initial = True
dependencies = []
operations = [
migrations.CreateModel(
name="Dashboard",
fields=[
(
"id",
models.AutoField(
auto_created=True,
primary_key=True,
serialize=False,
verbose_name="ID",
),
),
("slug", models.SlugField(unique=True)),
("title", models.CharField(blank=True, max_length=128)),
("description", models.TextField(blank=True)),
],
options={
"permissions": [("execute_sql", "Can execute arbitrary SQL queries")],
},
),
migrations.CreateModel(
name="DashboardQuery",
fields=[
(
"id",
models.AutoField(
auto_created=True,
primary_key=True,
serialize=False,
verbose_name="ID",
),
),
("sql", models.TextField()),
(
"dashboard",
models.ForeignKey(
on_delete=django.db.models.deletion.CASCADE,
related_name="queries",
to="django_sql_dashboard.dashboard",
),
),
],
options={
"verbose_name_plural": "Dashboard queries",
"order_with_respect_to": "dashboard",
},
),
]
================================================
FILE: django_sql_dashboard/migrations/0002_dashboard_permissions.py
================================================
# Generated by Django 3.1.7 on 2021-03-16 16:11
import django.db.models.deletion
import django.utils.timezone
from django.conf import settings
from django.db import migrations, models
class Migration(migrations.Migration):
dependencies = [
migrations.swappable_dependency(settings.AUTH_USER_MODEL),
("django_sql_dashboard", "0001_initial"),
]
operations = [
migrations.AddField(
model_name="dashboard",
name="created_at",
field=models.DateTimeField(default=django.utils.timezone.now),
),
migrations.AddField(
model_name="dashboard",
name="edit_group",
field=models.ForeignKey(
blank=True,
null=True,
on_delete=django.db.models.deletion.SET_NULL,
related_name="can_edit_dashboards",
to="auth.group",
),
),
migrations.AddField(
model_name="dashboard",
name="edit_policy",
field=models.CharField(
choices=[
("private", "Private"),
("loggedin", "Logged-in users"),
("group", "Users in group"),
("staff", "Staff users"),
("superuser", "Superusers"),
],
default="private",
max_length=10,
),
),
migrations.AddField(
model_name="dashboard",
name="owned_by",
field=models.ForeignKey(
blank=True,
null=True,
on_delete=django.db.models.deletion.SET_NULL,
related_name="owned_dashboards",
to=settings.AUTH_USER_MODEL,
),
),
migrations.AddField(
model_name="dashboard",
name="view_group",
field=models.ForeignKey(
blank=True,
null=True,
on_delete=django.db.models.deletion.SET_NULL,
related_name="can_view_dashboards",
to="auth.group",
),
),
migrations.AddField(
model_name="dashboard",
name="view_policy",
field=models.CharField(
choices=[
("private", "Private"),
("public", "Public"),
("unlisted", "Unlisted"),
("loggedin", "Logged-in users"),
("group", "Users in group"),
("staff", "Staff users"),
("superuser", "Superusers"),
],
default="private",
max_length=10,
),
),
]
================================================
FILE: django_sql_dashboard/migrations/0003_update_metadata.py
================================================
# Generated by Django 3.1.7 on 2021-05-08 15:44
import django.db.models.deletion
from django.conf import settings
from django.db import migrations, models
class Migration(migrations.Migration):
dependencies = [
("auth", "0012_alter_user_first_name_max_length"),
migrations.swappable_dependency(settings.AUTH_USER_MODEL),
("django_sql_dashboard", "0002_dashboard_permissions"),
]
operations = [
migrations.AlterField(
model_name="dashboard",
name="edit_group",
field=models.ForeignKey(
blank=True,
help_text="Group that can edit, for 'Users in group' policy",
null=True,
on_delete=django.db.models.deletion.SET_NULL,
related_name="can_edit_dashboards",
to="auth.group",
),
),
migrations.AlterField(
model_name="dashboard",
name="edit_policy",
field=models.CharField(
choices=[
("private", "Private"),
("loggedin", "Logged-in users"),
("group", "Users in group"),
("staff", "Staff users"),
("superuser", "Superusers"),
],
default="private",
help_text="Who can edit this dashboard",
max_length=10,
),
),
migrations.AlterField(
model_name="dashboard",
name="owned_by",
field=models.ForeignKey(
blank=True,
help_text="User who owns this dashboard",
