Projet

Général

Profil

Révision bceb9b7a

Ajouté par Florent Torregrosa il y a environ 9 ans

Update core to 7.35

Voir les différences:

drupal7/CHANGELOG.txt
1 1

  
2
Drupal 7.35, 2015-03-18
3
----------------------
4
- Fixed security issues (multiple vulnerabilities). See SA-CORE-2015-001.
5

  
2 6
Drupal 7.34, 2014-11-19
3 7
----------------------
4 8
- Fixed security issues (multiple vulnerabilities). See SA-CORE-2014-006.
drupal7/includes/bootstrap.inc
8 8
/**
9 9
 * The current system version.
10 10
 */
11
define('VERSION', '7.34');
11
define('VERSION', '7.35');
12 12

  
13 13
/**
14 14
 * Core API compatibility.
......
2497 2497
  // Load bootstrap modules.
2498 2498
  require_once DRUPAL_ROOT . '/includes/module.inc';
2499 2499
  module_load_all(TRUE);
2500

  
2501
  // Sanitize the destination parameter (which is often used for redirects) to
2502
  // prevent open redirect attacks leading to other domains. Sanitize both
2503
  // $_GET['destination'] and $_REQUEST['destination'] to protect code that
2504
  // relies on either, but do not sanitize $_POST to avoid interfering with
2505
  // unrelated form submissions. The sanitization happens here because
2506
  // url_is_external() requires the variable system to be available.
2507
  if (isset($_GET['destination']) || isset($_REQUEST['destination'])) {
2508
    require_once DRUPAL_ROOT . '/includes/common.inc';
2509
    // If the destination is an external URL, remove it.
2510
    if (isset($_GET['destination']) && url_is_external($_GET['destination'])) {
2511
      unset($_GET['destination']);
2512
      unset($_REQUEST['destination']);
2513
    }
2514
    // If there's still something in $_REQUEST['destination'] that didn't come
2515
    // from $_GET, check it too.
2516
    if (isset($_REQUEST['destination']) && (!isset($_GET['destination']) || $_REQUEST['destination'] != $_GET['destination']) && url_is_external($_REQUEST['destination'])) {
2517
      unset($_REQUEST['destination']);
2518
    }
2519
  }
2500 2520
}
2501 2521

  
2502 2522
/**
drupal7/includes/common.inc
2214 2214
    'prefix' => ''
2215 2215
  );
2216 2216

  
2217
  // A duplicate of the code from url_is_external() to avoid needing another
2218
  // function call, since performance inside url() is critical.
2217 2219
  if (!isset($options['external'])) {
2218
    // Return an external link if $path contains an allowed absolute URL. Only
2219
    // call the slow drupal_strip_dangerous_protocols() if $path contains a ':'
2220
    // before any / ? or #. Note: we could use url_is_external($path) here, but
2221
    // that would require another function call, and performance inside url() is
2222
    // critical.
2220
    // Return an external link if $path contains an allowed absolute URL. Avoid
2221
    // calling drupal_strip_dangerous_protocols() if there is any slash (/),
2222
    // hash (#) or question_mark (?) before the colon (:) occurrence - if any -
2223
    // as this would clearly mean it is not a URL. If the path starts with 2
2224
    // slashes then it is always considered an external URL without an explicit
2225
    // protocol part.
2223 2226
    $colonpos = strpos($path, ':');
2224
    $options['external'] = ($colonpos !== FALSE && !preg_match('![/?#]!', substr($path, 0, $colonpos)) && drupal_strip_dangerous_protocols($path) == $path);
2227
    $options['external'] = (strpos($path, '//') === 0)
2228
      || ($colonpos !== FALSE
2229
        && !preg_match('![/?#]!', substr($path, 0, $colonpos))
2230
        && drupal_strip_dangerous_protocols($path) == $path);
2225 2231
  }
2226 2232

  
2227 2233
  // Preserve the original path before altering or aliasing.
......
2259 2265
    return $path . $options['fragment'];
2260 2266
  }
2261 2267

  
2268
  // Strip leading slashes from internal paths to prevent them becoming external
2269
  // URLs without protocol. /example.com should not be turned into
2270
  // //example.com.
2271
  $path = ltrim($path, '/');
2272

