[Summary view]

Differences Between: [Versions 39 and 311] [Versions 39 and 400] [Versions 39 and 401] [Versions 39 and 402] [Versions 39 and 403]

   1  <?php
   2  // This file is part of Moodle - http://moodle.org/
   3  //
   4  // Moodle is free software: you can redistribute it and/or modify
   5  // it under the terms of the GNU General Public License as published by
   6  // the Free Software Foundation, either version 3 of the License, or
   7  // (at your option) any later version.
   8  //
   9  // Moodle is distributed in the hope that it will be useful,
  10  // but WITHOUT ANY WARRANTY; without even the implied warranty of
  11  // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  12  // GNU General Public License for more details.
  13  //
  14  // You should have received a copy of the GNU General Public License
  15  // along with Moodle.  If not, see <http://www.gnu.org/licenses/>.
  16  
  17  /**
  18   * Unit tests for /lib/filestorage/zip_archive.php.
  19   *
  20   * @package   core_files
  21   * @copyright 2020 Université Rennes 2 {@link https://www.univ-rennes2.fr}
  22   * @license   http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
  23   */
  24  
  25  defined('MOODLE_INTERNAL') || die();
  26  
  27  global $CFG;
  28  
  29  require_once($CFG->libdir . '/filestorage/zip_archive.php');
  30  
  31  /**
  32   * Unit tests for /lib/filestorage/zip_archive.php.
  33   *
  34   * @package   core_files
  35   * @copyright 2020 Université Rennes 2 {@link https://www.univ-rennes2.fr}
  36   * @license   http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
  37   */
  38  class filestorage_zip_archive_testcase extends advanced_testcase {
  39      /**
  40       * Test mangle_pathname() method.
  41       *
  42       * @dataProvider pathname_provider
  43       *
  44       * @param string $string   Parameter sent to mangle_pathname method.
  45       * @param string $expected Expected return value.
  46       */
  47      public function test_mangle_pathname($string, $expected) {
  48          $ziparchive = new zip_archive();
  49  
  50          $method = new ReflectionMethod('zip_archive', 'mangle_pathname');
  51          $method->setAccessible(true);
  52  
  53          $result = $method->invoke($ziparchive, $string);
  54          $this->assertSame($expected, $result);
  55      }
  56  
  57      /**
  58       * Provide some tested pathnames and expected results.
  59       *
  60       * @return array Array of tested pathnames and expected results.
  61       */
  62      public function pathname_provider() {
  63          return [
  64              // Test a string.
  65              ['my file.pdf', 'my file.pdf'],
  66  
  67              // Test a string with MS separator.
  68              ['c:\temp\my file.pdf', 'c:/temp/my file.pdf'],
  69  
  70              // Test a string with 2 consecutive dots.
  71              ['my file..pdf', 'my file.pdf'],
  72  
  73              // Test a string with 3 consecutive dots.
  74              ['my file...pdf', 'my file.pdf'],
  75  
  76              // Test a string beginning with leading slash.
  77              ['/tmp/my file.pdf', 'tmp/my file.pdf'],
  78  
  79              // Test some path traversal attacks.
  80              ['../../../../../etc/passwd', 'etc/passwd'],
  81              ['../', ''],
  82              ['.../...//', ''],
  83              ['.', ''],
  84          ];
  85      }
  86  }