null=True,
on_delete=django.db.models.deletion.SET_NULL,
related_name="owned_dashboards",
to=settings.AUTH_USER_MODEL,
),
),
migrations.AlterField(
model_name="dashboard",
name="view_group",
field=models.ForeignKey(
blank=True,
help_text="Group that can view, for 'Users in group' policy",
null=True,
on_delete=django.db.models.deletion.SET_NULL,
related_name="can_view_dashboards",
to="auth.group",
),
),
migrations.AlterField(
model_name="dashboard",
name="view_policy",
field=models.CharField(
choices=[
("private", "Private"),
("public", "Public"),
("unlisted", "Unlisted"),
("loggedin", "Logged-in users"),
("group", "Users in group"),
("staff", "Staff users"),
("superuser", "Superusers"),
],
default="private",
help_text="Who can view this dashboard",
max_length=10,
),
),
]
================================================
FILE: django_sql_dashboard/migrations/0004_add_description_help_text.py
================================================
# Generated by Django 3.2.3 on 2021-05-25 10:58
from django.db import migrations, models
class Migration(migrations.Migration):
dependencies = [
("django_sql_dashboard", "0003_update_metadata"),
]
operations = [
migrations.AlterField(
model_name="dashboard",
name="description",
field=models.TextField(
blank=True, help_text="Optional description (Markdown allowed)"
),
),
]
================================================
FILE: django_sql_dashboard/migrations/__init__.py
================================================
================================================
FILE: django_sql_dashboard/models.py
================================================
from django.conf import settings
from django.db import models
from django.urls import reverse
from django.utils import timezone
class Dashboard(models.Model):
slug = models.SlugField(unique=True)
title = models.CharField(blank=True, max_length=128)
description = models.TextField(
blank=True, help_text="Optional description (Markdown allowed)"
)
owned_by = models.ForeignKey(
settings.AUTH_USER_MODEL,
null=True,
blank=True,
on_delete=models.SET_NULL,
related_name="owned_dashboards",
help_text="User who owns this dashboard",
)
created_at = models.DateTimeField(default=timezone.now)
class ViewPolicies(models.TextChoices):
PRIVATE = ("private", "Private")
PUBLIC = ("public", "Public")
UNLISTED = ("unlisted", "Unlisted")
LOGGEDIN = ("loggedin", "Logged-in users")
GROUP = ("group", "Users in group")
STAFF = ("staff", "Staff users")
SUPERUSER = ("superuser", "Superusers")
class EditPolicies(models.TextChoices):
PRIVATE = ("private", "Private")
LOGGEDIN = ("loggedin", "Logged-in users")
GROUP = ("group", "Users in group")
STAFF = ("staff", "Staff users")
SUPERUSER = ("superuser", "Superusers")
# Permissions
view_policy = models.CharField(
max_length=10,
choices=ViewPolicies.choices,
default=ViewPolicies.PRIVATE,
help_text="Who can view this dashboard",
)
edit_policy = models.CharField(
max_length=10,
choices=EditPolicies.choices,
default=EditPolicies.PRIVATE,
help_text="Who can edit this dashboard",
)
view_group = models.ForeignKey(
"auth.Group",
null=True,
blank=True,
on_delete=models.SET_NULL,
related_name="can_view_dashboards",
help_text="Group that can view, for 'Users in group' policy",
)
edit_group = models.ForeignKey(
"auth.Group",
null=True,
blank=True,
on_delete=models.SET_NULL,
related_name="can_edit_dashboards",
help_text="Group that can edit, for 'Users in group' policy",
)
def __str__(self):
return self.title or self.slug
def view_summary(self):
s = self.get_view_policy_display()
if self.view_policy == "group":
s += ' "{}"'.format(self.view_group)
return s
def get_absolute_url(self):
return reverse("django_sql_dashboard-dashboard", args=[self.slug])
def get_edit_url(self):
return reverse("admin:django_sql_dashboard_dashboard_change", args=(self.id,))
class Meta:
permissions = [("execute_sql", "Can execute arbitrary SQL queries")]
def user_can_edit(self, user):
if not user:
return False
if self.owned_by == user:
return True
if self.edit_policy == self.EditPolicies.LOGGEDIN:
return True
if self.edit_policy == self.EditPolicies.STAFF and user.is_staff:
return True
