Changeset 13561 for trunk/UnitTestContrib/test/unit/Fn_USERINFO.pm

Timestamp:

01/08/12 02:12:19 (17 months ago)

Author:

GeorgeClark

Message:

Item11410: Implement USERINFOisTooRestrictive fix

USERINFO macro can reveal Wikiname, and also whether or not the user is
a group.

File:

• trunk/UnitTestContrib/test/unit/Fn_USERINFO.pm (modified) (1 diff)

trunk/UnitTestContrib/test/unit/Fn_USERINFO.pm

@@ -99 +99 @@
 }
 
+sub test_antispam {
+    my $this = shift;
+    my $testformat =
+'W$wikiusernameU$wikinameN$usernameE$emailsG$groupsA$adminIA$isadminIG$isgroupE$bogustoken nop$nopnop $percent $quot $comma$n$n()ewline $lt $gt $amp $dollar';
+
+    $Foswiki::cfg{AntiSpam}{HideUserDetails} = 1;
+
+# ScumBag should only see his own information
+    $this->createNewFoswikiSession( "ScumBag" );
+    my $ui = $this->{test_topicObject}->expandMacros(<<"HERE");
+%USERINFO{"ScumBag" format="$testformat"}%
+HERE
+    $this->assert_str_equals( <<"HERE", $ui );
+W$Foswiki::cfg{UsersWebName}.ScumBagUScumBagNscumEscumbag\@example.comGFriendsOfFriendsOfGropeGroup, FriendsOfGropeGroup, GropeGroupAfalseIAfalseIGfalseE\$bogustoken nopnop % " ,
+
+ewline < > & \$
+HERE
+
+    my $guest_ui = $this->{test_topicObject}->expandMacros(<<"HERE");
+%USERINFO{"WikiGuest" format="$testformat"}%
+HERE
+
+#'W$wikiusernameU$wikinameN$usernameE$emailsG$groupsA$adminIA$isadminIG$isgroupE$bogustoken nop$nopnop $percent $quot $comma$n$n()ewline $lt $gt $amp $dollar';
+    $this->assert_str_equals( <<"HERE", $guest_ui );
+W$Foswiki::cfg{UsersWebName}.WikiGuestUWikiGuestNEGAIAIGfalseE\$bogustoken nopnop % " ,
+
+ewline < > & \$
+HERE
+
+# Admin user should see everything
+    $this->createNewFoswikiSession( $Foswiki::cfg{AdminUserLogin} );
+    $ui = $this->{test_topicObject}->expandMacros(<<"HERE");
+%USERINFO{"ScumBag" format="$testformat"}%
+HERE
+    $this->assert_str_equals( <<"HERE", $ui );
+W$Foswiki::cfg{UsersWebName}.ScumBagUScumBagNscumEscumbag\@example.comGFriendsOfFriendsOfGropeGroup, FriendsOfGropeGroup, GropeGroupAfalseIAfalseIGfalseE\$bogustoken nopnop % " ,
+
+ewline < > & \$
+HERE
+
+    $guest_ui = $this->{test_topicObject}->expandMacros(<<"HERE");
+%USERINFO{"WikiGuest" format="$testformat"}%
+HERE
+    $this->assert_str_equals( <<"HERE", $guest_ui );
+W$Foswiki::cfg{UsersWebName}.WikiGuestUWikiGuestNguestEGBaseGroup, FriendsOfFriendsOfGropeGroup, FriendsOfGropeGroup, GropeGroupAfalseIAfalseIGfalseE\$bogustoken nopnop % " ,
+
+ewline < > & \$
+HERE
+
+    return;
+}
+
 sub test_isgroup {
     my $this = shift;