Thijs/wiki.techinc.nl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
wiki.techinc.nl/tests/phpunit/includes
History
Brian Wolff 73e08353fb Better path traversal prevention in TemplateParser. 
In practise this probably doesn't matter, since template names
are not user controlled, and php isn't stupid enough to fall for
tricks with nulls (afaict). Nonetheless, the code from Title is
only meant to prevent url traversal, it is not meant to prevent
file system path traversal.

Change-Id: Id690576326d03744acc8fbbe78f4b7a4b4c04d7e
2017-03-14 18:43:11 +00:00
..
actions Revert "Make an empty "?action=" parameter default to "view"" 2016-05-18 18:54:50 +00:00
api Clean up remaining get_class() uses 2017-03-07 22:03:47 +00:00
auth Demote "throttler data not found" logs to info level 2017-02-17 00:59:07 +00:00
cache tests: Replace implicit Bugzilla bug numbers with Phab ones 2017-02-21 02:14:34 +00:00
changes Back-end of new RecentChanges page, refactoring 2017-03-11 01:42:01 +00:00
composer Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
config Get ConfigFactory & MainConfig from MediaWikiServices 2016-11-23 00:12:38 +00:00
content Miscellaneous indentation tweaks 2017-02-27 19:23:54 +01:00
context Fix numerous class/function casing 2016-03-18 23:14:49 +00:00
db Miscellaneous indentation tweaks 2017-02-27 19:23:54 +01:00
debug Rewrite logstash key conflict warning from I6677dbf6 2016-11-29 11:14:08 +00:00
deferred Add accessor to DeferredUpdates 2017-03-03 13:32:05 +00:00
diff Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
exception Remove empty lines at end of functions 2016-11-05 11:55:10 +01:00
externalstore Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
filebackend Fix @covers for FileBackend 2017-02-27 19:12:22 +11:00
filerepo Remove left-over references from comments to removed FSRepo class 2017-01-07 16:00:07 +00:00
GlobalFunctions tests: Replace implicit Bugzilla bug numbers with Phab ones 2017-02-21 02:14:34 +00:00
htmlform Merge "HTMLForm: Allow returning Message objects from HTMLFormField::validate()" 2016-11-25 09:11:07 +00:00
http Follow-up 1e9c3619: Correct @T1234 accidental cruft 2017-02-24 08:32:52 -08:00
import Get ConfigFactory & MainConfig from MediaWikiServices 2016-11-23 00:12:38 +00:00
installer DatabaseUpdater: Stop inserting junk into 'updatelog' every time the updater runs 2016-11-30 20:13:30 +00:00
interwiki Removed deprecated usages of Interwiki methods in core 2017-01-10 12:19:31 +02:00
jobqueue Merge "CatWatch don't show the number of pages transcluded" 2016-04-14 14:10:12 +00:00
json Remove spaces after cast operators 2016-10-31 13:57:39 +00:00
libs Use wikimedia/timestamp 2017-02-28 21:15:38 -08:00
linker Remove empty lines at end of functions 2016-11-05 11:55:10 +01:00
logging tests: Replace implicit Bugzilla bug numbers with Phab ones 2017-02-21 02:14:34 +00:00
mail Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
media tests: Replace implicit Bugzilla bug numbers with Phab ones 2017-02-21 02:14:34 +00:00
objectcache Miscellaneous indentation tweaks 2017-02-27 19:23:54 +01:00
page tests: Replace implicit Bugzilla bug numbers with Phab ones 2017-02-21 02:14:34 +00:00
pager Remove trailing empty lines in PHP 2017-01-16 22:06:43 +01:00
parser Fix @covers for (non-integration) parser tests 2017-02-27 15:47:56 +11:00
password User group memberships that expire 2017-01-27 09:24:20 +00:00
poolcounter Include type in hashKeyIntoSlots() 2016-05-09 16:54:51 -07:00
