Bug 14408: Add tests to get_template_and_user

Signed-off-by: Katrin Fischer <katrin.fischer@bsz-bw.de>

Signed-off-by: Kyle M Hall <kyle@bywatersolutions.com>
Signed-off-by: Mason James <mtj@kohaaloha.com>
(cherry picked from commit e8a3febfe7)
Signed-off-by: Fridolin Somers <fridolin.somers@biblibre.com>
This commit is contained in:
Jonathan Druart 2015-06-19 10:25:30 +02:00 committed by Fridolin Somers
parent 7c6ec19518
commit 6977b5b27f
1 changed files with 22 additions and 1 deletions

View File

@ -8,7 +8,7 @@ use Modern::Perl;
use CGI;
use Test::MockModule;
use List::MoreUtils qw/all any none/;
use Test::More tests => 6;
use Test::More tests => 9;
use C4::Members;
use Koha::AuthUtils qw/hash_password/;
@ -105,6 +105,27 @@ $dbh->{RaiseError} = 1;
ok( ( any { $_->name eq 'KohaOpacLanguage' and $_->value eq 'en' } @$cookies ),
'BZ9735: invalid language, then default to en');
for my $template_name (
qw(
../../../../../../../../../../../../../../../etc/passwd
test/../../../../../../../../../../../../../../etc/passwd
/etc/passwd
)
) {
my ( $template, $loggedinuser, $cookies ) = get_template_and_user(
{
template_name => $template_name,
query => $query,
type => "intranet",
authnotrequired => 1,
flagsrequired => { catalogue => 1 },
}
);
my $file_exists = ( -f $template->{filename} ) ? 1 : 0;
is ( $file_exists, 0, 'The file template_name should have been sanitize' );
}
}
my $hash1 = hash_password('password');