forked from Wavyzz/dolibarr
NEW All ajax pages have now a top_httphead()
This commit is contained in:
@@ -198,7 +198,7 @@ class CodingPhpTest extends PHPUnit\Framework\TestCase
|
||||
|| preg_match('/boxes\/box_/', $file['relativename'])
|
||||
|| preg_match('/modules\/.*\/doc\/(doc|pdf)_/', $file['relativename'])
|
||||
|| preg_match('/modules\/(import|mailings|printing)\//', $file['relativename'])
|
||||
|| in_array($file['name'], array('modules_boxes.php', 'rapport.pdf.php', 'TraceableDB.php'))) {
|
||||
|| in_array($file['name'], array('modules_boxes.php', 'TraceableDB.php'))) {
|
||||
// Check into Class files
|
||||
if (! in_array($file['name'], array(
|
||||
'api.class.php',
|
||||
@@ -247,6 +247,20 @@ class CodingPhpTest extends PHPUnit\Framework\TestCase
|
||||
}
|
||||
}
|
||||
|
||||
// Check we don't miss top_httphead() into any ajax pages
|
||||
if (preg_match('/ajax\//', $file['relativename'])) {
|
||||
print "Analyze ajax page ".$file['relativename']."\n";
|
||||
$ok=true;
|
||||
$matches=array();
|
||||
preg_match_all('/top_httphead/', $filecontent, $matches, PREG_SET_ORDER);
|
||||
if (count($matches) == 0) {
|
||||
$ok=false;
|
||||
}
|
||||
//print __METHOD__." Result for checking we don't have non escaped string in sql requests for file ".$file."\n";
|
||||
$this->assertTrue($ok, 'Did not find top_httphead into the ajax page '.$file['relativename']);
|
||||
//exit;
|
||||
}
|
||||
|
||||
// Check if a var_dump has been forgotten
|
||||
if (!preg_match('/test\/phpunit/', $file['fullname'])) {
|
||||
$ok=true;
|
||||
@@ -463,7 +477,7 @@ class CodingPhpTest extends PHPUnit\Framework\TestCase
|
||||
foreach ($matches as $key => $val) {
|
||||
//var_dump($val);
|
||||
if (!in_array($val[1], array(
|
||||
"'replacestring'", "'htmlheader'", "'WEBSITE_HTML_HEADER'", "'WEBSITE_CSS_INLINE'", "'WEBSITE_JS_INLINE'", "'WEBSITE_MANIFEST_JSON'", "'PAGE_CONTENT'", "'WEBSITE_README'",
|
||||
"'replacestring'", "'htmlheader'", "'WEBSITE_HTML_HEADER'", "'WEBSITE_CSS_INLINE'", "'WEBSITE_JS_INLINE'", "'WEBSITE_MANIFEST_JSON'", "'PAGE_CONTENT'", "'WEBSITE_README'", "'WEBSITE_LICENSE'",
|
||||
'"mysqldump"', '"postgresqldump"',
|
||||
"'db_pass_root'", "'db_pass'", '"pass"', '"pass1"', '"pass2"', '"password"', "'password'",
|
||||
'"MAIN_MAIL_SMTPS_PW"', '"MAIN_MAIL_SMTPS_PW_EMAILING"', '"MAIN_MAIL_SMTPS_PW_TICKET"'))) {
|
||||
|
||||
Reference in New Issue
Block a user