← Back to branch summary

~ubuntu-branches/ubuntu/oneiric/request-tracker3.8/oneiric-updates

« back to all changes in this revision

Viewing changes to t/web/richtext-autohandler.t

  • Committer: Bazaar Package Importer
  • Author(s): Dominic Hargreaves
  • Date: 2011-04-14 18:37:55 UTC
  • mfrom: (7.1.10 sid)
  • Revision ID: james.westby@ubuntu.com-20110414183755-fasurkmlcqq0ouky
Tags: 3.8.10-1
http://bugs.debian.org/622774
* New upstream release; includes multiple security fixes
  (Closes: #622774):
  - Remote code execution in external custom fields (CVE-2011-1685)
  - Information disclosure via SQL injection (CVE-2011-1686)
  - Information disclosure via search interface (CVE-2011-1687)
  - Information disclosure via directory traversal (CVE-2011-1688)
  - User javascript execution via XSS vulnerability (CVE-2011-1689)
  - Authentication credentials theft (CVE-2011-1690)
* Update Standards-Version (no changes)

Show diffs side-by-side

added added

removed removed

Lines of Context:
t/web/richtext-autohandler.t
 
1
use strict;
 
2
 
 
3
use RT::Test tests => 7;
 
4
my ($baseurl, $agent) = RT::Test->started_ok;
 
5
 
 
6
$agent->get("$baseurl/NoAuth/RichText/FCKeditor/license.txt");
 
7
is($agent->status, 403);
 
8
$agent->content_lacks("It is not the purpose of this section to induce");
 
9
 
 
10
$agent->get_ok("/NoAuth/RichText/license.txt");
 
11
$agent->content_contains("It is not the purpose of this section to induce");
 
12
 
 
13
$agent->warning_like(qr/Invalid request directly to the rich text editor/,);