Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
Fetching contributors…

Cannot retrieve contributors at this time

40 lines (33 sloc) 1.007 kb
from base import *
DIR = "ssi5"
MAGIC = '<a href="http://www.alobbs.com/">Alvaro</a>'
INC = "test_186.inc"
FILE = "example.shtml"
CONF = """
vserver!1!rule!1860!match = directory
vserver!1!rule!1860!match!directory = /%s
vserver!1!rule!1860!handler = ssi
""" % (DIR)
FILE_CONTENT = """
<html>
<head>
<title>Cherokee QA Test: SSI file size</title>
<!-- example -->
</head>
<body>
size=<!--#fsize virtual="../../../../../../../%s" -->=size
</body>
</html>
""" % (INC)
class Test (TestBase):
def __init__ (self):
TestBase.__init__ (self, __file__)
self.name = "SSI: document root security"
self.request = "GET /%s/%s HTTP/1.0\r\n"%(DIR, FILE)
self.expected_error = 200
self.expected_content = 'size==size'
self.conf = CONF
def Prepare (self, www):
d = self.Mkdir (www, DIR)
self.WriteFile (d, FILE, 0444, FILE_CONTENT)
self.WriteFile (www, INC, 0444, MAGIC)
Jump to Line
Something went wrong with that request. Please try again.