Changeset 2328 in subversion

Timestamp:

Mar 4, 2009 5:02:55 AM (4 years ago)

Author:

thomasb

Message:

Add tests for external stylesheet handling

Location:

trunk/roundcubemail/tests

Files:

• mailfunc.php (modified) (1 diff)
• src/htmlbody.txt (modified) (1 diff)

trunk/roundcubemail/tests/mailfunc.php

@@ -56 +56 @@
     $this->assertPattern('/Subscription form/', $html, "Include <form> contents");
     $this->assertPattern('/<!-- input not allowed -->/', $html, "No input elements allowed");
+    $this->assertPattern('/<!-- link not allowed -->/', $html, "No external links allowed");
     $this->assertPattern('/<a[^>]+ target="_blank">/', $html, "Set target to _blank");
     $this->assertTrue($GLOBALS['REMOTE_OBJECTS'], "Remote object detected");
     
     // render HTML in safe mode
-    $html2 = rcmail_print_body($part, array('safe' => true));
+    $html2 = rcmail_html4inline(rcmail_print_body($part, array('safe' => true)), 'foo');
     
     $this->assertPattern('/<style [^>]+>/', $html2, "Allow styles in safe mode");
     $this->assertPattern('#src="http://evilsite.net/mailings/ex3.jpg"#', $html2, "Allow external images in HTML (safe mode)");
     $this->assertPattern("#url\('http://evilsite.net/newsletter/image/bg/bg-64.jpg'\)#", $html2, "Allow external images in CSS (safe mode)");
+    
+    $css = '<link rel="stylesheet" type="text/css" href="./bin/modcss.php?u='.urlencode('http://anysite.net/styles/mail.css').'&amp;c=foo"';
+    $this->assertPattern('#'.preg_quote($css).'#', $html2, "Filter external styleseehts with bin/modcss.php");
   }
 

trunk/roundcubemail/tests/src/htmlbody.txt

@@ -4 +4 @@
 <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
 <title>RoundCube Test Message</title>
+<link rel="stylesheet" type="text/css" href="http://anysite.net/styles/mail.css">
 <style type="text/css">