Linux cesa-www-main 6.1.0-49-cloud-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.174-1 (2026-05-26) x86_64
Apache/2.4.68 (Debian)
Server IP : 10.218.0.2 & Your IP : 216.73.216.28
Domains :
Cant Read [ /etc/named.conf ]
User : www-data
Terminal
Auto Root
Create File
Create Folder
Localroot Suggester
Backdoor Destroyer
Readme
/
var /
www /
cesa.co.za /
sipdm.cesa.co.za /
lib /
tests /
Delete
Unzip
Name
Size
Permission
Date
Action
behat
[ DIR ]
drwxr-sr-x
2017-06-22 15:51
fixtures
[ DIR ]
drwxr-sr-x
2017-06-22 15:52
other
[ DIR ]
drwxr-sr-x
2017-06-22 15:52
performance
[ DIR ]
drwxr-sr-x
2017-06-22 15:52
accesslib_test.php
155.23
KB
-rw-r--r--
2017-06-22 15:51
adhoc_task_test.php
3.6
KB
-rw-r--r--
2017-06-22 15:51
admintree_test.php
12.62
KB
-rw-r--r--
2017-06-22 15:51
ajaxlib_test.php
4.35
KB
-rw-r--r--
2017-06-22 15:51
antivirus_test.php
3.63
KB
-rw-r--r--
2017-06-22 15:51
authlib_test.php
11.49
KB
-rw-r--r--
2017-06-22 15:51
blocklib_test.php
24.65
KB
-rw-r--r--
2017-06-22 15:51
collator_test.php
11.98
KB
-rw-r--r--
2017-06-22 15:51
completionlib_test.php
37.83
KB
-rw-r--r--
2017-06-22 15:51
component_test.php
37.04
KB
-rw-r--r--
2017-06-22 15:51
componentlib_test.php
6.64
KB
-rw-r--r--
2017-06-22 15:51
configonlylib_test.php
6.15
KB
-rw-r--r--
2017-06-22 15:51
coursecatlib_test.php
39.89
KB
-rw-r--r--
2017-06-22 15:51
cronlib_test.php
6.44
KB
-rw-r--r--
2017-06-22 15:51
csslib_test.php
8.57
KB
-rw-r--r--
2017-06-22 15:51
csvclass_test.php
5.56
KB
-rw-r--r--
2017-06-22 15:51
curl_security_helper_test.php
12.96
KB
-rw-r--r--
2017-06-22 15:51
customcontext_test.php
3.66
KB
-rw-r--r--
2017-06-22 15:51
datalib_test.php
28.64
KB
-rw-r--r--
2017-06-22 15:51
datalib_update_with_unique_index_test.php
6.31
KB
-rw-r--r--
2017-06-22 15:51
date_legacy_test.php
13.9
KB
-rw-r--r--
2017-06-22 15:51
date_test.php
24.13
KB
-rw-r--r--
2017-06-22 15:51
editorlib_test.php
2.01
KB
-rw-r--r--
2017-06-22 15:51
environment_test.php
7.66
KB
-rw-r--r--
2017-06-22 15:51
event_course_module_instance_list_viewed.php
2.7
KB
-rw-r--r--
2017-06-22 15:51
event_course_module_viewed.php
3.31
KB
-rw-r--r--
2017-06-22 15:51
event_deprecated_test.php
1.49
KB
-rw-r--r--
2017-06-22 15:51
event_grade_deleted_test.php
3.25
KB
-rw-r--r--
2017-06-22 15:51
event_test.php
40.93
KB
-rw-r--r--
2017-06-22 15:51
event_unknown_logged_test.php
1.92
KB
-rw-r--r--
2017-06-22 15:51
event_user_graded_test.php
10.06
KB
-rw-r--r--
2017-06-22 15:51
event_user_password_updated_test.php
2.89
KB
-rw-r--r--
2017-06-22 15:51
events_test.php
15.29
KB
-rw-r--r--
2017-06-22 15:51
eventslib_test.php
11.8
KB
-rw-r--r--
2017-06-22 15:51
externallib_test.php
22.73
KB
-rw-r--r--
2017-06-22 15:51
filelib_test.php
50.67
KB
-rw-r--r--
2017-06-22 15:51
filetypes_test.php
9.99
KB
-rw-r--r--
2017-06-22 15:51
filter_manager_test.php
3.1
KB
-rw-r--r--
2017-06-22 15:51
filterlib_test.php
28.43
KB
-rw-r--r--
2017-06-22 15:51
formslib_test.php
39.82
KB
-rw-r--r--
2017-06-22 15:52
gdlib_test.php
5.91
KB
-rw-r--r--
2017-06-22 15:52
gradelib_test.php
2.05
KB
-rw-r--r--
2017-06-22 15:52
grades_externallib_test.php
20.79
KB
-rw-r--r--
2017-06-22 15:52
grading_externallib_test.php
26.27
KB
-rw-r--r--
2017-06-22 15:52
grouplib_test.php
62.33
KB
-rw-r--r--
2017-06-22 15:52
html2text_test.php
7.56
KB
-rw-r--r--
2017-06-22 15:52
html_writer_test.php
8.74
KB
-rw-r--r--
2017-06-22 15:52
htmlpurifier_test.php
21.25
KB
-rw-r--r--
2017-06-22 15:52
ip_utils_test.php
13.4
KB
-rw-r--r--
2017-06-22 15:52
jquery_test.php
1.77
KB
-rw-r--r--
2017-06-22 15:52
