123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194 |
- <?php
- // WARNING: All the URI schemes are far to relaxed, we need to tighten
- // the checks.
- class HTMLPurifier_URISchemeTest extends HTMLPurifier_URIHarness
- {
- private $pngBase64;
- public function __construct() {
- $this->pngBase64 =
- 'iVBORw0KGgoAAAANSUhEUgAAAAoAAAAKCAYAAACNMs+9AAAABGdBTUEAALGP'.
- 'C/xhBQAAAAlwSFlzAAALEwAACxMBAJqcGAAAAAd0SU1FB9YGARc5KB0XV+IA'.
- 'AAAddEVYdENvbW1lbnQAQ3JlYXRlZCB3aXRoIFRoZSBHSU1Q72QlbgAAAF1J'.
- 'REFUGNO9zL0NglAAxPEfdLTs4BZM4DIO4C7OwQg2JoQ9LE1exdlYvBBeZ7jq'.
- 'ch9//q1uH4TLzw4d6+ErXMMcXuHWxId3KOETnnXXV6MJpcq2MLaI97CER3N0'.
- 'vr4MkhoXe0rZigAAAABJRU5ErkJggg==';
- }
- protected function assertValidation($uri, $expect_uri = true) {
- $this->prepareURI($uri, $expect_uri);
- $this->config->set('URI.AllowedSchemes', array($uri->scheme));
- // convenience hack: the scheme should be explicitly specified
- $scheme = $uri->getSchemeObj($this->config, $this->context);
- $result = $scheme->validate($uri, $this->config, $this->context);
- $this->assertEitherFailOrIdentical($result, $uri, $expect_uri);
- }
- function test_http_regular() {
- $this->assertValidation(
- 'http://example.com/?s=q#fragment'
- );
- }
- function test_http_uppercase() {
- $this->assertValidation(
- 'http://example.com/FOO'
- );
- }
- function test_http_removeDefaultPort() {
- $this->assertValidation(
- 'http://example.com:80',
- 'http://example.com'
- );
- }
- function test_http_removeUserInfo() {
- $this->assertValidation(
- 'http://bob@example.com',
- 'http://example.com'
- );
- }
- function test_http_preserveNonDefaultPort() {
- $this->assertValidation(
- 'http://example.com:8080'
- );
- }
- function test_https_regular() {
- $this->assertValidation(
- 'https://user@example.com:443/?s=q#frag',
- 'https://example.com/?s=q#frag'
- );
- }
- function test_ftp_regular() {
- $this->assertValidation(
- 'ftp://user@example.com/path'
- );
- }
- function test_ftp_removeDefaultPort() {
- $this->assertValidation(
- 'ftp://example.com:21',
- 'ftp://example.com'
- );
- }
- function test_ftp_removeQueryString() {
- $this->assertValidation(
- 'ftp://example.com?s=q',
- 'ftp://example.com'
- );
- }
- function test_ftp_preserveValidTypecode() {
- $this->assertValidation(
- 'ftp://example.com/file.txt;type=a'
- );
- }
- function test_ftp_removeInvalidTypecode() {
- $this->assertValidation(
- 'ftp://example.com/file.txt;type=z',
- 'ftp://example.com/file.txt'
- );
- }
- function test_ftp_encodeExtraSemicolons() {
- $this->assertValidation(
- 'ftp://example.com/too;many;semicolons=1',
- 'ftp://example.com/too%3Bmany%3Bsemicolons=1'
- );
- }
- function test_news_regular() {
- $this->assertValidation(
- 'news:gmane.science.linguistics'
- );
- }
- function test_news_explicit() {
- $this->assertValidation(
- 'news:642@eagle.ATT.COM'
- );
- }
- function test_news_removeNonPathComponents() {
- $this->assertValidation(
- 'news://user@example.com:80/rec.music?path=foo#frag',
- 'news:/rec.music#frag'
- );
- }
- function test_nntp_regular() {
- $this->assertValidation(
- 'nntp://news.example.com/alt.misc/42#frag'
- );
- }
- function test_nntp_removalOfRedundantOrUselessComponents() {
- $this->assertValidation(
- 'nntp://user@news.example.com:119/alt.misc/42?s=q#frag',
- 'nntp://news.example.com/alt.misc/42#frag'
- );
- }
- function test_mailto_regular() {
- $this->assertValidation(
- 'mailto:bob@example.com'
- );
- }
- function test_mailto_removalOfRedundantOrUselessComponents() {
- $this->assertValidation(
- 'mailto://user@example.com:80/bob@example.com?subject=Foo#frag',
- 'mailto:/bob@example.com?subject=Foo#frag'
- );
- }
- function test_data_png() {
- $this->assertValidation(
- 'data:image/png;base64,'.$this->pngBase64
- );
- }
- function test_data_malformed() {
- $this->assertValidation(
- 'data:image/png;base64,vr4MkhoXJRU5ErkJggg==',
- false
- );
- }
- function test_data_implicit() {
- $this->assertValidation(
- 'data:base64,'.$this->pngBase64,
- 'data:image/png;base64,'.$this->pngBase64
- );
- }
- function test_file_basic() {
- $this->assertValidation(
- 'file://user@MYCOMPUTER:12/foo/bar?baz#frag',
- 'file://MYCOMPUTER/foo/bar#frag'
- );
- }
- function test_file_local() {
- $this->assertValidation(
- 'file:///foo/bar?baz#frag',
- 'file:///foo/bar#frag'
- );
- }
- function test_ftp_empty_host() {
- $this->assertValidation('ftp:///example.com', false);
- }
- }
- // vim: et sw=4 sts=4
|