CNV-91916:[CNV-4.20] Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS - #5974

  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0

100 5844k  100 5844k    0     0  14.0M      0 --:--:-- --:--:-- --:--:-- 14.0M
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0

100   928  100   928    0     0   2471      0 --:--:-- --:--:-- --:--:--  2471
warning: The `tool.uv.dev-dependencies` field (used in `pyproject.toml`) is deprecated and will be removed in a future release; use `dependency-groups.dev` instead
Downloading cpython-3.12.14-linux-x86_64-gnu (download) (32.6MiB)
 Downloaded cpython-3.12.14-linux-x86_64-gnu (download)
Using CPython 3.12.14
Creating virtual environment at: .venv
Resolved 182 packages in 7ms
   Building openshift-virtualization-tests-4-20 @ file:///openshift-virtualization-tests
Downloading netaddr (2.2MiB)
Downloading pyvmomi (1.9MiB)
Downloading setuptools (1.1MiB)
Downloading cryptography (4.3MiB)
Downloading openstacksdk (1.7MiB)
Downloading jedi (1.5MiB)
Downloading kubernetes (1.8MiB)
Downloading ruff (12.8MiB)
Downloading pygments (1.2MiB)
Downloading sqlalchemy (3.2MiB)
Downloading pydantic-core (2.0MiB)
Downloading pynacl (1.3MiB)
   Building openshift-python-wrapper-data-collector==2.0.15
   Building pytest-progress==1.3.0
   Building pyhelper-utils==2.0.2
   Building openshift-python-utilities==6.0.15
   Building python-simple-logger==2.0.17
   Building timeout-sampler==1.0.21
   Building python-utility-scripts==2.0.6
   Building pytest-dependency==0.6.0
   Building bitmath==1.3.3.1
 Downloaded pynacl
 Downloaded pygments
 Downloaded pydantic-core
 Downloaded netaddr
 Downloaded sqlalchemy
 Downloaded setuptools
 Downloaded ruff
 Downloaded cryptography
 Downloaded kubernetes
   Building openshift-python-wrapper==4.20.7
 Downloaded openstacksdk
 Downloaded jedi
 Downloaded pyvmomi
      Built python-utility-scripts==2.0.6
      Built python-simple-logger==2.0.17
      Built timeout-sampler==1.0.21
      Built openshift-python-utilities==6.0.15
      Built pyhelper-utils==2.0.2
      Built openshift-python-wrapper==4.20.7
      Built openshift-virtualization-tests-4-20 @ file:///openshift-virtualization-tests
      Built bitmath==1.3.3.1
      Built pytest-progress==1.3.0
      Built openshift-python-wrapper-data-collector==2.0.15
      Built pytest-dependency==0.6.0
Prepared 172 packages in 1m 40s
Installed 172 packages in 1m 03s
 + annotated-types==0.7.0
 + anyio==4.11.0
 + ast-comments==1.2.3
 + asttokens==3.0.0
 + attrs==25.4.0
 + authlib==1.6.5
 + bcrypt==5.0.0
 + beautifulsoup4==4.14.2
 + bitmath==1.3.3.1
 + bs4==0.0.2
 + cachetools==6.2.1
 + certifi==2025.10.5
 + cffi==2.0.0
 + charset-normalizer==3.4.3
 + click==8.3.0
 + cloup==3.0.8
 + colorlog==6.9.0
 + cryptography==46.0.2
 + cyclopts==3.24.0
 + dacite==1.9.2
 + decorator==5.2.1
 + deepdiff==8.6.1
 + defusedxml==0.7.1
 + deprecation==2.1.0
 + dictdiffer==0.9.0
 + dnspython==2.8.0
 + docker==7.1.0
 + docstring-parser==0.17.0
 + docutils==0.22.2
 + dogpile-cache==1.5.0
 + durationpy==0.10
 + email-validator==2.3.0
 + exceptiongroup==1.3.0
 + executing==2.2.1
 + fastmcp==2.12.4
 + google-auth==2.41.1
 + greenlet==3.2.4
 + h11==0.16.0
 + httpcore==1.0.9
 + httpx==0.28.1
 + httpx-sse==0.4.3
 + idna==3.11
