composer/iTop
6
0
Fork 0
mirror of https://github.com/Combodo/iTop.git synced 2026-10-21 07:49:01 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'origin/support/3.2' into support/3.3

Browse Source 
# Conflicts:
#	application/utils.inc.php
This commit is contained in:
jf-cbd
2026-10-08 14:31:52 +02:00
parent 5c962b0fef 4639d06a0d
commit 84a92b8529
3 changed files with 72 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
tests/php-unit-tests/unitary-tests/application/utilsTest.php
View File

@@ -72,6 +72,30 @@ class utilsTest extends ItopTestCase
];
}
/**
* @dataProvider DoPostRequestAllowedProtocolsProvider
*/
public function testDoPostRequestRespectsAllowedProtocolsConfig(string $sAllowedProtocols, bool $bFileProtocolAllowed): void
{
// Config::Set changes the in-memory setting only; the test framework reloads config after this test class.
utils::GetConfig()->Set('security.post_requests.allowed_protocols', $sAllowedProtocols);
if (!$bFileProtocolAllowed) {
$this->expectException(\Exception::class);
$this->expectExceptionMessage('Problem opening URL');
} else {
$this->expectNotToPerformAssertions();
}
utils::DoPostRequest('file:///tmp', ['payload' => 'test']);
}
public function DoPostRequestAllowedProtocolsProvider(): array
{
return [
'file protocol is allowed' => ['file,http,https', true],
'file protocol is not allowed' => ['http,https', false],
];
}
/**
* @dataProvider realPathDataProvider
* @covers utils::RealPath()