ILIAS\Tests\FileDelivery\Setup\IsolationObjectiveTest Class Reference

Inheritance diagram for ILIAS\Tests\FileDelivery\Setup\IsolationObjectiveTest:

Collaboration diagram for ILIAS\Tests\FileDelivery\Setup\IsolationObjectiveTest:

Public Member Functions
	testArtifactName ()
	testBuildProducesContentDomainWithNullIliasDomain ()
	testDefaultBuildIsDisabledArtifact ()
	testBuildInDerivesIliasDomainFromHttpPath ()
	testBuildInWithoutIniResourceLeavesIliasDomainNull ()
	testBuildInThrowsWhenContentHostEqualsIliasHost ()
	testBuildInDoesNotThrowForSameHostWhenInactive ()
	testMaliciousDomainIsEscapedAndNotExecuted ()
	Regression for the review concern that a generated PHP artefact could allow code injection via an unescaped string. More...

Private Member Functions
	environmentWithHttpPath (string $http_path)
	evaluateArtifact (Artifact $artifact)
	Execute the serialized artefact exactly the way the runtime loads it (include $path) and return the produced array. More...

Detailed Description

Author

Fabian Schmid fabia.nosp@m.n@sr.nosp@m..solu.nosp@m.tion.nosp@m.s

Definition at line 33 of file IsolationObjectiveTest.php.

Member Function Documentation

environmentWithHttpPath()

ILIAS\Tests\FileDelivery\Setup\IsolationObjectiveTest::environmentWithHttpPath ( string  $http_path )

private

Definition at line 140 of file IsolationObjectiveTest.php.

                                                               : Environment
    {
        $ini = $this->createStub(\ilIniFile::class);
        $ini->method('readVariable')->willReturn($http_path);
 
        $env = $this->createStub(Environment::class);
        $env->method('getResource')->willReturn($ini);
 
        return $env;
    }

References ILIAS\$ini.

Referenced by ILIAS\Tests\FileDelivery\Setup\IsolationObjectiveTest\testBuildInDerivesIliasDomainFromHttpPath(), ILIAS\Tests\FileDelivery\Setup\IsolationObjectiveTest\testBuildInDoesNotThrowForSameHostWhenInactive(), and ILIAS\Tests\FileDelivery\Setup\IsolationObjectiveTest\testBuildInThrowsWhenContentHostEqualsIliasHost().

Here is the caller graph for this function:

evaluateArtifact()

ILIAS\Tests\FileDelivery\Setup\IsolationObjectiveTest::evaluateArtifact ( Artifact  $artifact )

private

Execute the serialized artefact exactly the way the runtime loads it (include $path) and return the produced array.

Returns

array<string, mixed>

Definition at line 157 of file IsolationObjectiveTest.php.

                                                         : array
    {
        $file = tempnam(sys_get_temp_dir(), 'isolation_artifact_') . '.php';
        file_put_contents($file, $artifact->serialize());
 
        try {
            $value = include $file;
        } finally {
            @unlink($file);
        }
 
        $this->assertIsArray($value);
        return $value;
    }

References ILIAS\Setup\Artifact\serialize().

Referenced by ILIAS\Tests\FileDelivery\Setup\IsolationObjectiveTest\testBuildInDerivesIliasDomainFromHttpPath(), ILIAS\Tests\FileDelivery\Setup\IsolationObjectiveTest\testBuildInDoesNotThrowForSameHostWhenInactive(), ILIAS\Tests\FileDelivery\Setup\IsolationObjectiveTest\testBuildInWithoutIniResourceLeavesIliasDomainNull(), ILIAS\Tests\FileDelivery\Setup\IsolationObjectiveTest\testBuildProducesContentDomainWithNullIliasDomain(), ILIAS\Tests\FileDelivery\Setup\IsolationObjectiveTest\testDefaultBuildIsDisabledArtifact(), and ILIAS\Tests\FileDelivery\Setup\IsolationObjectiveTest\testMaliciousDomainIsEscapedAndNotExecuted().

Here is the call graph for this function:

Here is the caller graph for this function:

testArtifactName()

ILIAS\Tests\FileDelivery\Setup\IsolationObjectiveTest::testArtifactName

(

)

Definition at line 35 of file IsolationObjectiveTest.php.

