@@ -, +, @@ --- t/db_dependent/Koha/XSLT/Security.t | 18 +++++++++++++++++- 1 file changed, 17 insertions(+), 1 deletion(-) --- a/t/db_dependent/Koha/XSLT/Security.t +++ a/t/db_dependent/Koha/XSLT/Security.t @@ -19,7 +19,7 @@ use Modern::Perl; use File::Temp qw/tempfile/; -use Test::More tests => 6; +use Test::More tests => 7; use Test::Warn; use Koha::XSLT::Base; @@ -92,6 +92,22 @@ warning_like { $output= $engine->transform( "", $xslt_file ); } qr/read_net called in XML::LibXSLT/, 'Triggered security callback for read_net'; +# Trigger write_net +$xslt=<<"EOT"; + + + + + Breached! + + + +EOT +$xslt_file = mytempfile($xslt); +warning_like { $output= $engine->transform( "", $xslt_file ); } + qr/write_net called in XML::LibXSLT/, + 'Triggered security callback for write_net'; + # Check remote import (include should be similar) # Trusting koha-community.org DNS here ;) # This should not trigger read_net but fail on the missing import. --