diff options
Diffstat (limited to 'src/tests/xxe/disable_xxe_dom_disabled_php8.phpt')
| -rw-r--r-- | src/tests/xxe/disable_xxe_dom_disabled_php8.phpt | 60 |
1 files changed, 60 insertions, 0 deletions
diff --git a/src/tests/xxe/disable_xxe_dom_disabled_php8.phpt b/src/tests/xxe/disable_xxe_dom_disabled_php8.phpt new file mode 100644 index 0000000..c0db7fc --- /dev/null +++ b/src/tests/xxe/disable_xxe_dom_disabled_php8.phpt | |||
| @@ -0,0 +1,60 @@ | |||
| 1 | --TEST-- | ||
| 2 | Disable XXE in php8 | ||
| 3 | --SKIPIF-- | ||
| 4 | <?php if (!extension_loaded("snuffleupagus") || !extension_loaded("dom")) print("skip"); ?> | ||
| 5 | <?php if (PHP_VERSION_ID < 80000) print "skip"; ?> | ||
| 6 | --INI-- | ||
| 7 | sp.configuration_file={PWD}/config/disable_xxe_disable.ini | ||
| 8 | --EXTENSIONS-- | ||
| 9 | dom | ||
| 10 | --FILE-- | ||
| 11 | <?php | ||
| 12 | $dir = __DIR__; | ||
| 13 | $content = '<content>WARNING, external entity loaded!</content>'; | ||
| 14 | file_put_contents($dir . '/content.txt', $content); | ||
| 15 | |||
| 16 | $xml = <<<EOD | ||
| 17 | <?xml version="1.0"?> | ||
| 18 | <!DOCTYPE root | ||
| 19 | [ | ||
| 20 | <!ENTITY foo SYSTEM "file://$dir/content.txt"> | ||
| 21 | ]> | ||
| 22 | <test><testing>&foo;</testing></test> | ||
| 23 | EOD; | ||
| 24 | |||
| 25 | file_put_contents($dir . '/content.xml', $xml); | ||
| 26 | |||
| 27 | libxml_disable_entity_loader(true); | ||
| 28 | $dom = new DOMDocument('1.0'); | ||
| 29 | $dom->loadXML($xml, LIBXML_DTDATTR|LIBXML_DTDLOAD|LIBXML_NOENT); | ||
| 30 | printf("libxml_disable_entity to true: %s\n", $dom->getElementsByTagName('testing')->item(0)->nodeValue); | ||
| 31 | |||
| 32 | libxml_disable_entity_loader(false); | ||
| 33 | $dom = new DOMDocument('1.0'); | ||
| 34 | $dom->loadXML($xml, LIBXML_DTDATTR|LIBXML_DTDLOAD|LIBXML_NOENT); | ||
| 35 | printf("libxml_disable_entity to false: %s\n", $dom->getElementsByTagName('testing')->item(0)->nodeValue); | ||
| 36 | |||
| 37 | $xml = "<test><testing>foo</testing></test>"; | ||
| 38 | file_put_contents('content.xml', $xml); | ||
| 39 | |||
| 40 | libxml_disable_entity_loader(false); | ||
| 41 | $dom = new DOMDocument('1.0'); | ||
| 42 | $dom->loadXML($xml, LIBXML_DTDATTR|LIBXML_DTDLOAD|LIBXML_NOENT); | ||
| 43 | printf("without xxe: %s", $dom->getElementsByTagName('testing')->item(0)->nodeValue); | ||
| 44 | |||
| 45 | ?> | ||
| 46 | --CLEAN-- | ||
| 47 | <?php | ||
| 48 | $dir = __DIR__; | ||
| 49 | unlink($dir . "/content.xml"); | ||
| 50 | unlink($dir . "/content.txt"); | ||
| 51 | ?> | ||
| 52 | --EXPECTF-- | ||
| 53 | Deprecated: Function libxml_disable_entity_loader() is deprecated in %s/tests/xxe/disable_xxe_dom_disabled.php on line %d | ||
| 54 | libxml_disable_entity to true: WARNING, external entity loaded! | ||
| 55 | |||
| 56 | Deprecated: Function libxml_disable_entity_loader() is deprecated in %s/tests/xxe/disable_xxe_dom_disabled.php on line %d | ||
| 57 | libxml_disable_entity to false: WARNING, external entity loaded! | ||
| 58 | |||
| 59 | Deprecated: Function libxml_disable_entity_loader() is deprecated in %s/tests/xxe/disable_xxe_dom_disabled.php on line %d | ||
| 60 | |||
