Activity OpenACS/openacs-4/packages/acs-tcl/tcl/test

Tree
Accordion

Stats

Commits this week: 0

Total Committers:	26
Last Commit:	20 Dec
Commits this week:	0
Total Lines of Code (LoC):	12,538
Net change in LoC this week:	0

Commit Activity

last updated 18 hours ago

Constraints

Constraints: committers

Committer:

Log Comment:

Constraints: files

File Extension:

File Name:

Constraints: dates

Start Date:

End Date:

Thursday 25 Apr

3:50 pm

antoniop

Make test more robust in setups where we cache permissions

- -2
- +39
./test-permissions-procs.tcl
- History
- Source
- Diff
./test-permissions-procs.tcl

Wednesday 27 Mar

12:46 pm

antoniop

Expand permission test suite to include definition of custom privileges in a couple of setups

- -11
- +221
./test-permissions-procs.tcl
- History
- Source
- Diff
./test-permissions-procs.tcl

Tuesday 26 Mar

10:10 am

antoniop

Provide an automated test of "advanced" permission features: permission inheritance via group, or via the permission context

- -1
- +203
./test-permissions-procs.tcl
- History
- Source
- Diff
./test-permissions-procs.tcl

Tuesday 19 Mar

11:44 am

antoniop

Test further improvement of injection attempt by penetration tests

- -0
- +10
./text-html-procs.tcl
- History
- Source
- Diff
./text-html-procs.tcl

Monday 18 Mar

2:12 pm

antoniop

Replicate a smarter attempt by a penetration tool to disguise the javascript: protocol

- -11
- +24
./text-html-procs.tcl
- History
- Source
- Diff
./text-html-procs.tcl

Tuesday 27 Feb

5:17 pm

hectorr

Remove duplicated entry

- -5
- +4
./acs-tcl-test-procs.tcl
- History
- Source
- Diff
./acs-tcl-test-procs.tcl

Monday 26 Feb

12:09 pm

gustafn

Rework of util::which

The new version deals now correctly with absolute paths,

where just the extensions are added, and it is checked

whether the program is executable.

Extended regression test to deal with optional and required

external dependencies. Missing optional external programs

produce warnings.

- -31
- +91
./acs-tcl-test-procs.tcl
- History
- Source
- Diff
./acs-tcl-test-procs.tcl
… 1 more file in changeset.

Sunday 25 Feb

6:25 pm

gustafn

Cleanup of external binaries: always use "util::which" to resolve binaries

Background: it is important to always use the same binaries of some

programs. This is important for security reasons, consistency, and

configurability (some operating systems have read-only file systems,

which might be on the path and should be avoided for some operations).

- -2
- +2
./http-client-procs.tcl
- History
- Source
- Diff
./http-client-procs.tcl

Friday 23 Feb

2:14 pm

antoniop

Improve test:

whether the html filter will accept or not a script tag is configuration-dependent. We now enforce that the outcome is consistent with the security check for HTML used in the filter itself.

- -1
- +1
./acs-tcl-test-procs.tcl
- History
- Source
- Diff
./acs-tcl-test-procs.tcl

Friday 16 Feb

12:36 pm

antoniop

Replicate injection attempt by penetration tools

- -0
- +14
./text-html-procs.tcl
- History
- Source
- Diff
./text-html-procs.tcl

Thursday 15 Feb

5:41 pm

gustafn

bugfix: fixed test test_ad_register_proc when running in a container

When runnig in a container, one cannot use util_current_localtion, which refers

to the URL to reach the server from the container host. To address the server

inside the container, acs::test::url should be used.

This change does not matter for non-containerized applications

- -2
- +2
./request-processor-procs.tcl
- History
- Source
- Diff
./request-processor-procs.tcl

1:27 pm

antoniop

Provide facilities to validate against invalid SQL strings

We introduce a new page contract filter and nsf validator called "dbtext". They implement enforcing of a value to be useable in an SQL query. Currently, this means that the value should not contain the NUL character, but the definition may change in the future or become database-specific.

The html contract filter has also be extended to reject the NUL character.

The test suite has been updated/extended to reflect the changes.