Michal Čihař
97ff98bc62
Fix tests for transformations
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-13 12:12:10 +02:00
Michal Čihař
f00b258749
Merge branch 'QA_4_6-security' into master-security
2016-07-12 14:16:11 +02:00
Michal Čihař
2ef4fe3d84
Use iframe sandbox for rendering HTML in transformation
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-12 14:15:30 +02:00
Michal Čihař
065b876c1a
Merge branch 'QA_4_6-security' into master-security
2016-07-12 11:22:37 +02:00
Michal Čihař
2ea0b722d7
Use _blank target instead of invalid _new
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-12 11:22:23 +02:00
Michal Čihař
fb1884295f
Merge branch 'QA_4_6-security' into master-security
2016-07-12 11:19:09 +02:00
Michal Čihař
3b0115a321
Adjust tests to recent changes
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-12 11:17:47 +02:00
Michal Čihař
fc6ef261eb
Remove Swekey support
...
It is buggy and their servers are no longer working.
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-11 09:02:58 +02:00
Michal Čihař
6f75f8a261
Merge branch 'QA_4_6-security' into master-security
2016-07-09 09:14:12 +02:00
Michal Čihař
a97be3a604
Improve cookie encryption
...
- use MAC to validate content before decryption
- create unique IV for every cookie
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-08 17:40:05 +02:00
Michal Čihař
7de139b90c
Properly escape generated XML export
...
Many fields could contain XML markup, so we need to ensure the generated
XML is valid.
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-30 10:54:05 +02:00
Michal Čihař
bd2080c40a
Adjust test to not use HTML escaping layer
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-30 10:52:49 +02:00
Michal Čihař
99d7407aa2
Fix PHP export tests
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-30 10:30:35 +02:00
Michal Čihař
791bdafcdd
Merge branch 'QA_4_6-security' into master-security
2016-06-17 16:24:39 +02:00
Michal Čihař
be3ecbb4cc
Simplify and cleanup transformation plugins
...
Remove PMA_transformation_global_html_replace which makes the code only
more confusing.
Also add escaping to browse transformations.
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-17 16:18:13 +02:00
Michal Čihař
45ef3aed75
Remove needless inclusion of export.php from tests
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-16 11:38:58 +02:00
Michal Čihař
9b7a6967a8
Merge branch 'QA_4_6'
2016-06-15 11:46:29 +02:00
Michal Čihař
8a142aba73
Adjust tests to new behavior
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-15 11:45:16 +02:00
Michal Čihař
136b85fc97
Produce valid JSON on export
...
The JSON export now generates valid JSON data, but this means that the
resulting JSON format has changed.
Fixes #12307
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-14 09:16:58 +02:00
Michal Čihař
c70aed7a1d
Merge branch 'QA_4_6'
2016-06-09 09:40:21 +02:00
Michal Čihař
763683b4fe
Fix test expectations
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-09 09:40:16 +02:00
Michal Čihař
9d5c5f0c86
Adjust tests to new error messages
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-05-23 21:27:41 +02:00
Michal Čihař
792f5dc794
Merge branch 'QA_4_6'
2016-05-23 13:23:43 +02:00
Michal Čihař
adfd5a22b9
Avoid double redirects in signon auth on logout
...
Also adjusts tests to no longer rely on runkit.
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-05-23 13:23:16 +02:00
Michal Čihař
e3d650a2bb
Merge branch 'QA_4_6'
2016-05-23 13:05:01 +02:00
Michal Čihař
11eb574242
Improve handling of logout
...
- add separate script for handling logout
- no longer require old_usr for all authentication methods
(this avoids potential information leak)
- require valid token for logout
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-05-23 13:02:21 +02:00
Michal Čihař
381c80dda4
Split test cases to avoid huge test methods
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-05-23 12:35:13 +02:00
Michal Čihař
21db724c85
Remove need for having define for test
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-05-23 12:09:36 +02:00
Michal Čihař
1c081f9087
Fix test to not depend on variables set elsewhere
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-05-23 11:47:40 +02:00
Michal Čihař
3074d94525
Merge branch 'QA_4_6'
2016-05-17 10:44:59 +02:00
Michal Čihař
574fee04f7
Fix test failures after changing links
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-05-17 10:44:54 +02:00
Michal Čihař
29fe4d12af
Check import status in testcase
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-04-11 17:52:35 +02:00
Michal Čihař
bf2c76c1b1
Adjust tests to new import code
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-04-11 17:40:56 +02:00
Michal Čihař
3e2029e750
Move MySQL charsets handling to the Charsets class
...
Issue #11731
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-04-11 12:55:42 +02:00
Michal Čihař
cd4008b3d7
Move MySQL charset maps to separate class
...
This allows us to load it only when needed
Issue #11731
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-04-11 10:33:40 +02:00
Michal Čihař
9d57ab4f2b
Remove unused code
...
This was used only in testsuite and quite some portion of tests existed
just to test this.
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-04-07 09:51:49 +02:00
Michal Čihař
0227caf067
Adjust tests to new processing of password
...
Issue #12147 , #12143
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-04-07 09:47:34 +02:00
Michal Čihař
8a5bf72775
Merge branch 'QA_4_6'
2016-03-18 10:35:43 +01:00
Michal Čihař
1b43606a48
Fixed possible invalid SQL export
...
We should emit the charset restoration only if we have emitted its
setting in the header. As the condition was slightly different in both
cases it was possible that only one part of these two was emitted in
past.
Fixes #12074
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-03-18 10:34:17 +01:00
Michal Čihař
4ed47fc4b4
Move charset conversion to a class
...
Also removes ancient support for AIX iconv.
Issue #11731
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-03-08 14:05:59 +01:00
Durgesh
6650f7b07d
Refactor text sanitization and javascript escaping, Issue #11989 , #11988
...
Signed-off-by: Durgesh <007durgesh219@gmail.com>
2016-02-22 14:45:19 +05:30
Durgesh
0b64827930
Refactored url parmeters generating, Issue #11990
...
Signed-off-by: Durgesh <007durgesh219@gmail.com>
2016-02-22 14:36:41 +05:30
Michal Čihař
2fffee3093
Merge remote-tracking branch 'origin/pull/11986'
2016-02-22 07:56:50 +01:00
chintan zaveri
2b74163914
Removal of Swekey
...
Signed-off-by: Chintan Zaveri <zaveri_chintan@rediff.com>
master rebased
Signed-off-by: Chintan Zaveri <zaveri_chintan@rediff.com>
2016-02-20 21:41:07 +05:30
Madhura Jayaratne
6f547b5d9a
Remove superfluous white spaces
...
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
2016-02-19 22:38:56 +11:00
Michal Čihař
2d47e41084
Remove no longer needed variables
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-02-12 15:18:21 +01:00
Michal Čihař
86d3d0bc04
Define theme for all tests
...
This allows to unify environment.
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-02-12 15:14:39 +01:00
Michal Čihař
a28cc6d2de
Ensure we always restore original instance even on failure
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-02-03 20:41:00 +01:00
Michal Čihař
2148e7cad8
Implement test for Cookie auth without runkit
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-02-03 20:21:40 +01:00
Michal Čihař
be8b4ccd76
Add mising separator
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-02-03 19:57:42 +01:00