aboutsummaryrefslogtreecommitdiffstats
path: root/tests
diff options
context:
space:
mode:
authorMarc Alexander <admin@m-a-styles.de>2015-04-11 16:41:20 +0200
committerMarc Alexander <admin@m-a-styles.de>2015-04-11 16:41:20 +0200
commitbca1b96b2e9235bbb4a3e7a104dd79e7f3761679 (patch)
tree64617560c2d7fcfe41b61b0cf90655662d49e83b /tests
parenteed355b798ec77ed8b67555087fc5866b522c5fc (diff)
downloadforums-bca1b96b2e9235bbb4a3e7a104dd79e7f3761679.tar
forums-bca1b96b2e9235bbb4a3e7a104dd79e7f3761679.tar.gz
forums-bca1b96b2e9235bbb4a3e7a104dd79e7f3761679.tar.bz2
forums-bca1b96b2e9235bbb4a3e7a104dd79e7f3761679.tar.xz
forums-bca1b96b2e9235bbb4a3e7a104dd79e7f3761679.zip
[ticket/security-180] Make sure that redirect goes to full URL plus slash
SECURITY-180
Diffstat (limited to 'tests')
-rw-r--r--tests/security/redirect_test.php3
1 files changed, 3 insertions, 0 deletions
diff --git a/tests/security/redirect_test.php b/tests/security/redirect_test.php
index 872a331dc7..46ec5c8edb 100644
--- a/tests/security/redirect_test.php
+++ b/tests/security/redirect_test.php
@@ -24,6 +24,9 @@ class phpbb_security_redirect_test extends phpbb_security_test_base
array("http://localhost/phpBB/memberlist.php\n\rConnection: close", 'Tried to redirect to potentially insecure url.', false),
array('javascript:test', false, 'http://localhost/phpBB/../javascript:test'),
array('http://localhost/phpBB/index.php;url=', 'Tried to redirect to potentially insecure url.', false),
+ array('https://foobar.com\@http://localhost/phpBB', false, 'http://localhost/phpBB'),
+ array('https://foobar.com\@localhost/troll/http://localhost/', 'Tried to redirect to potentially insecure url.', false),
+ array('http://localhost.foobar.com\@localhost/troll/http://localhost/', 'Tried to redirect to potentially insecure url.', false),
);
}