ldaplib_test.php
7.14
KB
-rw-r--r--
2017-06-22 15:52
lock_config_test.php
2.33
KB
-rw-r--r--
2017-06-22 15:52
lock_test.php
3.96
KB
-rw-r--r--
2017-06-22 15:52
markdown_test.php
2.2
KB
-rw-r--r--
2017-06-22 15:52
mathslib_test.php
8.14
KB
-rw-r--r--
2017-06-22 15:52
medialib_test.php
20.95
KB
-rw-r--r--
2017-06-22 15:52
message_test.php
10.32
KB
-rw-r--r--
2017-06-22 15:52
messageinbound_test.php
5.92
KB
-rw-r--r--
2017-06-22 15:52
messagelib_test.php
39.51
KB
-rw-r--r--
2017-06-22 15:52
minify_test.php
3.13
KB
-rw-r--r--
2017-06-22 15:52
modinfolib_test.php
44.04
KB
-rw-r--r--
2017-06-22 15:52
moodle_page_test.php
25.52
KB
-rw-r--r--
2017-06-22 15:52
moodlelib_test.php
153.62
KB
-rw-r--r--
2017-06-22 15:52
mustache_template_finder_test.php
3.35
KB
-rw-r--r--
2017-06-22 15:52
myprofilelib_test.php
10.7
KB
-rw-r--r--
2017-06-22 15:52
navigationlib_test.php
26.04
KB
-rw-r--r--
2017-06-22 15:52
notification_test.php
4.18
KB
-rw-r--r--
2017-06-22 15:52
outputcomponents_test.php
19.33
KB
-rw-r--r--
2017-06-22 15:52
outputfactories_test.php
6.8
KB
-rw-r--r--
2017-06-22 15:52
outputrequirementslib_test.php
4.05
KB
-rw-r--r--
2017-06-22 15:52
plugin_manager_test.php
22.2
KB
-rw-r--r--
2017-06-22 15:52
portfoliolib_test.php
8.41
KB
-rw-r--r--
2017-06-22 15:52
progress_display_test.php
3.68
KB
-rw-r--r--
2017-06-22 15:52
progress_test.php
14.5
KB
-rw-r--r--
2017-06-22 15:52
questionlib_test.php
19.87
KB
-rw-r--r--
2017-06-22 15:52
regex_test.php
1.88
KB
-rw-r--r--
2017-06-22 15:52
requirejs_test.php
3.7
KB
-rw-r--r--
2017-06-22 15:52
rsslib_test.php
6.7
KB
-rw-r--r--
2017-06-22 15:52
scheduled_task_test.php
19.09
KB
-rw-r--r--
2017-06-22 15:52
scss_test.php
2.53
KB
-rw-r--r--
2017-06-22 15:52
session_manager_test.php
25.54
KB
-rw-r--r--
2017-06-22 15:52
session_redis_test.php
10.77
KB
-rw-r--r--
2017-06-22 15:52
sessionlib_test.php
12.57
KB
-rw-r--r--
2017-06-22 15:52
setuplib_test.php
18.57
KB
-rw-r--r--
2017-06-22 15:52
statslib_test.php
24.88
KB
-rw-r--r--
2017-06-22 15:52
string_manager_standard_test.php
6.91
KB
-rw-r--r--
2017-06-22 15:52
tablelib_test.php
18.07
KB
-rw-r--r--
2017-06-22 15:52
text_test.php
20.06
KB
-rw-r--r--
2017-06-22 15:52
theme_config_test.php
7.45
KB
-rw-r--r--
2017-06-22 15:52
unoconv_test.php
4
KB
-rw-r--r--
2017-06-22 15:52
update_api_test.php
6.75
KB
-rw-r--r--
2017-06-22 15:52
update_checker_test.php
10.92
KB
-rw-r--r--
2017-06-22 15:52
update_code_manager_test.php
9.11
KB
-rw-r--r--
2017-06-22 15:52
update_validator_test.php
18.47
KB
-rw-r--r--
2017-06-22 15:52
upgrade_util_test.php
5.65
KB
-rw-r--r--
2017-06-22 15:52
upgradelib_test.php
43.23
KB
-rw-r--r--
2017-06-22 15:52
user_menu_test.php
3.73
KB
-rw-r--r--
2017-06-22 15:52
user_test.php
17.23
KB
-rw-r--r--
2017-06-22 15:52
useragent_test.php
79.88
KB
-rw-r--r--
2017-06-22 15:52
weblib_format_text_test.php
8.43
KB
-rw-r--r--
2017-06-22 15:52
weblib_test.php
27.29
KB
-rw-r--r--
2017-06-22 15:52
xhtml_container_stack_test.php
4.16
KB
-rw-r--r--
2017-06-22 15:52
Save
Rename