                                      : void
    {
        $this->assertSame('isolation', (new IsolationObjective())->getArtifactName());
    }

testBuildInDerivesIliasDomainFromHttpPath()

ILIAS\Tests\FileDelivery\Setup\IsolationObjectiveTest::testBuildInDerivesIliasDomainFromHttpPath

(

)

Definition at line 72 of file IsolationObjectiveTest.php.

                                                               : void
    {
        // http_path may carry a sub-directory; it is reduced to a bare origin.
        $env = $this->environmentWithHttpPath('https://app.example.org/ilias/index.php');
 
        $objective = new IsolationObjective(true, 'https://content.example.org');
        $value = $this->evaluateArtifact($objective->buildIn($env));
 
        $this->assertSame([
            IsolationConfig::KEY_ACTIVATED => true,
            IsolationConfig::KEY_CONTENT_DOMAIN => 'https://content.example.org',
            IsolationConfig::KEY_ILIAS_DOMAIN => 'https://app.example.org',
        ], $value);
    }

References ILIAS\Tests\FileDelivery\Setup\IsolationObjectiveTest\environmentWithHttpPath(), ILIAS\Tests\FileDelivery\Setup\IsolationObjectiveTest\evaluateArtifact(), ILIAS\FileDelivery\Isolation\IsolationConfig\KEY_ACTIVATED, ILIAS\FileDelivery\Isolation\IsolationConfig\KEY_CONTENT_DOMAIN, and ILIAS\FileDelivery\Isolation\IsolationConfig\KEY_ILIAS_DOMAIN.

Here is the call graph for this function:

testBuildInDoesNotThrowForSameHostWhenInactive()

ILIAS\Tests\FileDelivery\Setup\IsolationObjectiveTest::testBuildInDoesNotThrowForSameHostWhenInactive

(

)

Definition at line 109 of file IsolationObjectiveTest.php.

                                                                    : void
    {
        $env = $this->environmentWithHttpPath('https://same.example.org');
 
        $objective = new IsolationObjective(false, 'https://same.example.org');
        $value = $this->evaluateArtifact($objective->buildIn($env));
 
        $this->assertFalse($value[IsolationConfig::KEY_ACTIVATED]);
    }

References ILIAS\Tests\FileDelivery\Setup\IsolationObjectiveTest\environmentWithHttpPath(), ILIAS\Tests\FileDelivery\Setup\IsolationObjectiveTest\evaluateArtifact(), and ILIAS\FileDelivery\Isolation\IsolationConfig\KEY_ACTIVATED.

Here is the call graph for this function:

testBuildInThrowsWhenContentHostEqualsIliasHost()

ILIAS\Tests\FileDelivery\Setup\IsolationObjectiveTest::testBuildInThrowsWhenContentHostEqualsIliasHost

(

)

Definition at line 99 of file IsolationObjectiveTest.php.

                                                                     : void
    {
        $env = $this->environmentWithHttpPath('https://same.example.org');
 
        $objective = new IsolationObjective(true, 'https://same.example.org');
 
        $this->expectException(UnachievableException::class);
        $objective->buildIn($env);
    }

References ILIAS\Tests\FileDelivery\Setup\IsolationObjectiveTest\environmentWithHttpPath().

Here is the call graph for this function:

testBuildInWithoutIniResourceLeavesIliasDomainNull()

ILIAS\Tests\FileDelivery\Setup\IsolationObjectiveTest::testBuildInWithoutIniResourceLeavesIliasDomainNull

(

)

Definition at line 87 of file IsolationObjectiveTest.php.

                                                                        : void
    {
        $env = $this->createStub(Environment::class);
        $env->method('getResource')->willReturn(null);
 
        $objective = new IsolationObjective(true, 'https://content.example.org');
        $value = $this->evaluateArtifact($objective->buildIn($env));
 
        $this->assertNull($value[IsolationConfig::KEY_ILIAS_DOMAIN]);
        $this->assertTrue($value[IsolationConfig::KEY_ACTIVATED]);
    }

References ILIAS\Tests\FileDelivery\Setup\IsolationObjectiveTest\evaluateArtifact(), ILIAS\FileDelivery\Isolation\IsolationConfig\KEY_ACTIVATED, and ILIAS\FileDelivery\Isolation\IsolationConfig\KEY_ILIAS_DOMAIN.

