tests/HTMLPurifier/AttrDef/URITest.php

   1 <?php
   2
   3 /**
   4  * @todo Aim for complete code coverage with mocks
   5  */
   6 class HTMLPurifier_AttrDef_URITest extends HTMLPurifier_AttrDefHarness
   7 {
   8
   9     public function setUp()
  10     {
  11         $this->def = new HTMLPurifier_AttrDef_URI();
  12         parent::setUp();
  13     }
  14
  15     public function testIntegration()
  16     {
  17         $this->assertDef('http://www.google.com/');
  18         $this->assertDef('http:', '');
  19         $this->assertDef('http:/foo', '/foo');
  20         $this->assertDef('javascript:bad_stuff();', false);
  21         $this->assertDef('ftp://www.example.com/');
  22         $this->assertDef('news:rec.alt');
  23         $this->assertDef('nntp://news.example.com/324234');
  24         $this->assertDef('mailto:bob@example.com');
  25     }
  26
  27     public function testIntegrationWithPercentEncoder()
  28     {
  29         $this->assertDef(
  30             'http://www.example.com/%56%fc%GJ%5%FC',
  31             'http://www.example.com/V%FC%25GJ%255%FC'
  32         );
  33     }
  34
  35     public function testPercentEncoding()
  36     {
  37         $this->assertDef(
  38             'http:colon:mercenary',
  39             'colon%3Amercenary'
  40         );
  41     }
  42
  43     public function testPercentEncodingPreserve()
  44     {
  45         $this->assertDef(
  46             'http://www.example.com/abcABC123-_.!~*()\''
  47         );
  48     }
  49
  50     public function testEmbeds()
  51     {
  52         $this->def = new HTMLPurifier_AttrDef_URI(true);
  53         $this->assertDef('http://sub.example.com/alas?foo=asd');
  54         $this->assertDef('mailto:foo@example.com', false);
  55     }
  56
  57     public function testConfigMunge()
  58     {
  59         $this->config->set('URI.Munge', 'http://www.google.com/url?q=%s');
  60         $this->assertDef(
  61             'http://www.example.com/',
  62             'http://www.google.com/url?q=http%3A%2F%2Fwww.example.com%2F'
  63         );
  64         $this->assertDef('index.html');
  65         $this->assertDef('javascript:foobar();', false);
  66     }
  67
  68     public function testDefaultSchemeRemovedInBlank()
  69     {
  70         $this->assertDef('http:', '');
  71     }
  72
  73     public function testDefaultSchemeRemovedInRelativeURI()
  74     {
  75         $this->assertDef('http:/foo/bar', '/foo/bar');
  76     }
  77
  78     public function testDefaultSchemeNotRemovedInAbsoluteURI()
  79     {
  80         $this->assertDef('http://example.com/foo/bar');
  81     }
  82
  83     public function testAltSchemeNotRemoved()
  84     {
  85         $this->assertDef('mailto:this-looks-like-a-path@example.com');
  86     }
  87
  88     public function testResolveNullSchemeAmbiguity()
  89     {
  90         $this->assertDef('///foo', '/foo');
  91     }
  92
  93     public function testResolveNullSchemeDoubleAmbiguity()
  94     {
  95         $this->config->set('URI.Host', 'example.com');
  96         $this->assertDef('////foo', '//example.com//foo');
  97     }
  98
  99     public function testURIDefinitionValidation()
 100     {
 101         $parser = new HTMLPurifier_URIParser();
 102         $uri = $parser->parse('http://example.com');
 103         $this->config->set('URI.DefinitionID', 'HTMLPurifier_AttrDef_URITest->testURIDefinitionValidation');
 104
 105         generate_mock_once('HTMLPurifier_URIDefinition');
 106         $uri_def = new HTMLPurifier_URIDefinitionMock();
 107         $uri_def->expectOnce('filter', array($uri, '*', '*'));
 108         $uri_def->returns('filter', true, array($uri, '*', '*'));
 109         $uri_def->expectOnce('postFilter', array($uri, '*', '*'));
 110         $uri_def->returns('postFilter', true, array($uri, '*', '*'));
 111         $uri_def->setup = true;
 112
 113         // Since definitions are no longer passed by reference, we need
 114         // to muck around with the cache to insert our mock. This is
 115         // technically a little bad, since the cache shouldn't change
 116         // behavior, but I don't feel too good about letting users
 117         // overload entire definitions.
 118         generate_mock_once('HTMLPurifier_DefinitionCache');
 119         $cache_mock = new HTMLPurifier_DefinitionCacheMock();
 120         $cache_mock->returns('get', $uri_def);
 121
 122         generate_mock_once('HTMLPurifier_DefinitionCacheFactory');
 123         $factory_mock = new HTMLPurifier_DefinitionCacheFactoryMock();
 124         $old = HTMLPurifier_DefinitionCacheFactory::instance();
 125         HTMLPurifier_DefinitionCacheFactory::instance($factory_mock);
 126         $factory_mock->returns('create', $cache_mock);
 127
 128         $this->assertDef('http://example.com');
 129
 130         HTMLPurifier_DefinitionCacheFactory::instance($old);
 131     }
 132
 133     public function test_make()
 134     {
 135         $factory = new HTMLPurifier_AttrDef_URI();
 136         $def = $factory->make('');
 137         $def2 = new HTMLPurifier_AttrDef_URI();
 138         $this->assertIdentical($def, $def2);
 139
 140         $def = $factory->make('embedded');
 141         $def2 = new HTMLPurifier_AttrDef_URI(true);
 142         $this->assertIdentical($def, $def2);
 143     }
 144
 145     /*
 146     public function test_validate_configWhitelist()
 147     {
 148         $this->config->set('URI.HostPolicy', 'DenyAll');
 149         $this->config->set('URI.HostWhitelist', array(null, 'google.com'));
 150
 151         $this->assertDef('http://example.com/fo/google.com', false);
 152         $this->assertDef('server.txt');
 153         $this->assertDef('ftp://www.google.com/?t=a');
 154         $this->assertDef('http://google.com.tricky.spamsite.net', false);
 155
 156     }
 157     */
 158
 159 }
 160
 161 // vim: et sw=4 sts=4