 + importlib-metadata==8.7.0
 + importlib-resources==6.5.2
 + iniconfig==2.1.0
 + invoke==2.2.1
 + ipdb==0.13.13
 + ipython==9.6.0
 + ipython-pygments-lexers==1.1.1
 + iso8601==2.1.0
 + isodate==0.7.2
 + jedi==0.19.2
 + jinja2==3.1.6
 + jira==3.10.5
 + jmespath==1.0.1
 + jsonpatch==1.33
 + jsonpointer==3.0.0
 + jsons==1.6.3
 + jsonschema==4.25.1
 + jsonschema-path==0.3.4
 + jsonschema-specifications==2025.9.1
 + keystoneauth1==5.12.0
 + kubernetes==31.0.0
 + lazy-object-proxy==1.12.0
 + markdown-it-py==4.0.0
 + markupsafe==3.0.3
 + marshmallow==4.2.2
 + matplotlib-inline==0.1.7
 + mcp==1.17.0
 + mdurl==0.1.2
 + more-itertools==10.8.0
 + netaddr==1.3.0
 + oauthlib==3.3.1
 + openapi-core==0.19.5
 + openapi-pydantic==0.5.1
 + openapi-schema-validator==0.6.3
 + openapi-spec-validator==0.7.2
 + openshift-python-utilities==6.0.15
 + openshift-python-wrapper==4.20.7
 + openshift-python-wrapper-data-collector==2.0.15
 + openshift-virtualization-tests-4-20==4.20 (from file:///openshift-virtualization-tests)
 + openstacksdk==4.7.1
 + orderly-set==5.5.0
 + os-service-types==1.8.0
 + packaging==25.0
 + paramiko==4.0.0
 + parse==1.20.2
 + parso==0.8.5
 + pathable==0.4.4
 + pbr==7.0.1
 + pexpect==4.9.0
 + platformdirs==4.5.0
 + pluggy==1.6.0
 + podman==5.6.0
 + prompt-toolkit==3.0.52
 + psutil==7.1.0
 + ptyprocess==0.7.0
 + pure-eval==0.2.

[1/2] STEP 1/5: FROM quay.io/fedora/fedora:41 AS builder
[1/2] STEP 2/5: ENV LANG=C.UTF-8
--> Using cache 8a53018c1c6e459c2da57a75ddbbd5426b1a207b62bb01f0cb4902cf39208593
--> 8a53018c1c6e
[1/2] STEP 3/5: ENV CNV_TESTS_CONTAINER=Yes
--> Using cache e5212fc90f73d272a809900ab9f38290a049179334c07e779427f2fa1716b2e6
--> e5212fc90f73
[1/2] STEP 4/5: RUN dnf update -y   && dnf -y install   systemd-container   python3-devel   gcc   sshpass   libcurl-devel   libxslt-devel   libxml2-devel   which   && dnf clean all && rm -rf /var/cache/dnf   && rm -rf /var/lib/dnf   && truncate -s0 /var/log/*.log
--> Using cache 57909786ff48ed1cea06e6ff2fadf5cf325424a179bd5cf82bd39601755bf800
--> 57909786ff48
[1/2] STEP 5/5: COPY / /openshift-virtualization-tests/
--> 90701cdd169f
[2/2] STEP 1/20: FROM quay.io/fedora/fedora:41 AS runner
[2/2] STEP 2/20: ARG TEST_DIR=/openshift-virtualization-tests
--> Using cache a82600b0a0084e1c6c321d8c4c8d835c9a92b590beddec461913fe938352d841
--> a82600b0a008
[2/2] STEP 3/20: ARG OPENSHIFT_PYTHON_WRAPPER_COMMIT=''
--> Using cache 3cb81ee5d7f0897e989d7789661df2cdedc9f189f15079b44db9c1744553398b
--> 3cb81ee5d7f0
[2/2] STEP 4/20: ARG OPENSHIFT_PYTHON_UTILITIES_COMMIT=''
--> Using cache 8b7be88b88705dea84146e863410bb89efd806f6cec7be4d60b3efa09da02c25
--> 8b7be88b8870
[2/2] STEP 5/20: ARG TIMEOUT_SAMPLER_COMMIT=''
--> Using cache 288460d0617f26faae844bfe5b9a57f67ef1aa5f38c18be99dd868ad8a9cad42
--> 288460d0617f
[2/2] STEP 6/20: ENV LANG=C.UTF-8
--> Using cache 758c9134a8ca39663dc40961cff4e393d89d560f9f00107b88be7c5864ef6699
--> 758c9134a8ca
[2/2] STEP 7/20: ENV CNV_TESTS_CONTAINER=Yes
--> Using cache 8327c0ea76c0680bb7b8ff14013e4fe916a8617ba84e4428acdb869810ce571b
--> 8327c0ea76c0
[2/2] STEP 8/20: ENV UV_PYTHON=python3.12
--> Using cache 689a39f5cb7ce7b9d59f3baa8d9cccda3ffd3d66296085abfe58f8d968fb488c
--> 689a39f5cb7c
[2/2] STEP 9/20: ENV UV_NO_SYNC=1
