silverstripe-framework/tests
Ingo Schommer 0bae1826bb FIX Opt-out pf form message escaping (fixes #2796)
This fixes a limitation introduced through http://www.silverstripe.org/ss-2013-008-xss-in-numericfield-validation/.
Form messages used to accept HTML, now they’re escaped by default, effectively removing the ability
to pass in HTML and take care of escaping manually.

We pass through HTML to message in core through the CTF system, so this needs to be fixed.
It’s an alternative fix to https://github.com/silverstripe/silverstripe-framework/pull/2803.
2014-08-22 09:08:55 +12:00
..
api Excluded or removed tests relying on actual webserver routing 2012-11-28 15:35:09 +01:00
control Retain 5.2 compatibility in DirectorTest 2013-09-12 15:59:18 +02:00
dev ENHANCEMENT Allowing filtered arguments on specific functions like mysql_connect() in SS_Backtrace 2011-05-30 18:06:41 +12:00
fieldtypes Fixed DateTest timezone settings 2012-12-04 12:36:43 +01:00
filesystem MINOR #6083 FileTest doesn't remove test folders and files created during test 2011-02-02 14:19:57 +13:00
forms FIX Opt-out pf form message escaping (fixes #2796) 2014-08-22 09:08:55 +12:00
i18n MINOR Fixed broken i18nTest on Windows because of newline character differences 2011-02-25 15:15:27 +13:00
integration BUGFIX Ensure that \r carriage return characters get stripped out before setting content in HTMLValue::setContent(). DOMDocument will transform these into &#13 entities, which is apparently XML spec, but not necessary for us as we're using HTML 2011-02-02 14:19:57 +13:00
javascript
model API CHANGE Using i18n::validate_locale() in various Translatable methods to ensure the locale exists (as defined through i18n::$allowed_locales) (from r114470) 2011-02-02 14:20:03 +13:00
salad/step_definitions MINOR: Clear out the test database in between each salad scenario. 2011-02-02 14:19:45 +13:00
search ENHANCEMENT Added File.ShowInSearch flag to mirror the existing SiteTree.ShowInSearch flag - e.g. useful to limit visibility of user-uploaded files. Enforced in MySQLDatabase->searchEngine(). 2011-09-15 16:13:02 +02:00
security FIX Opt-out pf form message escaping (fixes #2796) 2014-08-22 09:08:55 +12:00
tasks
templates
testing
widgets
ArrayDataTest.php ENHANCEMENT: added getter to get array back out of an ArrayData instance. MINOR: updated docblocks in ArrayData 2011-02-02 14:19:39 +13:00
ArrayLibTest.php ENHANCEMENT Use array_combine() instead of custom logic for ArrayLib::valuekey() (thanks paradigmincarnate!) 2011-02-02 14:19:35 +13:00
Bare.yml
bootstrap.php Copying request params before Core.php exec in PHPUnit bootstrap 2013-01-06 22:34:29 +01:00
CacheTest.php
ClassInfoTest.php
ControllerTest.php BUG Undefined $allowed_actions overrides parent definitions, stricter handling of $allowed_actions on Extension 2013-02-17 23:16:22 +01:00
ControllerTest.yml
ConvertTest.php ENHANCEMENT: html2raw now properly replace strong tag with asterix #5494 2011-02-02 14:19:37 +13:00
CoreTest.php MINOR #6397 CoreTest should use test specific paths, otherwise conflicts can occur in certain environments 2011-02-02 14:20:07 +13:00
DataObjectDecoratorTest.php
DataObjectDecoratorTest.yml
DataObjectSetTest.php API CHANGE #5873 DataObjectSet::shift() now performs a proper shift instead of unshift (wrong). Please use DataObjectSet::unshift($item) if unshifting was intended! 2011-02-02 14:19:46 +13:00
DataObjectTest.php MINOR Partially reverted r114744 2011-02-02 14:20:05 +13:00
DataObjectTest.yml
ErrorPageTest.php
ErrorPageTest.yml
FileLinkTrackingTest.php
FileLinkTrackingTest.yml BUGFIX: Fixed image link rewriting and added a test. (from r89011) 2009-10-15 22:40:06 +00:00
FullTestSuite.php ENHANCEMENT Added "module=" argument to FullTestSuite (to support comma-separated module lists) 2011-02-02 14:19:53 +13:00
HtmlEditorConfigTest.php
HTTPRequestTest.php
HTTPTest.php
ManifestBuilderTest.fixture.inc
ManifestBuilderTest.php
MemoryLimitTest.php
ModelAsControllerTest.yml
ObjectStaticTest.php
ObjectTest.php
PhpSyntaxTest.php MINOR PHPUnit annotations for PhpSyntaxTest 2011-02-02 14:19:52 +13:00
RedirectorPageTest.php
RedirectorPageTest.yml
RequestHandlingTest.php BUG Undefined $allowed_actions overrides parent definitions, stricter handling of $allowed_actions on Extension 2013-02-17 23:16:22 +01:00
SearchContextTest.php
SearchContextTest.yml
SessionTest.php MINOR Remove all session data in TestSession that might've been set by the test harness (necessary for test runs through the phpunit binary) 2011-02-02 14:19:51 +13:00
ShortcodeParserTest.php
SiteTreeActionsTest.php BUGFIX #6291 Remove rollback action from CMSMain allowed_actions and rely on form action_rollback instead which is safer 2011-02-02 14:20:06 +13:00
SiteTreeActionsTest.yml
SiteTreeBacklinksTest.php
SiteTreeBacklinksTest.yml
SiteTreeBrokenLinksTest.php
SiteTreeBrokenLinksTest.yml
SiteTreePermissionsTest.php BUGFIX: ensure that pages can only be requested from staging and live 2011-02-02 14:19:49 +13:00
SiteTreePermissionsTest.yml BUGFIX: ensure that pages can only be requested from staging and live 2011-02-02 14:19:49 +13:00
SiteTreeTest.php BUGFIX #6291 Remove rollback action from CMSMain allowed_actions and rely on form action_rollback instead which is safer 2011-02-02 14:20:06 +13:00
SiteTreeTest.yml
SoapModelAccessTest.php
SoapModelAccessTest.yml
SQLFormatterTest.php
SQLQueryTest.php ENHANCEMENT Added argument to SQLQuery->leftJoin()/innerJoin() (#5802, thanks stojg) 2011-02-02 14:19:41 +13:00
SSViewerCacheBlockTest.php MINOR Manually testing exceptions in SSViewerCacheBlockTest to avoid PHPUnit 3.6 warnings 2012-05-14 17:25:10 +02:00
SSViewerTest.php MINO Switching 'rewriteHashlinks' sanitization from Convert::raw2att() to strip_tags() to make the resulting PHP more portable when mode is set to 'php' 2011-10-18 10:54:30 +02:00
TokenisedRegularExpressionTest.php
TransactionTest.php Reverted to revision 101592 2011-02-02 14:20:07 +13:00
ViewableDataTest.php
WebserverRoutingTest.php Excluded or removed tests relying on actual webserver routing 2012-11-28 15:35:09 +01:00