forked from WordPress/wordpress-develop
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathsanitizeOption.php
More file actions
177 lines (160 loc) · 5.86 KB
/
Copy pathsanitizeOption.php
File metadata and controls
177 lines (160 loc) · 5.86 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
<?php
/**
* @group option
*/
class Tests_Option_SanitizeOption extends WP_UnitTestCase {
/**
* Data provider to test all of the sanitize_option() case
*
* Inner array params: $option_name, $sanitized, $original
*
* @return array
*/
public function sanitize_option_provider() {
return array(
array( 'admin_email', 'mail@example.com', 'mail@example.com' ),
array( 'admin_email', get_option( 'admin_email' ), 'invalid' ),
array( 'page_on_front', 0, 0 ),
array( 'page_on_front', 10, '-10' ),
array( 'posts_per_page', 10, 10 ),
array( 'posts_per_page', -1, -1 ),
array( 'posts_per_page', 2, -2 ),
array( 'posts_per_page', 1, 'ten' ),
array( 'default_ping_status', 'open', 'open' ),
array( 'default_ping_status', 'closed', '' ),
array( 'blogname', 'My Site', 'My Site' ),
array( 'blogname', '<i>My Site</i>', '<i>My Site</i>' ),
array( 'blog_charset', 'UTF-8', 'UTF-8' ),
array( 'blog_charset', 'charset', '">charset<"' ),
array( 'blog_public', 1, null ),
array( 'blog_public', 1, '1' ),
array( 'blog_public', -2, '-2' ),
array( 'date_format', 'F j, Y', 'F j, Y' ),
array( 'date_format', 'F j, Y', 'F j, <strong>Y</strong>' ),
array( 'ping_sites', 'http://rpc.pingomatic.com/', 'http://rpc.pingomatic.com/' ),
array( 'ping_sites', "http://www.example.com\nhttp://example.org", "www.example.com \n\texample.org\n\n" ),
array( 'gmt_offset', '0', 0 ),
array( 'gmt_offset', '1.5', '1.5' ),
array( 'siteurl', 'http://example.org', 'http://example.org' ),
array( 'siteurl', 'http://example.org/subdir', 'http://example.org/subdir' ),
array( 'siteurl', get_option( 'siteurl' ), '' ),
array( 'home', 'http://example.org', 'http://example.org' ),
array( 'home', 'https://example.org', 'https://example.org' ),
array( 'home', 'http://localhost:8000', 'http://localhost:8000' ),
array( 'home', get_option( 'home' ), '' ),
array( 'WPLANG', 0, 0 ),
array( 'WPLANG', '', '' ),
array(
'illegal_names',
array( 'www', 'web', 'root', 'admin', 'main', 'invite', 'administrator', 'files' ),
array( 'www', 'web', 'root', 'admin', 'main', 'invite', 'administrator', 'files' ),
),
array(
'illegal_names',
array( 'www', 'web', 'root', 'admin', 'main', 'invite', 'administrator', 'files' ),
'www web root admin main invite administrator files',
),
array(
'banned_email_domains',
array( 'mail.com', 'gmail.com' ),
array( 'mail.com', 'gmail.com' ),
),
array(
'banned_email_domains',
array( 'mail.com' ),
"mail.com\ngmail,com",
),
array( 'timezone_string', 0, 0 ),
array( 'timezone_string', 'Europe/London', 'Europe/London' ),
array( 'timezone_string', get_option( 'timezone_string' ), 'invalid' ),
// @ticket 56468
'deprecated timezone string is accepted as valid' => array(
'option_name' => 'timezone_string',
'sanitized' => 'America/Buenos_Aires',
'original' => 'America/Buenos_Aires',
),
array( 'permalink_structure', '', '' ),
array( 'permalink_structure', '/%year%/%20%postname%', '/%year%/ %postname%' ),
array( 'default_role', 'subscriber', 'subscriber' ),
array( 'default_role', 'subscriber', 'invalid' ),
array( 'default_role', 'editor', 'editor' ),
array( 'moderation_keys', 'string of words', 'string of words' ),
array( 'moderation_keys', "one\ntwo three", "one\none\ntwo three" ),
);
}
/**
* @dataProvider sanitize_option_provider
*
* @covers ::sanitize_option
*/
public function test_sanitize_option( $option_name, $sanitized, $original ) {
$this->assertSame( $sanitized, sanitize_option( $option_name, $original ) );
}
public function upload_path_provider() {
return array(
array( '<a href="http://www.example.com">Link</a>', 'Link' ),
array( '<scr' . 'ipt>url</scr' . 'ipt>', 'url' ),
array( '/path/to/things', '/path/to/things' ),
array( '\path\to\things', '\path\to\things' ),
);
}
/**
* @dataProvider upload_path_provider
*
* @covers ::sanitize_option
*/
public function test_sanitize_option_upload_path( $provided, $expected ) {
$this->assertSame( $expected, sanitize_option( 'upload_path', $provided ) );
}
/**
* @ticket 36122
*
* @covers ::sanitize_option
*/
public function test_emoji_in_blogname_and_description() {
global $wpdb;
$value = "whee\xf0\x9f\x98\x88";
if ( 'utf8mb4' === $wpdb->get_col_charset( $wpdb->options, 'option_value' ) ) {
$expected = $value;
} else {
$expected = 'whee😈';
}
$this->assertSame( $expected, sanitize_option( 'blogname', $value ) );
$this->assertSame( $expected, sanitize_option( 'blogdescription', $value ) );
}
/**
* @dataProvider permalink_structure_provider
*
* @covers ::sanitize_option
* @covers ::get_settings_errors
*/
public function test_sanitize_permalink_structure( $provided, $expected, $valid ) {
global $wp_settings_errors;
$old_wp_settings_errors = (array) $wp_settings_errors;
$actual = sanitize_option( 'permalink_structure', $provided );
$errors = get_settings_errors( 'permalink_structure' );
// Clear errors.
$wp_settings_errors = $old_wp_settings_errors;
if ( $valid ) {
$this->assertEmpty( $errors );
} else {
$this->assertNotEmpty( $errors );
$this->assertSame( 'invalid_permalink_structure', $errors[0]['code'] );
}
$this->assertEquals( $expected, $actual );
}
public function permalink_structure_provider() {
return array(
array( '', '', true ),
array( '%postname', false, false ),
array( '%/%', false, false ),
array( '%%%', false, false ),
array( '%a%', '%a%', true ),
array( '%postname%', '%postname%', true ),
array( '/%postname%/', '/%postname%/', true ),
array( '/%year%/%monthnum%/%day%/%postname%/', '/%year%/%monthnum%/%day%/%postname%/', true ),
array( '/%year/%postname%/', '/%year/%postname%/', true ),
array( new WP_Error( 'wpdb_get_table_charset_failure' ), false, false ), // @ticket 53986
);
}
}