rcfeed Refactor RCFeed configuration (backwards compatible) 2017-02-01 04:23:38 +00:00
registration registration: Always specify version number in extension.schema.json file 2016-12-16 11:47:15 -08:00
resourceloader resourceloader: Fix testMakeModuleResponseError() failure on Travis 2017-02-22 02:56:30 +00:00
search Allow fields to define their own merge strategy via callback. 2017-03-07 10:36:53 -08:00
Services Allow resources to be salvaged across service resets. 2016-05-19 12:38:07 +02:00
session Demote "Unverified user provided and no metadata to auth it" log message to info 2017-02-17 01:00:39 +00:00
site Add more specific Site[] type hints to SiteStore classes 2017-01-11 16:39:13 +00:00
skins phpunit: Fix OutputPage::__construct warning in SkinTemplateTest 2017-02-08 18:19:43 +00:00
specialpage Back-end of new RecentChanges page, refactoring 2017-03-11 01:42:01 +00:00
specials Back-end of new RecentChanges page, refactoring 2017-03-11 01:42:01 +00:00
tidy Merge "RemexHtml tidy driver with p-wrapping" 2017-03-08 15:24:36 +00:00
title Handle missing namespace prefix in XML dumps more gracefully 2017-01-01 09:11:45 +00:00
upload tests: Replace implicit Bugzilla bug numbers with Phab ones 2017-02-21 02:14:34 +00:00
user RCFilters UI: Highlight behavior 2017-02-23 10:58:56 -08:00
utils Miscellaneous indentation tweaks 2017-02-27 19:23:54 +01:00
BlockTest.php tests: Replace implicit Bugzilla bug numbers with Phab ones 2017-02-21 02:14:34 +00:00
CollationTest.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
DiffHistoryBlobTest.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
EditPageTest.php tests: Replace implicit Bugzilla bug numbers with Phab ones 2017-02-21 02:14:34 +00:00
ExportTest.php DumpStringOutput: Rename getOutput() to __toString() 2016-07-14 06:28:16 -04:00
ExtraParserTest.php tests: Replace implicit Bugzilla bug numbers with Phab ones 2017-02-21 02:14:34 +00:00
FauxRequestTest.php Clean up tests for FauxRequest/WebRequest 2016-09-09 15:35:19 -07:00
FauxResponseTest.php Fix numerous class/function casing 2016-03-18 23:14:49 +00:00
FormOptionsInitializationTest.php Remove "Generated by PHPUnit" comments in 3 files 2016-12-13 03:20:04 +00:00
FormOptionsTest.php Remove "Generated by PHPUnit" comments in 3 files 2016-12-13 03:20:04 +00:00
GitInfoTest.php Remove empty lines at end of functions 2016-11-05 11:55:10 +01:00
HooksTest.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
HtmlTest.php Html: Unblacklist HTML5 form validation attributes 2017-01-10 14:53:08 -08:00
LicensesTest.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
LinkerTest.php bidi-isolate usernames in Linker::userLink 2016-08-31 17:44:06 -07:00
LinkFilterTest.php Move LikeMatch to Rdbms namespace 2017-02-06 21:20:39 -08:00
MediaWikiServicesTest.php Move LBFactory to Rdbms namespace 2017-02-03 17:24:03 -08:00
MediaWikiTest.php Revert "MediaWiki.php: Redirect non-standard title urls to canonical" 2016-09-09 21:45:27 +00:00
MediaWikiVersionFetcherTest.php tests: Clean up file headers 2015-04-01 00:17:12 +01:00
MergeHistoryTest.php Whenever possible, reuse User objects in unit tests 2016-05-26 20:42:31 +00:00
MessageTest.php Miscellaneous indentation tweaks 2017-02-27 19:23:54 +01:00
MovePageTest.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
MWNamespaceTest.php Miscellaneous indentation tweaks 2017-02-27 19:23:54 +01:00