<?php // This file is part of Moodle - http://moodle.org/ // // Moodle is free software: you can redistribute it and/or modify // it under the terms of the GNU General Public License as published by // the Free Software Foundation, either version 3 of the License, or // (at your option) any later version. // // Moodle is distributed in the hope that it will be useful, // but WITHOUT ANY WARRANTY; without even the implied warranty of // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the // GNU General Public License for more details. // // You should have received a copy of the GNU General Public License // along with Moodle. If not, see <http://www.gnu.org/licenses/>. /** * Unit tests for /lib/classes/curl/curl_security_helper.php. * * @package core * @copyright 2016 Jake Dallimore <jrhdallimore@gmail.com> * @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later */ defined('MOODLE_INTERNAL') || die(); /** * cURL security test suite. * * Note: The curl_security_helper class performs forward and reverse DNS look-ups in some cases. This class will not attempt to test * this functionality as look-ups can vary from machine to machine. Instead, human testing with known inputs/outputs is recommended. * * @package core * @copyright 2016 Jake Dallimore <jrhdallimore@gmail.com> * @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later */ class core_curl_security_helper_testcase extends advanced_testcase { /** * Test for \core\files\curl_security_helper::url_is_blocked(). * * @param string $url the url to validate. * @param string $blockedhosts the list of blocked hosts. * @param string $allowedports the list of allowed ports. * @param bool $expected the expected result. * @dataProvider curl_security_url_data_provider */ public function test_curl_security_helper_url_is_blocked($url, $blockedhosts, $allowedports, $expected) { $this->resetAfterTest(true); $helper = new \core\files\curl_security_helper(); set_config('curlsecurityblockedhosts', $blockedhosts); set_config('curlsecurityallowedport', $allowedports); $this->assertEquals($expected, $helper->url_is_blocked($url)); } /** * Data provider for test_curl_security_helper_url_is_blocked(). * * @return array */ public function curl_security_url_data_provider() { // Format: url, blocked hosts, allowed ports, expected result. return [ // Base set without the blacklist enabled - no checking takes place. ["http://localhost/x.png", "", "", false], // IP=127.0.0.1, Port=80 (port inferred from http). ["http://localhost:80/x.png", "", "", false], // IP=127.0.0.1, Port=80 (specific port overrides http scheme). ["https://localhost/x.png", "", "", false], // IP=127.0.0.1, Port=443 (port inferred from https). ["http://localhost:443/x.png", "", "", false], // IP=127.0.0.1, Port=443 (specific port overrides http scheme). ["localhost/x.png", "", "", false], // IP=127.0.0.1, Port=80 (port inferred from http fallback). ["localhost:443/x.png", "", "", false], // IP=127.0.0.1, Port=443 (port hard specified, despite http fallback). ["http://127.0.0.1/x.png", "", "", false], // IP=127.0.0.1, Port=80 (port inferred from http). ["127.0.0.1/x.png", "", "", false], // IP=127.0.0.1, Port=80 (port inferred from http fallback). ["http://localhost:8080/x.png", "", "", false], // IP=127.0.0.1, Port=8080 (port hard specified). ["http://192.168.1.10/x.png", "", "", false], // IP=192.168.1.10, Port=80 (port inferred from http). ["https://192.168.1.10/x.png", "", "", false], // IP=192.168.1.10, Port=443 (port inferred from https). ["http://sub.example.com/x.png", "", "", false], // IP=::1, Port = 80 (port inferred from http). ["http://s-1.d-1.com/x.png", "", "", false], // IP=::1, Port = 80 (port inferred from http). // Test set using domain name filters but with all ports allowed (empty). ["http://localhost/x.png", "localhost", "", true], ["localhost/x.png", "localhost", "", true], ["localhost:0/x.png", "localhost", "", true], ["ftp://localhost/x.png", "localhost", "", true], ["http://sub.example.com/x.png", "localhost", "", false], ["http://example.com/x.png", "example.com", "", true], ["http://sub.example.com/x.png", "example.com", "", false], // Test