if self.edit_policy == self.EditPolicies.SUPERUSER and user.is_superuser:
return True
if (
self.edit_policy == self.EditPolicies.GROUP
and self.edit_group
and self.edit_group.user_set.filter(pk=user.pk).exists()
):
return True
return False
@classmethod
def get_editable_by_user(cls, user):
allowed_policies = [cls.EditPolicies.LOGGEDIN]
if user.is_staff:
allowed_policies.append(cls.EditPolicies.STAFF)
if user.is_superuser:
allowed_policies.append(cls.EditPolicies.SUPERUSER)
return (
cls.objects.filter(
models.Q(owned_by=user)
| models.Q(edit_policy__in=allowed_policies)
| models.Q(edit_policy=cls.EditPolicies.GROUP, edit_group__user=user)
)
).distinct()
@classmethod
def get_visible_to_user(cls, user):
allowed_policies = [cls.ViewPolicies.PUBLIC, cls.ViewPolicies.LOGGEDIN]
if user.is_staff:
allowed_policies.append(cls.ViewPolicies.STAFF)
if user.is_superuser:
allowed_policies.append(cls.ViewPolicies.SUPERUSER)
return (
cls.objects.filter(
models.Q(owned_by=user)
| models.Q(view_policy__in=allowed_policies)
| models.Q(view_policy=cls.ViewPolicies.GROUP, view_group__user=user)
)
.annotate(
is_owner=models.ExpressionWrapper(
models.Q(owned_by__exact=user.pk),
output_field=models.BooleanField(),
)
)
.order_by("-is_owner", "slug")
).distinct()
class DashboardQuery(models.Model):
dashboard = models.ForeignKey(
Dashboard, related_name="queries", on_delete=models.CASCADE
)
sql = models.TextField()
def __str__(self):
return self.sql
class Meta:
verbose_name_plural = "Dashboard queries"
order_with_respect_to = "dashboard"
================================================
FILE: django_sql_dashboard/templates/django_sql_dashboard/_css.html
================================================
main {
margin-top: 1em;
font-family: Helvetica, sans-serif;
}
main img {
height: 2em;
}
table {
margin-top: 1em;
border-collapse: collapse;
border-spacing: 0;
}
th {
white-space: nowrap;
text-align: left;
padding: 4px;
padding-right: 1em;
border-right: 1px solid #eee;
}
td {
border-top: 1px solid #aaa;
border-right: 1px solid #eee;
padding: 4px;
vertical-align: top;
white-space: pre-wrap;
}
span.null {
color: #aaa;
font-weight: bold;
}
pre.json {
margin: 0;
}
.btn {
font-weight: 400;
cursor: pointer;
text-align: center;
vertical-align: middle;
border: 1px solid #666;
padding: 0.5em 0.8em;
font-size: 0.9rem;
line-height: 1;
border-radius: 0.25rem;
}
.query-results {
border: 1px solid #666;
border-right: none;
margin: 1em 0;
padding: 1em;
}
.query-results textarea,
.query-results pre.sql {
width: 95%;
border: 2px solid #666;
padding: 0.5em;
}
.pre-results textarea {
height: 4em;
}
div.query-parameters {
width: 80%;
display: grid;
grid-template-columns: min-content auto;
grid-gap: 0.5em;
align-items: center;
margin-bottom: 1em;
}
div.query-parameters input[type="text"] {
border: 1px solid #666;
padding: 0.5em;
}
div.query-parameters label {
text-align: right;
font-weight: bold;
display: inline-block;
padding-right: 2em;
}
.completed-count-total-count {
width: 60%;
background-color: #efefef;
height: 3em;
}
.completed-count-total-count-bar {
background-color: blue;
height: 3em;
}
.save-dashboard-form p {
width: 80%;
}
.save-dashboard-form label {
text-align: left;
font-weight: bold;
display: inline-block;
width: 20%;
}
.save-dashboard-form input {
border: 1px solid #666;
padding: 0.5em;
}
.save-dashboard-form .errorlist {
color: red;
}
.save-dashboard-form .helptext {
color: #666;
white-space: nowrap;
}
ul.dashboard-columns {
column-count: 2;
}
ul.dashboard-columns li {
break-inside: avoid;
margin-bottom: 0.3em;
}
ul.dashboard-columns li p {
margin: 0;
color: #666;
font-size: 0.8em;
}
@media (max-width: 800px) {
ul.dashboard-columns {
column-count: auto;
}
}
svg.dropdown-menu-icon {
display: inline-block;
position: relative;
top: 2px;
cursor: pointer;
opacity: 0.8;
padding-left: 6px;
}
.dropdown-menu {
border: 1px solid #ccc;
border-radius: 4px;
line-height: 1.4;
font-size: 16px;
box-shadow: 2px 2px 2px #aaa;
background-color: #fff;
z-index: 1000;
}
.dropdown-menu ul,
.dropdown-menu li {
list-style-type: none;
margin: 0;
padding: 0;
}
.dropdown-menu li {
border-bottom: 1px solid #ccc;