MWTimestampTest.php Split out ConvertableTimestamp class 2016-09-16 03:00:09 +00:00
OutputPageTest.php OutputPage: Support UploadPath in testTransformResourcePath() 2017-02-11 04:45:15 +00:00
PagePropsTest.php Remove empty lines at end of functions 2016-11-05 11:55:10 +01:00
PathRouterTest.php Swap the rest of array() -> [] 2016-03-30 22:04:58 +00:00
PreferencesTest.php tests: Replace implicit Bugzilla bug numbers with Phab ones 2017-02-21 02:14:34 +00:00
PrefixSearchTest.php tests: Replace implicit Bugzilla bug numbers with Phab ones 2017-02-21 02:14:34 +00:00
RevisionStorageTest.php Revision::getText() was removed 2017-01-19 01:57:38 +00:00
RevisionStorageTestContentHandlerUseDB.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
RevisionTest.php Revision::getText() was removed 2017-01-19 01:57:38 +00:00
SampleTest.php Update weblinks in comments from HTTP to HTTPS 2016-11-07 15:24:46 +01:00
SanitizerTest.php tests: Replace implicit Bugzilla bug numbers with Phab ones 2017-02-21 02:14:34 +00:00
SanitizerValidateEmailTest.php tests: Replace implicit Bugzilla bug numbers with Phab ones 2017-02-21 02:14:34 +00:00
SiteConfigurationTest.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
StatusTest.php tests: Fix invalid @covers value in StatusTest.php 2016-09-22 18:29:28 +01:00
TemplateCategoriesTest.php Remove empty lines at end of functions 2016-11-05 11:55:10 +01:00
TemplateParserTest.php Better path traversal prevention in TemplateParser. 2017-03-14 18:43:11 +00:00
TestingAccessWrapper.php Handle static access in TestingAccessWrapper 2016-01-24 22:24:10 -06:00
TestingAccessWrapperTest.php Handle static access in TestingAccessWrapper 2016-01-24 22:24:10 -06:00
TestLogger.php Add TestLogger::setCollectContext and fluent interface 2017-02-01 01:45:28 +01:00
TestUser.php Make deprecated TestUser properties private 2016-06-22 15:43:54 +00:00
TestUserRegistry.php Whenever possible, reuse User objects in unit tests 2016-05-26 20:42:31 +00:00
TimeAdjustTest.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
TitleArrayFromResultTest.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
TitleMethodsTest.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
TitlePermissionTest.php Add the concept of "system blocks" 2016-12-16 12:30:03 -05:00
TitleTest.php tests: Replace implicit Bugzilla bug numbers with Phab ones 2017-02-21 02:14:34 +00:00
WatchedItemIntegrationTest.php Merge "Remove missed WatchedItem::resetNotificationTimestamp in test" 2016-07-28 10:22:59 +00:00
WatchedItemQueryServiceUnitTest.php API: i18n for warnings and errors 2016-12-06 10:20:48 -05:00
WatchedItemStoreIntegrationTest.php add setNotificationTimestampsForUser to WatchedItemStore 2016-05-18 08:50:46 +00:00
WatchedItemStoreUnitTest.php WatchedItemStore::setNotificationTimestampsForUser(): Allow clearing timestamp 2016-12-16 14:31:24 -05:00
WatchedItemUnitTest.php Remove unused deprecated WatchedItem methods 2016-07-26 10:52:31 +00:00
WebRequestTest.php Move IP::isConfigured/TrustedProxy() to ProxyLookup service 2016-09-21 20:02:09 -07:00
WikiMapTest.php Improve WikiMap::getWikiReferenceFromWgConf() 2016-07-06 14:20:07 -04:00
WikiReferenceTest.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
XmlJsTest.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
XmlSelectTest.php Update weblinks in comments from HTTP to HTTPS 2016-10-11 17:25:10 +00:00
XmlTest.php tests: Replace implicit Bugzilla bug numbers with Phab ones 2017-02-21 02:14:34 +00:00