silverstripe-framework/tests/control
Ingo Schommer 46064f8f88 SECURITY More solid relative/site URL checks (related to "BackURL" redirection)
Return true for Director::is_absolute_url() checks if they're prefixed with two or more slashes (as browsers interpret this as a valid URL)

More solid URL checks in Director::is_site_url(), using a conservative parse_url() hostname comparison rather than Director::makeRelative(), which is not designed for security purposes
2012-10-16 10:17:07 +02:00
..
ContentControllerTest.php BUGFIX Fixed SiteTree->Content link shortcode parsing introduced in r101093 (#5227) 2011-02-02 14:19:04 +13:00
ContentControllerTest.yml Added values for new permission code 'VIEW_DRAFT_CONTENT' test 2011-02-02 14:18:17 +13:00
DirectorTest.php SECURITY More solid relative/site URL checks (related to "BackURL" redirection) 2012-10-16 10:17:07 +02:00
HTTPResponseTest.php ENHANCEMENT Added SS_HTTPResponse->setStatusDescription() as equivalent to setStatusCode(). Added documentation. 2011-02-02 14:20:02 +13:00
ModelAsControllerTest.php BUGFIX: When finding an old page in the 404 handler, favour existing subpages over historical ones. 2011-02-02 14:19:21 +13:00
RootURLControllerTest.php ENHANCEMENT: Cached the value for RootURLController::get_homepage_link() between calls. 2009-10-11 00:07:22 +00:00
RootURLControllerTest.yml FEATURE: Refactored RootURLController to allow nested home pages. 2009-10-11 00:07:17 +00:00