}
.dropdown-menu li:last-child {
border: none;
}
.dropdown-menu a:link,
.dropdown-menu a:visited,
.dropdown-menu a:hover,
.dropdown-menu a:focus
.dropdown-menu a:active {
text-decoration: none;
display: block;
padding: 4px 8px 2px 8px;
color: #222;
white-space: nowrap;
}
.dropdown-menu a:hover {
background-color: #eee;
}
.dropdown-menu .hook {
display: block;
position: absolute;
top: -5px;
left: 6px;
width: 0;
height: 0;
border-left: 5px solid transparent;
border-right: 5px solid transparent;
border-bottom: 5px solid #666;
}
================================================
FILE: django_sql_dashboard/templates/django_sql_dashboard/_script.html
================================================
================================================
FILE: django_sql_dashboard/templates/django_sql_dashboard/base.html
================================================
This SQL is too long to bookmark, so sharing a link to this page will not work for these queries.
{% endif %} {% if unverified_sql_queries %}The link you followed here included SQL that was missing its verification signatures.
If this link was provided to you by an untrusted source, they may be trying to trick you into executing queries that you do not want to execute.
Review these queries and copy and paste them once you have confirmed them:
{% for query in unverified_sql_queries %} {% endfor %}By {{ dashboard.owned_by }}, Visibility: {{ dashboard.view_summary }} {% if can_edit %} - edit {% endif %}
{{ table.columns }}
{% if user_owns_dashboard %} Owned by you, {% else %} Owned by {{ dashboard.owned_by }}, {% endif %} visibility: {{ dashboard.view_summary }} {% if user_can_edit_dashboard %} - edit {% endif %}
{% include "django_sql_dashboard/_script.html" %} {% endblock %} ================================================ FILE: django_sql_dashboard/templates/django_sql_dashboard/widgets/_base_widget.html ================================================{{ result.sql }}{% else %}{% endif %}
{% if not saved_dashboard %}{% endif %}
{{ row.label }}
{{ result.sql }}{% else %}{% endif %}
{% if not saved_dashboard %}{% else %}
Results were truncated {% if user_can_export_data and not saved_dashboard %} {% endif %}
{% else %}{{ result.row_lists|length }} row{{ result.row_lists|length|pluralize }}
{% endif %} {% if result.error %}{{ result.error }}
{% endif %}| {{ column.name }} | {% endfor %}
|---|
| {% if item is None %}- null -{% else %}{{ item|format_cell }}{% endif %} | {% endfor %}
Duration: {{ result.duration_ms|floatformat:2 }}ms
{{ result.sql }}
{% else %}
{% endif %}
{}'.format(
escape(json.dumps(json.loads(value), indent=2))
)
)
except json.JSONDecodeError:
pass
return mark_safe(urlize(value, nofollow=True, autoescape=True))
================================================
FILE: django_sql_dashboard/urls.py
================================================
from django.urls import path
from .views import dashboard, dashboard_json, dashboard_index
urlpatterns = [
path("", dashboard_index, name="django_sql_dashboard-index"),
path("{{ row.label }}
this is bad' in html def test_dashboard_show_available_tables(admin_client): response = admin_client.get("/dashboard/") soup = BeautifulSoup(response.content, "html5lib") lis = soup.find("ul").findAll("li") details = [ { "table": li.find("a").text, "columns": li.find("p").text, "href": li.find("a")["href"], } for li in lis if li.find("a").text.startswith("django_sql_dashboard") or li.find("a").text == "switches" ] # Decode the href in each one into a SQL query for detail in details: href = detail.pop("href") detail["href_sql"] = urllib.parse.parse_qs(href)["sql"][0].rsplit(":", 1)[0] assert details == [ { "table": "django_sql_dashboard_dashboard", "columns": "id, slug, title, description, created_at, edit_group_id, edit_policy, owned_by_id, view_group_id, view_policy", "href_sql": "select id, slug, title, description, created_at, edit_group_id, edit_policy, owned_by_id, view_group_id, view_policy from django_sql_dashboard_dashboard", }, { "table": "django_sql_dashboard_dashboardquery", "columns": "id, sql, dashboard_id, _order", "href_sql": "select