diff options
author | Yasuo Ohgaki <yohgaki@php.net> | 2015-09-08 18:44:02 +0900 |
---|---|---|
committer | Yasuo Ohgaki <yohgaki@php.net> | 2015-09-08 18:44:23 +0900 |
commit | ab0e347f26e7f94ec47d27b0df36bb441dd0cd0a (patch) | |
tree | fd510473a5074e2949af7a91980331e8ebf1404a | |
parent | 07c7b33028c28383055febcbe66705ee516b9b15 (diff) | |
download | php-git-ab0e347f26e7f94ec47d27b0df36bb441dd0cd0a.tar.gz |
Add more test cases
-rw-r--r-- | ext/session/tests/session_basic3.phpt | 104 |
1 files changed, 104 insertions, 0 deletions
diff --git a/ext/session/tests/session_basic3.phpt b/ext/session/tests/session_basic3.phpt index 49c22032bd..3cc90a8eef 100644 --- a/ext/session/tests/session_basic3.phpt +++ b/ext/session/tests/session_basic3.phpt @@ -106,14 +106,39 @@ session_start(); // Should add session ID to relative URL only for SECURITY echo ' <a href="/">test</a> +<a href="/path">test</a> +<a href="/path/">test</a> +<a href="/path/?foo=var">test</a> +<a href="../">test</a> +<a href="../path">test</a> +<a href="../path/">test</a> +<a href="../path/?foo=var">test</a> + <a href="/#bar">test</a> +<a href="/path/#bar">test</a> +<a href="/path/?foo=var#bar">test</a> +<a href="../#bar">test</a> +<a href="../path/#bar">test</a> +<a href="../path/?foo=var#bar">test</a> + <a href="/?foo">test</a> <a href="/?foo#bar">test</a> <a href="/?foo=var">test</a> <a href="/?foo=var#bar">test</a> +<a href="../?foo">test</a> +<a href="../?foo#bar">test</a> +<a href="../?foo=var">test</a> +<a href="../?foo=var#bar">test</a> + <a href="file.php">test</a> <a href="file.php?foo">test</a> <a href="file.php?foo=var">test</a> +<a href="file.php?foo=var#bar">test</a> +<a href="../file.php">test</a> +<a href="../file.php?foo">test</a> +<a href="../file.php?foo=var">test</a> +<a href="../file.php?foo=var#bar">test</a> + <a href="http://php.net">test</a> <a href="http://php.net/">test</a> <a href="http://php.net/#bar">test</a> @@ -131,6 +156,7 @@ echo ' <a href="http://php.net/some/path/file.php?foo">test</a> <a href="http://php.net/some/path/file.php?foo=var">test</a> <a href="http://php.net/some/path/file.php?foo=var#bar">test</a> + <a href="https://php.net">test</a> <a href="https://php.net/">test</a> <a href="https://php.net/?foo=var#bar">test</a> @@ -145,6 +171,7 @@ echo ' <a href="https://php.net:8443/file.php?foo=var#bar">test</a> <a href="https://php.net:8443/some/path/file.php">test</a> <a href="https://php.net:8443/some/path/file.php?foo=var#bar">test</a> + <a href="//php.net">test</a> <a href="//php.net/">test</a> <a href="//php.net/#bar">test</a> @@ -162,10 +189,35 @@ echo ' <a href="//php.net/some/path/file.php?foo">test</a> <a href="//php.net/some/path/file.php?foo=var">test</a> <a href="//php.net/some/path/file.php?foo=var#bar">test</a> + <form action="script.php" method="post"> <input type="text" name="test1"></input> <input type="text" name="test2" /> </form> +<form action="../script.php" method="post"> + <input type="text" name="test1"></input> + <input type="text" name="test2" /> +</form> +<form action="/path/script.php" method="post"> + <input type="text" name="test1"></input> + <input type="text" name="test2" /> +</form> +<form action="../path/script.php" method="post"> + <input type="text" name="test1"></input> + <input type="text" name="test2" /> +</form> +<form action="http://php.net/script.php" method="post"> + <input type="text" name="test1"></input> + <input type="text" name="test2" /> +</form> +<form action="https://php.net/script.php" method="post"> + <input type="text" name="test1"></input> + <input type="text" name="test2" /> +</form> +<form action="//php.net/script.php" method="post"> + <input type="text" name="test1"></input> + <input type="text" name="test2" /> +</form> '; var_dump(session_commit()); @@ -189,6 +241,31 @@ ob_end_flush(); <a