Here is the call graph for this function:

testBuildProducesContentDomainWithNullIliasDomain()

ILIAS\Tests\FileDelivery\Setup\IsolationObjectiveTest::testBuildProducesContentDomainWithNullIliasDomain

(

)

Definition at line 40 of file IsolationObjectiveTest.php.

                                                                       : void
    {
        // build() has no Environment, so the ILIAS domain (derived from http_path)
        // stays null; it is filled in by buildIn().
        $objective = new IsolationObjective(
            true,
            'https://content.example.org',
        );
 
        $artifact = $objective->build();
        $this->assertInstanceOf(Artifact::class, $artifact);
 
        $value = $this->evaluateArtifact($artifact);
 
        $this->assertSame([
            IsolationConfig::KEY_ACTIVATED => true,
            IsolationConfig::KEY_CONTENT_DOMAIN => 'https://content.example.org',
            IsolationConfig::KEY_ILIAS_DOMAIN => null,
        ], $value);
    }

References ILIAS\Tests\FileDelivery\Setup\IsolationObjectiveTest\evaluateArtifact(), ILIAS\FileDelivery\Isolation\IsolationConfig\KEY_ACTIVATED, ILIAS\FileDelivery\Isolation\IsolationConfig\KEY_CONTENT_DOMAIN, and ILIAS\FileDelivery\Isolation\IsolationConfig\KEY_ILIAS_DOMAIN.

Here is the call graph for this function:

testDefaultBuildIsDisabledArtifact()

ILIAS\Tests\FileDelivery\Setup\IsolationObjectiveTest::testDefaultBuildIsDisabledArtifact

(

)

Definition at line 61 of file IsolationObjectiveTest.php.

                                                        : void
    {
        $value = $this->evaluateArtifact((new IsolationObjective())->build());
 
        $this->assertSame([
            IsolationConfig::KEY_ACTIVATED => false,
            IsolationConfig::KEY_CONTENT_DOMAIN => null,
            IsolationConfig::KEY_ILIAS_DOMAIN => null,
        ], $value);
    }

References ILIAS\Tests\FileDelivery\Setup\IsolationObjectiveTest\evaluateArtifact(), ILIAS\FileDelivery\Isolation\IsolationConfig\KEY_ACTIVATED, ILIAS\FileDelivery\Isolation\IsolationConfig\KEY_CONTENT_DOMAIN, and ILIAS\FileDelivery\Isolation\IsolationConfig\KEY_ILIAS_DOMAIN.

Here is the call graph for this function:

testMaliciousDomainIsEscapedAndNotExecuted()

ILIAS\Tests\FileDelivery\Setup\IsolationObjectiveTest::testMaliciousDomainIsEscapedAndNotExecuted

(

)

Regression for the review concern that a generated PHP artefact could allow code injection via an unescaped string.

var_export() must escape the value so the malicious payload survives as a literal string and is never executed.

Definition at line 125 of file IsolationObjectiveTest.php.

                                                                : void
    {
        $marker = sys_get_temp_dir() . '/isolation_injection_' . getmypid();
        @unlink($marker);
 
        $payload = "https://evil.example.org' . file_put_contents('" . $marker . "', 'pwned') . '";
 
        $objective = new IsolationObjective(true, $payload);
        $value = $this->evaluateArtifact($objective->build());
 
        // payload preserved verbatim, no code executed
        $this->assertSame($payload, $value[IsolationConfig::KEY_CONTENT_DOMAIN]);
        $this->assertFileDoesNotExist($marker);
    }

References ILIAS\Tests\FileDelivery\Setup\IsolationObjectiveTest\evaluateArtifact(), and ILIAS\FileDelivery\Isolation\IsolationConfig\KEY_CONTENT_DOMAIN.

Here is the call graph for this function:

---

The documentation for this class was generated from the following file:

• components/ILIAS/FileDelivery/tests/Setup/IsolationObjectiveTest.php