  
2262 2273
  global $base_url, $base_secure_url, $base_insecure_url;
2263 2274

  
2264 2275
  // The base_url might be rewritten from the language rewrite in domain mode.
......
2336 2347
 */
2337 2348
function url_is_external($path) {
2338 2349
  $colonpos = strpos($path, ':');
2339
  // Avoid calling drupal_strip_dangerous_protocols() if there is any
2340
  // slash (/), hash (#) or question_mark (?) before the colon (:)
2341
  // occurrence - if any - as this would clearly mean it is not a URL.
2342
  return $colonpos !== FALSE && !preg_match('![/?#]!', substr($path, 0, $colonpos)) && drupal_strip_dangerous_protocols($path) == $path;
2350
  // Avoid calling drupal_strip_dangerous_protocols() if there is any slash (/),
2351
  // hash (#) or question_mark (?) before the colon (:) occurrence - if any - as
2352
  // this would clearly mean it is not a URL. If the path starts with 2 slashes
2353
  // then it is always considered an external URL without an explicit protocol
2354
  // part.
2355
  return (strpos($path, '//') === 0)
2356
    || ($colonpos !== FALSE
2357
      && !preg_match('![/?#]!', substr($path, 0, $colonpos))
2358
      && drupal_strip_dangerous_protocols($path) == $path);
2343 2359
}
2344 2360

  
2345 2361
/**
......
2636 2652

  
2637 2653
        // Keep old path for reference, and to allow forms to redirect to it.
2638 2654
        if (!isset($_GET['destination'])) {
2639
          $_GET['destination'] = $_GET['q'];
2655
          // Make sure that the current path is not interpreted as external URL.
2656
          if (!url_is_external($_GET['q'])) {
2657
            $_GET['destination'] = $_GET['q'];
2658
          }
2640 2659
        }
2641 2660

  
2642 2661
        $path = drupal_get_normal_path(variable_get('site_404', ''));
......
2665 2684

  
2666 2685
        // Keep old path for reference, and to allow forms to redirect to it.
2667 2686
        if (!isset($_GET['destination'])) {
2668
          $_GET['destination'] = $_GET['q'];
2687
          // Make sure that the current path is not interpreted as external URL.
2688
          if (!url_is_external($_GET['q'])) {
2689
            $_GET['destination'] = $_GET['q'];
2690
          }
2669 2691
        }
2670 2692

  
2671 2693
        $path = drupal_get_normal_path(variable_get('site_403', ''));
drupal7/modules/aggregator/aggregator.info
7 7
configure = admin/config/services/aggregator/settings
8 8
stylesheets[all][] = aggregator.css
9 9

  
10
; Information added by Drupal.org packaging script on 2014-11-19
11
version = "7.34"
10
; Information added by Drupal.org packaging script on 2015-03-18
11
version = "7.35"
12 12
project = "drupal"
13
datestamp = "1416429488"
13
datestamp = "1426707463"
14 14

  
drupal7/modules/aggregator/tests/aggregator_test.info
5 5
core = 7.x
6 6
hidden = TRUE
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/block/block.info
6 6
files[] = block.test
7 7
configure = admin/structure/block
8 8

  
9
; Information added by Drupal.org packaging script on 2014-11-19
10
version = "7.34"
9
; Information added by Drupal.org packaging script on 2015-03-18
10
version = "7.35"
11 11
project = "drupal"
12
datestamp = "1416429488"
12
datestamp = "1426707463"
13 13

  
drupal7/modules/block/tests/block_test.info
5 5
core = 7.x
6 6
hidden = TRUE
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/block/tests/themes/block_test_theme/block_test_theme.info
13 13
regions[highlighted] = Highlighted
14 14
regions[help] = Help
15 15

  
16
; Information added by Drupal.org packaging script on 2014-11-19
17
version = "7.34"
16
; Information added by Drupal.org packaging script on 2015-03-18
17
version = "7.35"
18 18
project = "drupal"
19
datestamp = "1416429488"
19
datestamp = "1426707463"
20 20

  
drupal7/modules/blog/blog.info
5 5
core = 7.x
6 6
files[] = blog.test
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/book/book.info
7 7
configure = admin/content/book/settings
8 8
stylesheets[all][] = book.css
9 9

  
10
; Information added by Drupal.org packaging script on 2014-11-19
11
version = "7.34"
10
; Information added by Drupal.org packaging script on 2015-03-18
11
version = "7.35"
12 12
project = "drupal"
13
datestamp = "1416429488"
13
datestamp = "1426707463"
14 14

  
drupal7/modules/color/color.info
5 5
core = 7.x
6 6
files[] = color.test
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/comment/comment.info
9 9
configure = admin/content/comment
10 10
stylesheets[all][] = comment.css
11 11