href="file.php?PHPSESSID=testid">test</a> <a href="file.php?foo&PHPSESSID=testid">test</a> <a href="file.php?foo=var&PHPSESSID=testid">test</a> +<a href="/?PHPSESSID=testid">test</a> +<a href="/path?PHPSESSID=testid">test</a> +<a href="/path/?PHPSESSID=testid">test</a> +<a href="/path/?foo=var&PHPSESSID=testid">test</a> +<a href="../?PHPSESSID=testid">test</a> +<a href="../path?PHPSESSID=testid">test</a> +<a href="../path/?PHPSESSID=testid">test</a> +<a href="../path/?foo=var&PHPSESSID=testid">test</a> + +<a href="/?PHPSESSID=testid#bar">test</a> +<a href="/path/?PHPSESSID=testid#bar">test</a> +<a href="/path/?foo=var&PHPSESSID=testid#bar">test</a> +<a href="../?PHPSESSID=testid#bar">test</a> +<a href="../path/?PHPSESSID=testid#bar">test</a> +<a href="../path/?foo=var&PHPSESSID=testid#bar">test</a> + +<a href="/?foo">test</a> +<a href="/?foo#bar">test</a> +<a href="/?foo=var">test</a> +<a href="/?foo=var#bar">test</a> +<a href="../?foo">test</a> +<a href="../?foo#bar">test</a> +<a href="../?foo=var">test</a> +<a href="../?foo=var#bar">test</a> + <a href="http://php.net">test</a> <a href="http://php.net/">test</a> <a href="http://php.net/#bar">test</a> @@ -206,6 +283,7 @@ ob_end_flush(); <a href="http://php.net/some/path/file.php?foo">test</a> <a href="http://php.net/some/path/file.php?foo=var">test</a> <a href="http://php.net/some/path/file.php?foo=var#bar">test</a> + <a href="https://php.net">test</a> <a href="https://php.net/">test</a> <a href="https://php.net/?foo=var#bar">test</a> @@ -220,6 +298,7 @@ ob_end_flush(); <a href="https://php.net:8443/file.php?foo=var#bar">test</a> <a href="https://php.net:8443/some/path/file.php">test</a> <a href="https://php.net:8443/some/path/file.php?foo=var#bar">test</a> + <a href="//php.net">test</a> <a href="//php.net/">test</a> <a href="//php.net/#bar">test</a> @@ -237,10 +316,35 @@ ob_end_flush(); <a href="//php.net/some/path/file.php?foo">test</a> <a href="//php.net/some/path/file.php?foo=var">test</a> <a href="//php.net/some/path/file.php?foo=var#bar">test</a> + <form action="script.php" method="post"><input type="hidden" name="PHPSESSID" value="testid" /><input type="hidden" name="PHPSESSID" value="testid" /> <input type="text" name="test1"></input> <input type="text" name="test2" /> </form> +<form action="../script.php" method="post"><input type="hidden" name="PHPSESSID" value="testid" /><input type="hidden" name="PHPSESSID" value="testid" /> + <input type="text" name="test1"></input> + <input type="text" name="test2" /> +</form> +<form action="/path/script.php" method="post"><input type="hidden" name="PHPSESSID" value="testid" /><input type="hidden" name="PHPSESSID" value="testid" /> + <input type="text" name="test1"></input> + <input type="text" name="test2" /> +</form> +<form action="../path/script.php" method="post"><input type="hidden" name="PHPSESSID" value="testid" /><input type="hidden" name="PHPSESSID" value="testid" /> + <input type="text" name="test1"></input> + <input type="text" name="test2" /> +</form> +<form action="http://php.net/script.php" method="post"><input type="hidden" name="PHPSESSID" value="testid" /><input type="hidden" name="PHPSESSID" value="testid" /> + <input type="text" name="test1"></input> + <input type="text" name="test2" /> +</form> +<form action="https://php.net/script.php" method="post"><input type="hidden" name="PHPSESSID" value="testid" /><input type="hidden" name="PHPSESSID" value="testid" /> + <input type="text" name="test1"></input> + <input type="text" name="test2" /> +</form> +<form action="//php.net/script.php" method="post"><input type="hidden" name="PHPSESSID" value="testid" /><input type="hidden" name="PHPSESSID" value="testid" /> + <input type="text" name="test1"></input> + <input type="text" name="test2" /> +</form> NULL *** Cleanup *** bool(true) |