diff options
| author | Marc Alexander <admin@m-a-styles.de> | 2017-12-31 16:37:58 +0100 |
|---|---|---|
| committer | Marc Alexander <admin@m-a-styles.de> | 2017-12-31 16:37:58 +0100 |
| commit | 7dfd57077a31d67dc18af9802f826da6b015d8fe (patch) | |
| tree | 8e4c820119186dbb54bafc54ec755f35e9ccb21d /tests/functions/make_clickable_test.php | |
| parent | 92350db572f3814630f5bb6e609d503ffd2c4bd5 (diff) | |
| parent | 342a7cbd55829283663ad6ba29f924eeb53fca38 (diff) | |
| download | forums-7dfd57077a31d67dc18af9802f826da6b015d8fe.tar forums-7dfd57077a31d67dc18af9802f826da6b015d8fe.tar.gz forums-7dfd57077a31d67dc18af9802f826da6b015d8fe.tar.bz2 forums-7dfd57077a31d67dc18af9802f826da6b015d8fe.tar.xz forums-7dfd57077a31d67dc18af9802f826da6b015d8fe.zip | |
Merge pull request #40 from phpbb/ticket/security/211
[ticket/security/211] Make sure website URL only uses http & https schemes
Diffstat (limited to 'tests/functions/make_clickable_test.php')
| -rw-r--r-- | tests/functions/make_clickable_test.php | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/tests/functions/make_clickable_test.php b/tests/functions/make_clickable_test.php index 63beeb06b2..2bb7721d21 100644 --- a/tests/functions/make_clickable_test.php +++ b/tests/functions/make_clickable_test.php @@ -56,6 +56,14 @@ class phpbb_functions_make_clickable_test extends phpbb_test_case '<!-- l --><a class="postlink-local" href="http://testhost/viewtopic.php?t=1">viewtopic.php?t=1</a><!-- l -->' ), array( + 'javascript://testhost/viewtopic.php?t=1', + 'javascript://testhost/viewtopic.php?t=1' + ), + array( + "java\nscri\npt://testhost/viewtopic.php?t=1", + "java\nscri\n<!-- m --><a class=\"postlink\" href=\"pt://testhost/viewtopic.php?t=1\">pt://testhost/viewtopic.php?t=1</a><!-- m -->" + ), + array( 'email@domain.com', '<!-- e --><a href="mailto:email@domain.com">email@domain.com</a><!-- e -->' ), @@ -93,6 +101,10 @@ class phpbb_functions_make_clickable_test extends phpbb_test_case '<!-- m --><a class="postlink" href="ftp://ftp.täst.de/">ftp://ftp.täst.de/</a><!-- m -->' ), array( + 'javascript://täst.de/', + 'javascript://täst.de/' + ), + array( 'sip://bantu@täst.de', '<!-- m --><a class="postlink" href="sip://bantu@täst.de">sip://bantu@täst.de</a><!-- m -->' ), |