set using wildcard domain name filters but with all ports allowed (empty). ["http://sub.example.com/x.png", "*.com", "", true], ["http://example.com/x.png", "*.example.com", "", false], ["http://sub.example.com/x.png", "*.example.com", "", true], ["http://sub.example.com/x.png", "*.sub.example.com", "", false], ["http://sub.example.com/x.png", "*.example", "", false], // Test set using IP address filters but with all ports allowed (empty). ["http://localhost/x.png", "127.0.0.1", "", true], ["http://127.0.0.1/x.png", "127.0.0.1", "", true], ["http://sub.example.com", "127.0.0.1", "", false], // Test set using CIDR IP range filters but with all ports allowed (empty). ["http://localhost/x.png", "127.0.0.0/24", "", true], ["http://127.0.0.1/x.png", "127.0.0.0/24", "", true], ["http://sub.example.com", "127.0.0.0/24", "", false], // Test set using last-group range filters but with all ports allowed (empty). ["http://localhost/x.png", "127.0.0.0-30", "", true], ["http://127.0.0.1/x.png", "127.0.0.0-30", "", true], ["http://sub.example.com", "127.0.0.0/24", "", false], // Test set using port filters but with all hosts allowed (empty). ["http://localhost/x.png", "", "80\n443", false], ["http://localhost:80/x.png", "", "80\n443", false], ["https://localhost/x.png", "", "80\n443", false], ["http://localhost:443/x.png", "", "80\n443", false], ["http://sub.example.com:8080/x.png", "", "80\n443", true], ["http://sub.example.com:-80/x.png", "", "80\n443", true], ["http://sub.example.com:aaa/x.png", "", "80\n443", true], // Test set using port filters and hosts filters. ["http://localhost/x.png", "127.0.0.1", "80\n443", true], ["http://127.0.0.1/x.png", "127.0.0.1", "80\n443", true], ["http://sub.example.com", "127.0.0.1", "80\n443", false], // Note on testing URLs using IPv6 notation: // At present, the curl_security_helper class doesn't support IPv6 url notation. // E.g. http://[ad34::dddd]:port/resource // This is because it uses clean_param(x, PARAM_URL) as part of parsing, which won't validate urls having IPv6 notation. // The underlying IPv6 address and range support is in place, however, so if clean_param is changed in future, // please add the following test sets. // 1. ["http://[::1]/x.png", "", "", false] // 2. ["http://[::1]/x.png", "::1", "", true] // 3. ["http://[::1]/x.png", "::1/64", "", true] // 4. ["http://[fe80::dddd]/x.png", "fe80::cccc-eeee", "", true] // 5. ["http://[fe80::dddd]/x.png", "fe80::dddd/128", "", true]. ]; } /** * Test for \core\files\curl_security_helper->is_enabled(). * * @param string $blockedhosts the list of blocked hosts. * @param string $allowedports the list of allowed ports. * @param bool $expected the expected result. * @dataProvider curl_security_settings_data_provider */ public function test_curl_security_helper_is_enabled($blockedhosts, $allowedports, $expected) { $this->resetAfterTest(true); $helper = new \core\files\curl_security_helper(); set_config('curlsecurityblockedhosts', $blockedhosts); set_config('curlsecurityallowedport', $allowedports); $this->assertEquals($expected, $helper->is_enabled()); } /** * Data provider for test_curl_security_helper_is_enabled(). * * @return array */ public function curl_security_settings_data_provider() { // Format: blocked hosts, allowed ports, expected result. return [ ["", "", false], ["127.0.0.1", "", true], ["localhost", "", true], ["127.0.0.0/24\n192.0.0.0/24", "", true], ["", "80\n443", true], ]; } /** * Test