  
12
; Information added by Drupal.org packaging script on 2014-11-19
13
version = "7.34"
12
; Information added by Drupal.org packaging script on 2015-03-18
13
version = "7.35"
14 14
project = "drupal"
15
datestamp = "1416429488"
15
datestamp = "1426707463"
16 16

  
drupal7/modules/contact/contact.info
6 6
files[] = contact.test
7 7
configure = admin/structure/contact
8 8

  
9
; Information added by Drupal.org packaging script on 2014-11-19
10
version = "7.34"
9
; Information added by Drupal.org packaging script on 2015-03-18
10
version = "7.35"
11 11
project = "drupal"
12
datestamp = "1416429488"
12
datestamp = "1426707463"
13 13

  
drupal7/modules/contextual/contextual.info
5 5
core = 7.x
6 6
files[] = contextual.test
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/dashboard/dashboard.info
7 7
dependencies[] = block
8 8
configure = admin/dashboard/customize
9 9

  
10
; Information added by Drupal.org packaging script on 2014-11-19
11
version = "7.34"
10
; Information added by Drupal.org packaging script on 2015-03-18
11
version = "7.35"
12 12
project = "drupal"
13
datestamp = "1416429488"
13
datestamp = "1426707463"
14 14

  
drupal7/modules/dblog/dblog.info
5 5
core = 7.x
6 6
files[] = dblog.test
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/field/field.info
11 11
required = TRUE
12 12
stylesheets[all][] = theme/field.css
13 13

  
14
; Information added by Drupal.org packaging script on 2014-11-19
15
version = "7.34"
14
; Information added by Drupal.org packaging script on 2015-03-18
15
version = "7.35"
16 16
project = "drupal"
17
datestamp = "1416429488"
17
datestamp = "1426707463"
18 18

  
drupal7/modules/field/modules/field_sql_storage/field_sql_storage.info
7 7
files[] = field_sql_storage.test
8 8
required = TRUE
9 9

  
10
; Information added by Drupal.org packaging script on 2014-11-19
11
version = "7.34"
10
; Information added by Drupal.org packaging script on 2015-03-18
11
version = "7.35"
12 12
project = "drupal"
13
datestamp = "1416429488"
13
datestamp = "1426707463"
14 14

  
drupal7/modules/field/modules/list/list.info
7 7
dependencies[] = options
8 8
files[] = tests/list.test
9 9

  
10
; Information added by Drupal.org packaging script on 2014-11-19
11
version = "7.34"
10
; Information added by Drupal.org packaging script on 2015-03-18
11
version = "7.35"
12 12
project = "drupal"
13
datestamp = "1416429488"
13
datestamp = "1426707463"
14 14

  
drupal7/modules/field/modules/list/tests/list_test.info
5 5
version = VERSION
6 6
hidden = TRUE
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/field/modules/number/number.info
6 6
dependencies[] = field
7 7
files[] = number.test
8 8

  
9
; Information added by Drupal.org packaging script on 2014-11-19
10
version = "7.34"
9
; Information added by Drupal.org packaging script on 2015-03-18
10
version = "7.35"
11 11
project = "drupal"
12
datestamp = "1416429488"
12
datestamp = "1426707463"
13 13

  
drupal7/modules/field/modules/options/options.info
6 6
dependencies[] = field
7 7
files[] = options.test
8 8

  
9
; Information added by Drupal.org packaging script on 2014-11-19
10
version = "7.34"
9
; Information added by Drupal.org packaging script on 2015-03-18
10
version = "7.35"
11 11
project = "drupal"
12
datestamp = "1416429488"
12
datestamp = "1426707463"
13 13

  
drupal7/modules/field/modules/text/text.info
7 7
files[] = text.test
8 8
required = TRUE
9 9

  
10
; Information added by Drupal.org packaging script on 2014-11-19
11
version = "7.34"
10
; Information added by Drupal.org packaging script on 2015-03-18
11
version = "7.35"
12 12
project = "drupal"
13
datestamp = "1416429488"
13
datestamp = "1426707463"
14 14

  
drupal7/modules/field/tests/field_test.info
6 6
version = VERSION
7 7
hidden = TRUE
8 8

  
9
; Information added by Drupal.org packaging script on 2014-11-19
10
version = "7.34"
9
; Information added by Drupal.org packaging script on 2015-03-18
10
version = "7.35"
11 11
project = "drupal"
12
datestamp = "1416429488"
12
datestamp = "1426707463"
13 13

  
drupal7/modules/field_ui/field_ui.info
6 6
dependencies[] = field
7 7
files[] = field_ui.test
8 8

