From 82ca33cfb7aa138e5829eb373c81c73ac6033428 Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Wed, 3 Jun 2026 14:56:37 +0200 Subject: [PATCH] test: assert RansomLook uses q parameter --- tests/test_ransomlook.py | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/tests/test_ransomlook.py b/tests/test_ransomlook.py index cb3a6226..5d6282c9 100644 --- a/tests/test_ransomlook.py +++ b/tests/test_ransomlook.py @@ -33,12 +33,15 @@ def test_ransomlook_search_returns_ransomware_group_post_object(): } ] + expected_search_params = {"q": "Acme Corporation"} + with patch.object(ransomlook.requests, "get", return_value=MockResponse(payload)) as mocked_get: result = ransomlook.handler(json.dumps(query)) + assert "query" not in mocked_get.call_args.kwargs["params"] mocked_get.assert_called_once_with( "https://www.ransomlook.io/api/search", - params={"q": "Acme Corporation"}, + params=expected_search_params, headers={"User-Agent": "misp-modules"}, timeout=30, )