From 2863344b21977bb5b1df276b2f17e2ac9572e42a Mon Sep 17 00:00:00 2001 From: Ben Fuhrmannek Date: Mon, 20 Dec 2021 18:00:34 +0100 Subject: removed upload script x-bit check at load time, thus allowing root-user to execute test cases --- src/tests/upload_validation/upload_validation_no_exec.phpt | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) (limited to 'src/tests/upload_validation/upload_validation_no_exec.phpt') diff --git a/src/tests/upload_validation/upload_validation_no_exec.phpt b/src/tests/upload_validation/upload_validation_no_exec.phpt index b198bda..ff3dc14 100644 --- a/src/tests/upload_validation/upload_validation_no_exec.phpt +++ b/src/tests/upload_validation/upload_validation_no_exec.phpt @@ -4,6 +4,7 @@ Upload a file, validation script not executable file_uploads=1 sp.configuration_file={PWD}/config/upload_validation_non_exec.ini output_buffering=off +expose_php=0 --POST_RAW-- Content-Type: multipart/form-data; boundary=blabla --blabla @@ -14,6 +15,6 @@ Content-Disposition: form-data; name="test"; filename="test.php" var_dump($_FILES); ?> --EXPECTF-- -Fatal error: [snuffleupagus][0.0.0.0][config][log] Invalid configuration file in Unknown on line 0 - -Fatal error: [snuffleupagus][0.0.0.0][config][log] The `script` (tests/data/upload_no_exec.sh) isn't executable on line 1 in Unknown on line 0 +Warning: [snuffleupagus][0.0.0.0][upload_validation][log] Could not call '%s' : Permission denied %s +%a +Fatal error: [snuffleupagus][0.0.0.0][upload_validation][drop] The upload %s was rejected. in Unknown on line 0 -- cgit v1.3