tonyair/silverstripe-framework
1
0
Fork 0
mirror of https://github.com/silverstripe/silverstripe-framework synced 2024-10-03 06:38:51 +02:00
Code Issues Projects Releases Wiki Activity
1661213e5b
silverstripe-framework/tests/security
History
Ingo Schommer 1661213e5b FIX Opt-out pf form message escaping (fixes #2796) 
This fixes a limitation introduced through http://www.silverstripe.org/ss-2013-008-xss-in-numericfield-validation/.
Form messages used to accept HTML, now they’re escaped by default, effectively removing the ability
to pass in HTML and take care of escaping manually.

We pass through HTML to message in core through the CTF system, so this needs to be fixed.
It’s an alternative fix to https://github.com/silverstripe/silverstripe-framework/pull/2803.
2014-08-22 16:59:34 +12:00
..
BasicAuthTest.php Rewrote usages of error suppression operator 2014-03-05 14:22:19 +13:00
BasicAuthTest.yml ENHANCEMENT Allowing custom messages and permission codes in BasicAuth::protect_entire_site() 2010-10-18 22:29:35 +00:00
GroupCsvBulkLoaderTest_withExisting.csv ENHANCEMENT Added GroupCsvBulkLoader class to facilitate group imports with permission codes and hierarchy 2009-12-02 09:40:38 +00:00
GroupCsvBulkLoaderTest.csv ENHANCEMENT Added GroupCsvBulkLoader class to facilitate group imports with permission codes and hierarchy 2009-12-02 09:40:38 +00:00
GroupCsvBulkLoaderTest.php Method visibility according to coding conventions 2012-09-20 10:46:59 +02:00
GroupCsvBulkLoaderTest.yml ENHANCEMENT Added GroupCsvBulkLoader class to facilitate group imports with permission codes and hierarchy 2009-12-02 09:40:38 +00:00
GroupTest.php FIX Privilege escalation through Group hierarchy setting (SS-2013-003) 2013-09-12 15:42:42 +02:00
GroupTest.yml BUGFIX Nested Group records should be removed, along with the parent. 2012-03-28 22:49:58 +13:00
MemberAuthenticatorTest.php FIX Remove instances of lines longer than 120c 2012-09-30 17:18:13 +13:00
MemberCsvBulkLoaderTest_cleartextpws.csv MINOR Added MemberCsvBulkLoaderTest->testCleartextPasswordsAreHashedWithDefaultAlgo() 2010-02-12 00:58:10 +00:00
MemberCsvBulkLoaderTest_withGroups.csv ENHANCEMENT MemberCsvBulkLoader for easy member import with group associations 2009-12-02 09:40:33 +00:00
MemberCsvBulkLoaderTest.csv ENHANCEMENT MemberCsvBulkLoader for easy member import with group associations 2009-12-02 09:40:33 +00:00
MemberCsvBulkLoaderTest.php Postgres compat in MemberCsvBulkLoaderTest and GroupTest 2013-07-04 22:46:23 +02:00
MemberCsvBulkLoaderTest.yml ENHANCEMENT MemberCsvBulkLoader for easy member import with group associations 2009-12-02 09:40:33 +00:00
MemberTest.php BUGFIX Keep Member.PasswordEncryption setting on empty passwords 2013-02-17 23:30:41 +01:00
MemberTest.yml API CHANGE Member->canEdit() returns false if the editing member has lower permissions than the edited member, for example if a member with CMS_ACCESS_SecurityAdmin permissions tries to edit an ADMIN (fixes #5651) (from r110856) 2010-10-19 02:46:26 +00:00
PasswordEncryptorTest.php FIX Remove instances of lines longer than 120c 2012-09-30 17:18:13 +13:00
PasswordValidatorTest.php Fixed PHPUnit assertions for incomplete tests in core 2012-11-23 15:16:39 +01:00
PermissionCheckboxSetFieldTest.php FIX Remove instances of lines longer than 120c 2012-09-30 17:18:13 +13:00
PermissionCheckboxSetFieldTest.yml MINOR Using BlankPage template in SecurityTest, BasicAuthTest to remove ContentController dependency 2011-03-29 18:07:55 +13:00
PermissionRoleTest.php FIX Privilege escalation through APPLY_ROLES assignment (SS-2013-005) 2013-09-12 15:42:43 +02:00
PermissionRoleTest.yml FEATURE: added several tests for PermissionCheckboxSetField, PermissionRole and Group (from r94887) 2009-12-16 05:43:59 +00:00
PermissionTest.php Method visibility according to coding conventions 2012-09-20 10:46:59 +02:00
PermissionTest.yml MINOR Removed reliance of sapphire/admin unit tests on SiteTree and CMSMain 2011-03-29 18:20:10 +13:00
RandomGeneratorTest.php API Hash autologin tokens before storing in the database. 2012-11-09 11:29:42 +01:00
SecurityDefaultAdminTest.php Fixed PHPUnit assertions for incomplete tests in core 2012-11-23 15:16:39 +01:00
SecurityTest.php FIX Opt-out pf form message escaping (fixes #2796) 2014-08-22 16:59:34 +12:00
SecurityTokenTest.php Method visibility according to coding conventions 2012-09-20 10:46:59 +02:00