id, sql, dashboard_id, _order from django_sql_dashboard_dashboardquery", }, { "table": "switches", "columns": "id, name, on", "href_sql": 'select id, name, "on" from switches', }, ] ================================================ FILE: test_project/test_dashboard_permissions.py ================================================ from enum import Enum import pytest from bs4 import BeautifulSoup from django.contrib.auth.models import Group, User from django_sql_dashboard.models import Dashboard def test_anonymous_user_redirected_to_login(client): response = client.get("/dashboard/?sql=select+1") assert response.status_code == 302 assert response.url == "/admin/login/?next=/dashboard/%3Fsql%3Dselect%2B1" def test_superusers_allowed(admin_client, dashboard_db): response = admin_client.get("/dashboard/") assert response.status_code == 200 assert b"
select 22 + 55' in response.content assert b"Export all as CSV" not in response.content def test_export_csv(admin_client, dashboard_db, settings): settings.DASHBOARD_ENABLE_FULL_EXPORT = True response = admin_client.post( "/dashboard/", { "sql": "SELECT 'hello' as label, * FROM generate_series(0, 10000)", "export_csv_0": "1", }, ) body = b"".join(response.streaming_content) assert body.startswith( b"label,generate_series\r\nhello,0\r\nhello,1\r\nhello,2\r\n" ) assert body.endswith(b"hello,9998\r\nhello,9999\r\nhello,10000\r\n") assert response["Content-Type"] == "text/csv" content_disposition = response["Content-Disposition"] assert content_disposition.startswith( 'attachment; filename="select--hello--as-label' ) assert content_disposition.endswith('.csv"') def test_export_tsv(admin_client, dashboard_db, settings): settings.DASHBOARD_ENABLE_FULL_EXPORT = True response = admin_client.post( "/dashboard/", { "sql": "SELECT 'hello' as label, * FROM generate_series(0, 10000)", "export_tsv_0": "1", }, ) body = b"".join(response.streaming_content) assert body.startswith( b"label\tgenerate_series\r\nhello\t0\r\nhello\t1\r\nhello\t2\r\n" ) assert body.endswith(b"hello\t9998\r\nhello\t9999\r\nhello\t10000\r\n") assert response["Content-Type"] == "text/tab-separated-values" content_disposition = response["Content-Disposition"] assert content_disposition.startswith( 'attachment; filename="select--hello--as-label' ) assert content_disposition.endswith('.tsv"') @pytest.mark.parametrize("json_disabled", (False, True)) def test_export_json(admin_client, saved_dashboard, settings, json_disabled): if json_disabled: settings.DASHBOARD_DISABLE_JSON = True response = admin_client.get("/dashboard/test.json") if json_disabled: assert response.status_code == 403 return assert response.status_code == 200 assert response["Content-Type"] == "application/json" assert response.json() == { "title": "Test dashboard", "queries": [ {"sql": "select 11 + 33", "rows": [{"?column?": 44}]}, {"sql": "select 22 + 55", "rows": [{"?column?": 77}]}, ], } ================================================ FILE: test_project/test_parameters.py ================================================ from urllib.parse import urlencode import pytest from django.core import signing from django_sql_dashboard.models import Dashboard from django_sql_dashboard.utils import sign_sql def test_parameter_form(admin_client, dashboard_db): response = admin_client.get( "/dashboard/?" + urlencode( { "sql": signed_sql( [ "select %(foo)s as foo, %(bar)s as bar", "select select %(foo)s as foo, select %(baz)s as baz", ] ) }, doseq=True, ) ) assert response.status_code == 200 html = response.content.decode("utf-8") # Form should have three form fields for fragment in ( '', '', '', '', '', '', ): assert fragment in html def test_parameters_applied(admin_client, dashboard_db): response = admin_client.get( "/dashboard/?" + urlencode( { "sql": signed_sql( [ "select %(foo)s || '!' as exclaim", "select %(foo)s || '! ' || %(bar)s || '!!' as double_exclaim", ] ), "foo": "FOO", "bar": "BAR", }, doseq=True, ) ) assert response.status_code == 200 html = response.content.decode("utf-8") assert "
{\n'
' "hello": [\n'
" 1,\n"
" 2,\n"
" 3\n"
" ]\n"
"}Big
\n" "There
And
There
And