--> Using cache f4191d93297e40c9b9a0dfd5e27b7e3cdbf7548abe9a689af7ec1259ff8c5f81
--> f4191d93297e
[2/2] STEP 10/20: WORKDIR ${TEST_DIR}
--> Using cache 6cf33c8ceea3d6ec59801191ab700c2f3dc0d4f05cf4d8ed933a1b6c93edfd20
--> 6cf33c8ceea3
[2/2] STEP 11/20: ENV UV_CACHE_DIR=${TEST_DIR}/.cache
--> Using cache c8016d327210c17e75d8ad1ab6b8ed9611c6d626646d8e84dd90b42bd92e4f14
--> c8016d327210
[2/2] STEP 12/20: ENV HOME=${TEST_DIR}
--> Using cache 2d1250d107a134a7d7a88ffb58dade1dba6fda1c63817b8ff051ec3422c7d8c3
--> 2d1250d107a1
[2/2] STEP 13/20: RUN dnf update -y   && dnf install -y procps-ng python3 bind-utils jq fwknop parallel wget clang cargo rsync openssl openssl-devel git unzip  && dnf clean all   && rm -rf /var/cache/dnf   && rm -rf /var/lib/dnf   && truncate -s0 /var/log/*.log
--> Using cache a56ffd030fcf8925ec748b7e0ac8dbc8c0e16638e7f63568da94b19cd4d61646
--> a56ffd030fcf
[2/2] STEP 14/20: COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /usr/bin/
--> Using cache cd8a4cdba54d2d6d753fafbc336183fd8716aff8f1bdb6e66f79c8b58bc0b449
--> cd8a4cdba54d
[2/2] STEP 15/20: COPY --from=builder /usr/bin/which /usr/bin/which
--> Using cache b76479a731e0f2e94012f82607766a865ef94e42540ff3a8032ce7a1858930b4
--> b76479a731e0
[2/2] STEP 16/20: COPY --from=builder /usr/bin/sshpass /usr/bin/sshpass
--> Using cache d16cbb3daed3899a61f853b1227870e500dc90e672167c86378b02aa3aed8cc8
--> d16cbb3daed3
[2/2] STEP 17/20: COPY --from=builder ${TEST_DIR}/ ${TEST_DIR}/
--> 77c290930c43
[2/2] STEP 18/20: RUN curl -fsSL https://bws.bitwarden.com/install | sh   && mkdir -p ${TEST_DIR}/.config/bws/state
Downloading bws from: https://github.com/bitwarden/sdk-sm/releases/download/bws-v2.1.0/bws-x86_64-unknown-linux-gnu-2.1.0.zip
Downloading checksum file from: https://github.com/bitwarden/sdk-sm/releases/download/bws-v2.1.0/bws-sha256-checksums-2.1.0.txt
Checksum validation successful.
Installing bws...
Archive:  /tmp/tmp.7D5o73ZvTg/bws.zip
  inflating: /tmp/tmp.7D5o73ZvTg/bws  
Attempting to install bws with sudo. Please enter your password if prompted.
sudo is available and we have the necessary permissions.
Installing bws to /usr/local/bin...
bws installed to /usr/local/bin/bws
--> 8bbf460d7117
[2/2] STEP 19/20: RUN uv sync --locked   && uv export --no-hashes   && if [[ -n "${OPENSHIFT_PYTHON_WRAPPER_COMMIT}" ]]; then uv pip install git+https://github.com/RedHatQE/openshift-python-wrapper.git@$OPENSHIFT_PYTHON_WRAPPER_COMMIT; fi   && if [[ -n "${OPENSHIFT_PYTHON_UTILITIES_COMMIT}" ]]; then uv pip install git+https://github.com/RedHatQE/openshift-python-utilities.git@$OPENSHIFT_PYTHON_UTILITIES_COMMIT; fi   && if [[ -n "${TIMEOUT_SAMPLER_COMMIT}" ]]; then uv pip install git+https://github.com/RedHatQE/timeout-sampler.git@$TIMEOUT_SAMPLER_COMMIT; fi   && rm -rf ${TEST_DIR}/.cache   && rm -rf ${TEST_DIR}/artifacts   && find ${TEST_DIR}/ -type d -name "__pycache__" -print0 | xargs -0 rm -rfv
--> 95a28ff95144
[2/2] STEP 20/20: CMD ["uv", "run", "pytest", "--tc=server_url:${HTTP_IMAGE_SERVER}", "--collect-only"]
[2/2] COMMIT quay.io/openshift-cnv/openshift-virtualization-tests:pr-5974
--> 410e2e10a7bb
Successfully tagged quay.io/openshift-cnv/openshift-virtualization-tests:pr-5974
410e2e10a7bb92337603ef9d0c7f37bbbb0bb8e4fb2b6f8a951277ed6988aaf8