diff options
author | JoshyPHP <s9e.dev@gmail.com> | 2019-12-13 01:46:09 +0100 |
---|---|---|
committer | JoshyPHP <s9e.dev@gmail.com> | 2019-12-13 01:46:09 +0100 |
commit | 2926ceba6a06a2f0f95452ae838a89247c493c93 (patch) | |
tree | c37fb3d6bc24a678fe788cfc6fc2b87eb23b1dcd /tests/functional | |
parent | 5be4cca4083e3f2611f7725058afa127ef701ef1 (diff) | |
download | forums-2926ceba6a06a2f0f95452ae838a89247c493c93.tar forums-2926ceba6a06a2f0f95452ae838a89247c493c93.tar.gz forums-2926ceba6a06a2f0f95452ae838a89247c493c93.tar.bz2 forums-2926ceba6a06a2f0f95452ae838a89247c493c93.tar.xz forums-2926ceba6a06a2f0f95452ae838a89247c493c93.zip |
[ticket/16250] Add a service to check BBCodes safeness
PHPBB3-16250
Diffstat (limited to 'tests/functional')
-rw-r--r-- | tests/functional/acp_bbcodes_test.php | 40 |
1 files changed, 40 insertions, 0 deletions
diff --git a/tests/functional/acp_bbcodes_test.php b/tests/functional/acp_bbcodes_test.php index 58681dfa07..cc6397fdfd 100644 --- a/tests/functional/acp_bbcodes_test.php +++ b/tests/functional/acp_bbcodes_test.php @@ -43,4 +43,44 @@ class phpbb_functional_acp_bbcodes_test extends phpbb_functional_test_case $this->assertContains('<div>c</div>', $html); $this->assertContains('<div>d</div>', $html); } + + /** + * @dataProvider get_bbcode_error_tests + */ + public function test_bbcode_error($match, $tpl, $error) + { + $this->login(); + $this->admin_login(); + + $crawler = self::request('GET', 'adm/index.php?i=acp_bbcodes&sid=' . $this->sid . '&mode=bbcodes&action=add'); + $form = $crawler->selectButton('Submit')->form([ + 'bbcode_match' => $match, + 'bbcode_tpl' => $tpl + ]); + $crawler = self::submit($form); + + $text = $crawler->filter('.errorbox')->text(); + $this->assertStringContainsString($error, $text); + } + + public function get_bbcode_error_tests() + { + return [ + [ + 'XXX', + '', + 'BBCode is constructed in an invalid form' + ], + [ + '[x]{TEXT}[/x]', + '<xsl:invalid', + 'template is invalid' + ], + [ + '[x]{TEXT}[/x]', + '<script>{TEXT}</script>', + 'unsafe' + ], + ]; + } } |