lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

More complete phpunit

Browse Source
This commit is contained in:
Laurent Destailleur 2020-09-18 01:01:01 +02:00
parent 27d03a2034
commit fa1d14fc7d
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
test/phpunit/SecurityTest.php
View File

@ -177,6 +177,7 @@ class SecurityTest extends PHPUnit\Framework\TestCase
$_GET["param4"]='../dir'; $_GET["param4"]='../dir';
$_GET["param5"]="a_1-b"; $_GET["param5"]="a_1-b";
$_POST["param6"]="&quot;&gt;<svg o&#110;load='console.log(&quot;Stored XSS &quot;)'&gt;"; $_POST["param6"]="&quot;&gt;<svg o&#110;load='console.log(&quot;Stored XSS &quot;)'&gt;";
$_GET["param7"]='"c:\this is a path~1\aaa" abc<bad>def</bad>';
// Test int // Test int
$result=GETPOST('id', 'int'); // Must return nothing $result=GETPOST('id', 'int'); // Must return nothing
@ -229,6 +230,10 @@ class SecurityTest extends PHPUnit\Framework\TestCase
print __METHOD__." result=".$result."\n"; print __METHOD__." result=".$result."\n";
$this->assertEquals('">', $result); $this->assertEquals('">', $result);
$result=GETPOST("param7", 'restricthtml');
print __METHOD__." result=".$result."\n";
$this->assertEquals('"c:\this is a path~1\aaa" abcdef', $result);
return $result; return $result;
} }