diff options
| author | Ben Fuhrmannek | 2021-09-16 11:32:41 +0200 |
|---|---|---|
| committer | Ben Fuhrmannek | 2021-09-16 11:32:41 +0200 |
| commit | 6e07cdb870513270a3c08abc7ecdca64ad2af400 (patch) | |
| tree | f9784435101f85d9ff0776c205421a7916b5854e /src/tests/filter | |
| parent | 31d6a3cddd18cef447698ba2beaa7b5d9ab9dd94 (diff) | |
ported server.strip and server.encode features from suhosin
Diffstat (limited to 'src/tests/filter')
| -rw-r--r-- | src/tests/filter/config/filter.ini | 3 | ||||
| -rw-r--r-- | src/tests/filter/server_encode.phpt | 25 | ||||
| -rw-r--r-- | src/tests/filter/server_strip.phpt | 21 |
3 files changed, 49 insertions, 0 deletions
diff --git a/src/tests/filter/config/filter.ini b/src/tests/filter/config/filter.ini new file mode 100644 index 0000000..5ebee61 --- /dev/null +++ b/src/tests/filter/config/filter.ini | |||
| @@ -0,0 +1,3 @@ | |||
| 1 | sp.global.server_encode.enable(); | ||
| 2 | sp.global.server_strip.enable(); | ||
| 3 | |||
diff --git a/src/tests/filter/server_encode.phpt b/src/tests/filter/server_encode.phpt new file mode 100644 index 0000000..f7cc233 --- /dev/null +++ b/src/tests/filter/server_encode.phpt | |||
| @@ -0,0 +1,25 @@ | |||
| 1 | --TEST-- | ||
| 2 | input filter: server_encode | ||
| 3 | --SKIPIF-- | ||
| 4 | <?php if (!extension_loaded("snuffleupagus")) print "skip"; ?> | ||
| 5 | --INI-- | ||
| 6 | sp.configuration_file={PWD}/config/filter.ini | ||
| 7 | display_errors=1 | ||
| 8 | display_startup_errors=1 | ||
| 9 | error_reporting=E_ALL | ||
| 10 | --ENV-- | ||
| 11 | return <<<EOF | ||
| 12 | REQUEST_URI=AAA<>"'`!AAA | ||
| 13 | EOF; | ||
| 14 | --COOKIE-- | ||
| 15 | --GET-- | ||
| 16 | BBB<>"'`!BBB | ||
| 17 | --POST-- | ||
| 18 | --FILE-- | ||
| 19 | <?php | ||
| 20 | var_dump($_SERVER['REQUEST_URI']); | ||
| 21 | var_dump($_SERVER['QUERY_STRING']); | ||
| 22 | --EXPECT-- | ||
| 23 | string(22) "AAA%3C%3E%22%27%60!AAA" | ||
| 24 | string(22) "BBB%3C%3E%22%27%60!BBB" | ||
| 25 | |||
diff --git a/src/tests/filter/server_strip.phpt b/src/tests/filter/server_strip.phpt new file mode 100644 index 0000000..83072b4 --- /dev/null +++ b/src/tests/filter/server_strip.phpt | |||
| @@ -0,0 +1,21 @@ | |||
| 1 | --TEST-- | ||
| 2 | input filter: server_strip | ||
| 3 | --SKIPIF-- | ||
| 4 | <?php if (!extension_loaded("snuffleupagus")) print "skip"; ?> | ||
| 5 | --INI-- | ||
| 6 | sp.configuration_file={PWD}/config/filter.ini | ||
| 7 | display_errors=1 | ||
| 8 | display_startup_errors=1 | ||
| 9 | error_reporting=E_ALL | ||
| 10 | --ENV-- | ||
| 11 | return <<<EOF | ||
| 12 | HTTP_USER_AGENT=Mozilla/5.0 (Windows NT 6.0; rv:29.0) <script>alert('123');</script>Gecko/20100101 Firefox/29.0 | ||
| 13 | EOF; | ||
| 14 | --COOKIE-- | ||
| 15 | --GET-- | ||
| 16 | --POST-- | ||
| 17 | --FILE-- | ||
| 18 | <?php | ||
| 19 | var_dump($_SERVER['HTTP_USER_AGENT']); | ||
| 20 | --EXPECT-- | ||
| 21 | string(95) "Mozilla/5.0 (Windows NT 6.0; rv:29.0) _script_alert(_123_);_/script_Gecko/20100101 Firefox/29.0" | ||
