asgi function app fixes

Author: Victoria Hall

tests/unittests/third_party_http_functions/stein/asgi_function/function_app.py

@@ -3,7 +3,7 @@
 import re
 import sys
 from urllib.request import urlopen
-import urllib.parse
+import base64
 
 import azure.functions as func
 from fastapi import FastAPI, Request, Response
@@ -132,10 +132,13 @@ async def print_logging(message: str = "", flush: str = 'false',
 
 @fast_app.post("/raw_body_bytes")
 async def raw_body_bytes(request: Request):
-    raw_body = await request.body()
-    sanitized_body = urllib.parse.quote(raw_body)
-    return Response(content=sanitized_body,
-                    headers={'body-len': str(len(sanitized_body))})
+    body = await request.body()
+
+    base64_encoded = base64.b64encode(body).decode('utf-8')
+    html_img_tag = \
+        f'<img src="data:image/png;base64,{base64_encoded}" alt="PNG Image"/>'
+
+    return Response(html_img_tag, headers={'body-len': str(len(html_img_tag))})
 
 
 @fast_app.get("/return_http_no_body")
@@ -150,17 +153,29 @@ async def return_http(request: Request):
 
 @fast_app.get("/return_http_redirect")
 async def return_http_redirect(request: Request, code: str = ''):
-    allowed_url_pattern = r"^http://127\.0\.0\.1:\d+/return_http_redirect\?code=*"
+    # Expected format: 127.0.0.1:<port>
+    host_and_port = request.url.components[1]
+
+    # Validate to ensure it's a valid host and port structure
+    match = re.match(r'^127\.0\.0\.1:(\d+)$', host_and_port)
+    if not match:
+        return Response("Invalid request", status_code=400)
+
+    # Validate port is within specific range
+    port = int(match.group(1))
+    if port < 50000 or port > 65999:
+        return Response("Invalid port", status_code=400)
+
+    # Validate the code param
+    allowed_codes = ['', 'testFunctionKey']
+    if code not in allowed_codes:
+        return Response("Invalid code", status_code=400)
 
+    # Return after all validation succeeds
     location = 'return_http?code={}'.format(code)
-    redirect_url = f"http://127.0.0.1/{location}"
-    if re.match(allowed_url_pattern, redirect_url):
-        # Redirect URL is in the expected format
-        return RedirectResponse(status_code=302,
-                                url=redirect_url)
-    # Redirect URL was not in the expected format
     return RedirectResponse(status_code=302,
-                            url='/')
+                            url=f"http://{host_and_port}/"
+                                f"{location}")
 
 
 @fast_app.get("/unhandled_error")