  
9
; Information added by Drupal.org packaging script on 2014-11-19
10
version = "7.34"
9
; Information added by Drupal.org packaging script on 2015-03-18
10
version = "7.35"
11 11
project = "drupal"
12
datestamp = "1416429488"
12
datestamp = "1426707463"
13 13

  
drupal7/modules/file/file.info
6 6
dependencies[] = field
7 7
files[] = tests/file.test
8 8

  
9
; Information added by Drupal.org packaging script on 2014-11-19
10
version = "7.34"
9
; Information added by Drupal.org packaging script on 2015-03-18
10
version = "7.35"
11 11
project = "drupal"
12
datestamp = "1416429488"
12
datestamp = "1426707463"
13 13

  
drupal7/modules/file/tests/file_module_test.info
5 5
core = 7.x
6 6
hidden = TRUE
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/filter/filter.info
7 7
required = TRUE
8 8
configure = admin/config/content/formats
9 9

  
10
; Information added by Drupal.org packaging script on 2014-11-19
11
version = "7.34"
10
; Information added by Drupal.org packaging script on 2015-03-18
11
version = "7.35"
12 12
project = "drupal"
13
datestamp = "1416429488"
13
datestamp = "1426707463"
14 14

  
drupal7/modules/forum/forum.info
9 9
configure = admin/structure/forum
10 10
stylesheets[all][] = forum.css
11 11

  
12
; Information added by Drupal.org packaging script on 2014-11-19
13
version = "7.34"
12
; Information added by Drupal.org packaging script on 2015-03-18
13
version = "7.35"
14 14
project = "drupal"
15
datestamp = "1416429488"
15
datestamp = "1426707463"
16 16

  
drupal7/modules/help/help.info
5 5
core = 7.x
6 6
files[] = help.test
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/image/image.info
7 7
files[] = image.test
8 8
configure = admin/config/media/image-styles
9 9

  
10
; Information added by Drupal.org packaging script on 2014-11-19
11
version = "7.34"
10
; Information added by Drupal.org packaging script on 2015-03-18
11
version = "7.35"
12 12
project = "drupal"
13
datestamp = "1416429488"
13
datestamp = "1426707463"
14 14

  
drupal7/modules/image/tests/image_module_test.info
6 6
files[] = image_module_test.module
7 7
hidden = TRUE
8 8

  
9
; Information added by Drupal.org packaging script on 2014-11-19
10
version = "7.34"
9
; Information added by Drupal.org packaging script on 2015-03-18
10
version = "7.35"
11 11
project = "drupal"
12
datestamp = "1416429488"
12
datestamp = "1426707463"
13 13

  
drupal7/modules/locale/locale.info
6 6
files[] = locale.test
7 7
configure = admin/config/regional/language
8 8

  
9
; Information added by Drupal.org packaging script on 2014-11-19
10
version = "7.34"
9
; Information added by Drupal.org packaging script on 2015-03-18
10
version = "7.35"
11 11
project = "drupal"
12
datestamp = "1416429488"
12
datestamp = "1426707463"
13 13

  
drupal7/modules/locale/tests/locale_test.info
5 5
version = VERSION
6 6
hidden = TRUE
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/menu/menu.info
6 6
files[] = menu.test
7 7
configure = admin/structure/menu
8 8

  
9
; Information added by Drupal.org packaging script on 2014-11-19
10
version = "7.34"
9
; Information added by Drupal.org packaging script on 2015-03-18
10
version = "7.35"
11 11
project = "drupal"
12
datestamp = "1416429488"
12
datestamp = "1426707463"
13 13

  
drupal7/modules/node/node.info
9 9
configure = admin/structure/types
10 10
stylesheets[all][] = node.css
11 11

  
12
; Information added by Drupal.org packaging script on 2014-11-19
13
version = "7.34"
12
; Information added by Drupal.org packaging script on 2015-03-18
13
version = "7.35"
14 14
project = "drupal"
15
datestamp = "1416429488"
15
datestamp = "1426707463"
16 16

  
drupal7/modules/node/tests/node_access_test.info
5 5
core = 7.x
6 6
hidden = TRUE
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/node/tests/node_test.info
5 5
core = 7.x
6 6
hidden = TRUE
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/node/tests/node_test_exception.info
5 5
core = 7.x
6 6
hidden = TRUE
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/openid/openid.info
5 5
core = 7.x
6 6
files[] = openid.test
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/openid/tests/openid_test.info
6 6
dependencies[] = openid
7 7
hidden = TRUE
8 8