for \core\files\curl_security_helper::host_is_blocked(). * * @param string $host the host to validate. * @param string $blockedhosts the list of blocked hosts. * @param bool $expected the expected result. * @dataProvider curl_security_host_data_provider */ public function test_curl_security_helper_host_is_blocked($host, $blockedhosts, $expected) { $this->resetAfterTest(true); $helper = new \core\files\curl_security_helper(); set_config('curlsecurityblockedhosts', $blockedhosts); $this->assertEquals($expected, phpunit_util::call_internal_method($helper, 'host_is_blocked', [$host], '\core\files\curl_security_helper')); } /** * Data provider for test_curl_security_helper_host_is_blocked(). * * @return array */ public function curl_security_host_data_provider() { return [ // IPv4 hosts. ["127.0.0.1", "127.0.0.1", true], ["127.0.0.1", "127.0.0.0/24", true], ["127.0.0.1", "127.0.0.0-40", true], ["", "127.0.0.0/24", false], // IPv6 hosts. // Note: ["::", "::", true], - should match but 'address_in_subnet()' has trouble with fully collapsed IPv6 addresses. ["::1", "::1", true], ["::1", "::0-cccc", true], ["::1", "::0/64", true], ["FE80:0000:0000:0000:0000:0000:0000:0000", "fe80::/128", true], ["fe80::eeee", "fe80::ddde/64", true], ["fe80::dddd", "fe80::cccc-eeee", true], ["fe80::dddd", "fe80::ddde-eeee", false], // Domain name hosts. ["example.com", "example.com", true], ["sub.example.com", "example.com", false], ["example.com", "*.com", true], ["example.com", "*.example.com", false], ["sub.example.com", "*.example.com", true], ["sub.sub.example.com", "*.example.com", true], ["sub.example.com", "*example.com", false], ["sub.example.com", "*.example", false], // International domain name hosts. ["xn--nw2a.xn--j6w193g", "xn--nw2a.xn--j6w193g", true], // The domain 見.香港 is ace-encoded to xn--nw2a.xn--j6w193g. ]; } /** * Test for \core\files\curl_security_helper->port_is_blocked(). * * @param int|string $port the port to validate. * @param string $allowedports the list of allowed ports. * @param bool $expected the expected result. * @dataProvider curl_security_port_data_provider */ public function test_curl_security_helper_port_is_blocked($port, $allowedports, $expected) { $this->resetAfterTest(true); $helper = new \core\files\curl_security_helper(); set_config('curlsecurityallowedport', $allowedports); $this->assertEquals($expected, phpunit_util::call_internal_method($helper, 'port_is_blocked', [$port], '\core\files\curl_security_helper')); } /** * Data provider for test_curl_security_helper_port_is_blocked(). * * @return array */ public function curl_security_port_data_provider() { return [ ["", "80\n443", true], [" ", "80\n443", true], ["-1", "80\n443", true], [-1, "80\n443", true], ["n", "80\n443", true], [0, "80\n443", true], ["0", "80\n443", true], [8080, "80\n443", true], ["8080", "80\n443", true], ["80", "80\n443", false], [80, "80\n443", false], [443, "80\n443", false], [0, "", true], // Port 0 and below are always invalid, even when the admin hasn't set whitelist entries. [-1, "", true], // Port 0 and below are always invalid, even when the admin hasn't set whitelist entries. [null, "", true], // Non-string, non-int values are invalid. ]; } /** * Test for \core\files\curl_security_helper::get_blocked_url_string(). */ public function test_curl_security_helper_get_blocked_url_string() { $helper = new \core\files\curl_security_helper(); $this->assertEquals(get_string('curlsecurityurlblocked', 'admin'), $helper->get_blocked_url_string()); } }