dani/lemonldap-ng
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

More tests

Browse Source
This commit is contained in:
Xavier Guimard 2009-02-19 08:06:59 +00:00
parent 6dd414cb76
commit 30d2bd4dd4
2 changed files with 63 additions and 25 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

57
modules/lemonldap-ng-portal/t/03-XSS-protection.t
View File

@ -7,7 +7,7 @@
package My::Portal;
use strict;
use Test::More tests => 11;
use Test::More tests => 15;
BEGIN { use_ok( 'Lemonldap::NG::Portal::Simple', ':all' ) }
#use Lemonldap::NG::Portal::Simple;
@ -15,37 +15,50 @@ BEGIN { use_ok( 'Lemonldap::NG::Portal::Simple', ':all' ) }
our @ISA = 'Lemonldap::NG::Portal::Simple';
my ( $url, $result, $logout );
$logout = 0;
my %h = (
my @h = (
# Bad character
'XX%00' => PE_BADURL,
# No url required
'' => PE_OK,
'' => PE_OK, 'Empty',
# http://test.example.com/
'aHR0cDovL3Rlc3QuZXhhbXBsZS5jb20v' => PE_OK,
'aHR0cDovL3Rlc3QuZXhhbXBsZS5jb20v' => PE_OK, 'Protected virtual host',
# http://test.example.com
'aHR0cDovL3Rlc3QuZXhhbXBsZS5jb20v' => PE_OK,
# http://test.example.com:8000
'aHR0cDovL3Rlc3QuZXhhbXBsZS5jb206ODAwMA==' => PE_OK,
# http://test.example.com:8000/test
'aHR0cDovL3Rlc3QuZXhhbXBsZS5jb206ODAwMC90ZXN0' => PE_OK,
# http://test.example.com:8000V
'aHR0cDovL3Rlc3QuZXhhbXBsZS5jb206ODAwMFY=' => PE_BADURL,
'aHR0cDovL3Rlc3QuZXhhbXBsZS5jb20v' => PE_OK, 'Missing / in URL',
# http://t.example.com/test
'aHR0cDovL3QuZXhhbXBsZS5jb20vdGVzdA==' => PE_OK,
'Undeclared virtual host in protected domain',
# http://test.example.com:8000/test
'aHR0cDovL3Rlc3QuZXhhbXBsZS5jb206ODAwMC90ZXN0' => PE_OK, 'Non default port',
# http://test.example.com:8000
'aHR0cDovL3Rlc3QuZXhhbXBsZS5jb206ODAwMA==' => PE_OK,
'Non default port with missing /',
'http://test.com/' => PE_BADURL, 'Non base64 encoded characters',
# http://test.example.com:8000V
'aHR0cDovL3Rlc3QuZXhhbXBsZS5jb206ODAwMFY=' => PE_BADURL,
'Non number in port',
# http://t.ex.com/test
'aHR0cDovL3QuZXguY29tL3Rlc3Q=' => PE_BADURL,
'Undeclared virtual host in an other domain',
# http://test.example.com/%00
'aHR0cDovL3Rlc3QuZXhhbXBsZS5jb20vJTAw' => PE_BADURL,
'aHR0cDovL3Rlc3QuZXhhbXBsZS5jb20vJTAw' => PE_BADURL, 'Base64 encoded \0',
# http://test.example.com/test\0
'aHR0cDovL3Rlc3QuZXhhbXBsZS5jb20vdGVzdAA=' => PE_BADURL,
'Base64 and url encoded \0',
'XX%00' => PE_BADURL, 'Non base64 encoded \0 ',
# http://test.example.com/test?<script>alert()</script>
'aHR0cDovL3Rlc3QuZXhhbXBsZS5jb20vdGVzdD88c2NyaXB0PmFsZXJ0KCk8L3NjcmlwdD4='
=> PE_BADURL,
'base64 encoded HTML tags',
);
sub param {
@ -82,9 +95,11 @@ ok(
$p->{reVHosts} = '(?:test\.example\.com)';
while ( ( $url, $result ) = each %h ) {
while ( defined( $url = shift(@h) ) ) {
$result = shift @h;
my $text = shift @h;
ok( $p->controlUrlOrigin() == $result, "URL control $url" );
ok( $p->controlUrlOrigin() == $result, $text );
#print ($p->controlUrlOrigin() == $result ? "OK" : "NOK");
#print " $url\n";

31
modules/lemonldap-ng-portal/t/40-Lemonldap-NG-Portal-CDA.t
View File

@ -5,11 +5,34 @@
# change 'tests => 1' to 'tests => last_test_to_print';
use Test::More tests => 1;
package My::Portal;
use Test::More tests => 3;
BEGIN { use_ok('Lemonldap::NG::Portal::CDA') }
our @ISA = ('Lemonldap::NG::Portal::CDA');
#########################
# skipping SharedConf::getConf
sub getConf {
return Lemonldap::NG::Portal::Simple::getConf(@_);
}
# Insert your test code below, the Test::More module is use()ed here so read
# its man page ( perldoc Test::More ) for help writing this test script.
# CGI Environment
$ENV{SCRIPT_NAME} = '/test.pl';
$ENV{SCRIPT_FILENAME} = '/tmp/test.pl';
$ENV{REQUEST_METHOD} = 'GET';
$ENV{REQUEST_URI} = '/';
$ENV{QUERY_STRING} = '';
ok(
$p = My::Portal->new(
{
globalStorage => 'Apache::Session::File',
domain => 'example.com',
cookieName => 'lemonldap',
}
),
'Portal object'
);
ok( $p->{CDA}, 'CDA is set' );