Files
oddmuse/t/xss.t
Alex Schroeder b116a0103e Perl 5.26 no longer adds . to @INC
This is why all the tests requiring t/test.pl had to be changed.
Similarly, the main script loads config and modules using the same
mechanism and paths had to be similarly qualified: prepending './'.
2017-11-03 17:51:30 +01:00

41 lines
1.5 KiB
Perl

# Copyright (C) 2015 Alex Schroeder <alex@gnu.org>
#
# This program is free software: you can redistribute it and/or modify it under
# the terms of the GNU General Public License as published by the Free Software
# Foundation, either version 3 of the License, or (at your option) any later
# version.
#
# This program is distributed in the hope that it will be useful, but WITHOUT
# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License along with
# this program. If not, see <http://www.gnu.org/licenses/>.
require './t/test.pl';
package OddMuse;
use Test::More tests => 7;
# Edit summary in diff
test_page(update_page('Test', 'Content is saved with <xss1>', '<xss>'),
'Content is saved');
test_page(get_page('action=browse id=Test diff=1'),
'&lt;xss&gt;');
# RSS
test_page(get_page('action=rss'),
'&amp;lt;xss&amp;gt;');
# Search & Replace
test_page(get_page('search=%3cxss1%3e'),
'Search for: &lt;xss1&gt;');
test_page(get_page('search=%3cxss1%3e replace=%3cxss2%3e pwd=foo'),
'Replaced: &lt;xss1&gt; &#x2192; &lt;xss2&gt;',
'saved with &lt;xss2&gt;');
# enable uploads
AppendStringToFile($ConfigFile, "\$UploadAllowed = 1;\n");
update_page('Logo', "#FILE image/png\niVBORw0KGgoAAAA");
test_page(update_page('Test', '[[image:Logo|"/><xss><span]]'),
'&lt;xss&gt;');