| 1 | /* |
| 2 | * This file is part of DisOrder. |
| 3 | * Copyright (C) 2008 Richard Kettlewell |
| 4 | * |
| 5 | * This program is free software: you can redistribute it and/or modify |
| 6 | * it under the terms of the GNU General Public License as published by |
| 7 | * the Free Software Foundation, either version 3 of the License, or |
| 8 | * (at your option) any later version. |
| 9 | * |
| 10 | * This program is distributed in the hope that it will be useful, |
| 11 | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
| 12 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
| 13 | * GNU General Public License for more details. |
| 14 | * |
| 15 | * You should have received a copy of the GNU General Public License |
| 16 | * along with this program. If not, see <http://www.gnu.org/licenses/>. |
| 17 | */ |
| 18 | #include "test.h" |
| 19 | #include "cgi.h" |
| 20 | |
| 21 | static void input_from(const char *s) { |
| 22 | FILE *fp = tmpfile(); |
| 23 | char buffer[64]; |
| 24 | |
| 25 | if(fputs(s, fp) < 0 |
| 26 | || fputs("wibble wibble\r\nspong", fp) < 0 /* ensure CONTENT_LENGTH |
| 27 | * honored */ |
| 28 | || fflush(fp) < 0) |
| 29 | fatal(errno, "writing to temporary file"); |
| 30 | rewind(fp); |
| 31 | xdup2(fileno(fp), 0); |
| 32 | lseek(0, 0/*offset*/, SEEK_SET); |
| 33 | snprintf(buffer, sizeof buffer, "%zu", strlen(s)); |
| 34 | setenv("CONTENT_LENGTH", buffer, 1); |
| 35 | } |
| 36 | |
| 37 | static void test_cgi(void) { |
| 38 | |
| 39 | setenv("REQUEST_METHOD", "GET", 1); |
| 40 | setenv("QUERY_STRING", "foo=bar&a=b+c&c=x%7ey", 1); |
| 41 | cgi_init(); |
| 42 | check_string(cgi_get("foo"), "bar"); |
| 43 | check_string(cgi_get("a"), "b c"); |
| 44 | check_string(cgi_get("c"), "x~y"); |
| 45 | |
| 46 | setenv("REQUEST_METHOD", "POST", 1); |
| 47 | setenv("CONTENT_TYPE", "application/x-www-form-urlencoded", 1); |
| 48 | unsetenv("QUERY_STRING"); |
| 49 | input_from("foo=xbar&a=xb+c&c=xx%7ey"); |
| 50 | cgi_init(); |
| 51 | check_string(cgi_get("foo"), "xbar"); |
| 52 | check_string(cgi_get("a"), "xb c"); |
| 53 | check_string(cgi_get("c"), "xx~y"); |
| 54 | |
| 55 | /* This input string generated by Firefox 2.0.0.14 */ |
| 56 | input_from("-----------------------------16128946562344073111198667379\r\n" |
| 57 | "Content-Disposition: form-data; name=\"input1\"\r\n" |
| 58 | "\r\n" |
| 59 | "normal input\r\n" |
| 60 | "-----------------------------16128946562344073111198667379\r\n" |
| 61 | "Content-Disposition: form-data; name=\"input2\"\r\n" |
| 62 | "\r\n" |
| 63 | "with pound sign: \xC2\xA3\r\n" |
| 64 | "-----------------------------16128946562344073111198667379\r\n" |
| 65 | "Content-Disposition: form-data; name=\"input3\"\r\n" |
| 66 | "\r\n" |
| 67 | "hidden input\r\n" |
| 68 | "-----------------------------16128946562344073111198667379\r\n" |
| 69 | "Content-Disposition: form-data; name=\"submit\"\r\n" |
| 70 | "\r\n" |
| 71 | "Submit Query\r\n" |
| 72 | "-----------------------------16128946562344073111198667379--\r\n"); |
| 73 | setenv("CONTENT_TYPE", "multipart/form-data; boundary=---------------------------16128946562344073111198667379", 1); |
| 74 | unsetenv("QUERY_STRING"); |
| 75 | cgi_init(); |
| 76 | check_string(cgi_get("input1"), "normal input"); |
| 77 | check_string(cgi_get("input2"), "with pound sign: \xC2\xA3"); |
| 78 | check_string(cgi_get("input3"), "hidden input"); |
| 79 | check_string(cgi_get("submit"), "Submit Query"); |
| 80 | |
| 81 | input_from("-----------------------------33919340914020259251659146591\r\n" |
| 82 | "Content-Disposition: form-data; name=\"text\"\r\n" |
| 83 | "\r\n" |
| 84 | "Text with\r\n" |
| 85 | "multiple lines\r\n" |
| 86 | "and trailing spaces \r\n" |
| 87 | "---and leading dashes\r\n" |
| 88 | "and pound sign \xC2\xA3\r\n" |
| 89 | "\r\n" |
| 90 | "-----------------------------33919340914020259251659146591\r\n" |
| 91 | "Content-Disposition: form-data; name=\"empty\"\r\n" |
| 92 | "\r\n" |
| 93 | "\r\n" |
| 94 | "-----------------------------33919340914020259251659146591\r\n" |
| 95 | "Content-Disposition: form-data; name=\"submit\"\r\n" |
| 96 | "\r\n" |
| 97 | "Submit Query\r\n" |
| 98 | "-----------------------------33919340914020259251659146591--\r\n"); |
| 99 | setenv("CONTENT_TYPE", "multipart/form-data; boundary=---------------------------33919340914020259251659146591", 1); |
| 100 | cgi_init(); |
| 101 | check_string(cgi_get("text"), ("Text with\r\n" |
| 102 | "multiple lines\r\n" |
| 103 | "and trailing spaces \r\n" |
| 104 | "---and leading dashes\r\n" |
| 105 | "and pound sign \xC2\xA3\r\n" |
| 106 | "")); |
| 107 | check_string(cgi_get("empty"), ""); |
| 108 | |
| 109 | check_string(cgi_sgmlquote("foobar"), "foobar"); |
| 110 | check_string(cgi_sgmlquote("<wibble>"), "<wibble>"); |
| 111 | check_string(cgi_sgmlquote("\"&\""), ""&""); |
| 112 | check_string(cgi_sgmlquote("\xC2\xA3"), "£"); |
| 113 | |
| 114 | check_string(cgi_makeurl("http://example.com/", (char *)NULL), |
| 115 | "http://example.com/"); |
| 116 | check_string(cgi_makeurl("http://example.com/", |
| 117 | "foo", "bar", |
| 118 | "a", "b c", |
| 119 | "d", "f=g+h", |
| 120 | (char *)NULL), |
| 121 | "http://example.com/?foo=bar&a=b%20c&d=f%3dg%2bh"); |
| 122 | |
| 123 | } |
| 124 | |
| 125 | TEST(cgi); |
| 126 | |
| 127 | /* |
| 128 | Local Variables: |
| 129 | c-basic-offset:2 |
| 130 | comment-column:40 |
| 131 | fill-column:79 |
| 132 | indent-tabs-mode:nil |
| 133 | End: |
| 134 | */ |