mirror of
https://github.com/Combodo/iTop.git
synced 2026-02-13 15:34:12 +01:00
118 lines
2.5 KiB
PHP
118 lines
2.5 KiB
PHP
<?php
|
|
/*
|
|
* @copyright Copyright (C) 2010-2024 Combodo SAS
|
|
* @license http://opensource.org/licenses/AGPL-3.0
|
|
*/
|
|
require_once '../../approot.inc.php';
|
|
|
|
require_once(APPROOT.'/application\utils.inc.php');
|
|
$index = 0;
|
|
function testSanitize($sValue, $sType, &$index)
|
|
{
|
|
$sDefaultVal = '!defaultVal!';
|
|
$sValueEscapedJs = str_replace('"', '\"', $sValue);
|
|
$sSanitizedValue = utils::Sanitize($sValue, $sDefaultVal, $sType);
|
|
|
|
echo <<<HTML
|
|
<tr id="test{$index}">
|
|
<td>{$sType}</td>
|
|
<td>{$sValue}</td>
|
|
<td class="sanitized_php">{$sSanitizedValue}</td>
|
|
<td class="sanitized_js"></td>
|
|
<td class="status"></td>
|
|
</tr>
|
|
<script>
|
|
var parentTr = $("tr#test{$index}"),
|
|
sanitizedPhp = parentTr.find("td.sanitized_php").text(),
|
|
sanitizedJs = CombodoSanitizer.Sanitize("{$sValueEscapedJs}","{$sDefaultVal}","{$sType}");
|
|
|
|
parentTr.find("td.sanitized_js").text(sanitizedJs);
|
|
|
|
if (sanitizedJs === sanitizedPhp) {
|
|
parentTr.find("td.status")
|
|
.addClass("status-success")
|
|
.text("OK");
|
|
} else {
|
|
console.error("difference detected !", "{$sValueEscapedJs}", '{$sType}', sanitizedPhp, sanitizedJs);
|
|
parentTr.find("td.status")
|
|
.addClass("status-error")
|
|
.text("KO");
|
|
}
|
|
</script>
|
|
HTML;
|
|
|
|
$index++;
|
|
}
|
|
|
|
$aValues = [
|
|
"test",
|
|
"t;e-s_t$",
|
|
"123test",
|
|
"\"('èé&=hcb test",
|
|
"<div>Hello!</div>",
|
|
"*-+7464+guigez cfuze",
|
|
"",
|
|
"()=°²€",
|
|
"éèç",
|
|
"q<div>è</div>=hcb test",
|
|
// "<script>console.debug('((\'èé&');</script>q<div>è</div>=hcb test",
|
|
];
|
|
|
|
$aTypes = [
|
|
utils::ENUM_SANITIZATION_FILTER_CONTEXT_PARAM,
|
|
utils::ENUM_SANITIZATION_FILTER_ELEMENT_IDENTIFIER,
|
|
utils::ENUM_SANITIZATION_FILTER_FIELD_NAME,
|
|
utils::ENUM_SANITIZATION_FILTER_INTEGER,
|
|
utils::ENUM_SANITIZATION_FILTER_PARAMETER,
|
|
utils::ENUM_SANITIZATION_FILTER_STRING,
|
|
utils::ENUM_SANITIZATION_FILTER_TRANSACTION_ID,
|
|
utils::ENUM_SANITIZATION_FILTER_VARIABLE_NAME,
|
|
];
|
|
|
|
?>
|
|
<!DOCTYPE>
|
|
<html>
|
|
<head>
|
|
<script type="text/javascript" src="../../node_modules/jquery/dist/jquery.min.js"></script>
|
|
<script type="text/javascript" src="../../js/utils.js"></script>
|
|
<style>
|
|
table, tr, td {
|
|
padding: 3px 10px;
|
|
border: 1px solid lightgrey;
|
|
border-collapse: collapse;
|
|
}
|
|
|
|
.status-success {
|
|
color: green;
|
|
}
|
|
.status-error {
|
|
color: red;
|
|
}
|
|
|
|
thead {
|
|
font-weight: bold;
|
|
}
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<table>
|
|
<thead>
|
|
<tr>
|
|
<td>Type</td>
|
|
<td>chaine initiale</td>
|
|
<td>chaine sanitize by php</td>
|
|
<td>chaine sanitize by js</td>
|
|
<td> status test</td>
|
|
</tr>
|
|
</thead>
|
|
<?php
|
|
|
|
foreach ($aTypes as $sType) {
|
|
foreach ($aValues as $sValue) {
|
|
testSanitize($sValue, $sType, $index);
|
|
}
|
|
}
|
|
?></table>
|
|
</body>
|
|
</html>
|