  
9
; Information added by Drupal.org packaging script on 2014-11-19
10
version = "7.34"
9
; Information added by Drupal.org packaging script on 2015-03-18
10
version = "7.35"
11 11
project = "drupal"
12
datestamp = "1416429488"
12
datestamp = "1426707463"
13 13

  
drupal7/modules/overlay/overlay.info
4 4
version = VERSION
5 5
core = 7.x
6 6

  
7
; Information added by Drupal.org packaging script on 2014-11-19
8
version = "7.34"
7
; Information added by Drupal.org packaging script on 2015-03-18
8
version = "7.35"
9 9
project = "drupal"
10
datestamp = "1416429488"
10
datestamp = "1426707463"
11 11

  
drupal7/modules/path/path.info
6 6
files[] = path.test
7 7
configure = admin/config/search/path
8 8

  
9
; Information added by Drupal.org packaging script on 2014-11-19
10
version = "7.34"
9
; Information added by Drupal.org packaging script on 2015-03-18
10
version = "7.35"
11 11
project = "drupal"
12
datestamp = "1416429488"
12
datestamp = "1426707463"
13 13

  
drupal7/modules/php/php.info
5 5
core = 7.x
6 6
files[] = php.test
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/poll/poll.info
6 6
files[] = poll.test
7 7
stylesheets[all][] = poll.css
8 8

  
9
; Information added by Drupal.org packaging script on 2014-11-19
10
version = "7.34"
9
; Information added by Drupal.org packaging script on 2015-03-18
10
version = "7.35"
11 11
project = "drupal"
12
datestamp = "1416429488"
12
datestamp = "1426707463"
13 13

  
drupal7/modules/profile/profile.info
11 11
; See user_system_info_alter().
12 12
hidden = TRUE
13 13

  
14
; Information added by Drupal.org packaging script on 2014-11-19
15
version = "7.34"
14
; Information added by Drupal.org packaging script on 2015-03-18
15
version = "7.35"
16 16
project = "drupal"
17
datestamp = "1416429488"
17
datestamp = "1426707463"
18 18

  
drupal7/modules/rdf/rdf.info
5 5
core = 7.x
6 6
files[] = rdf.test
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/rdf/tests/rdf_test.info
5 5
core = 7.x
6 6
hidden = TRUE
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/search/search.info
8 8
configure = admin/config/search/settings
9 9
stylesheets[all][] = search.css
10 10

  
11
; Information added by Drupal.org packaging script on 2014-11-19
12
version = "7.34"
11
; Information added by Drupal.org packaging script on 2015-03-18
12
version = "7.35"
13 13
project = "drupal"
14
datestamp = "1416429488"
14
datestamp = "1426707463"
15 15

  
drupal7/modules/search/tests/search_embedded_form.info
5 5
core = 7.x
6 6
hidden = TRUE
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/search/tests/search_extra_type.info
5 5
core = 7.x
6 6
hidden = TRUE
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/shortcut/shortcut.info
6 6
files[] = shortcut.test
7 7
configure = admin/config/user-interface/shortcut
8 8

  
9
; Information added by Drupal.org packaging script on 2014-11-19
10
version = "7.34"
9
; Information added by Drupal.org packaging script on 2015-03-18
10
version = "7.35"
11 11
project = "drupal"
12
datestamp = "1416429488"
12
datestamp = "1426707463"
13 13

  
drupal7/modules/simpletest/simpletest.info
56 56
files[] = tests/upgrade/update.field.test
57 57
files[] = tests/upgrade/update.user.test
58 58

  
59
; Information added by Drupal.org packaging script on 2014-11-19
60
version = "7.34"
59
; Information added by Drupal.org packaging script on 2015-03-18
60
version = "7.35"
61 61
project = "drupal"
62
datestamp = "1416429488"
62
datestamp = "1426707463"
63 63

  
drupal7/modules/simpletest/tests/actions_loop_test.info
5 5
core = 7.x
6 6
hidden = TRUE
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/simpletest/tests/ajax_forms_test.info
5 5
version = VERSION
6 6
hidden = TRUE
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/simpletest/tests/ajax_test.info
5 5
core = 7.x
6 6
hidden = TRUE
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/simpletest/tests/batch_test.info
5 5
core = 7.x
6 6
hidden = TRUE
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/simpletest/tests/bootstrap.test
546 546
    }
547 547
  }
548 548
}
549

  
550
/**
551
 * Tests for $_GET['destination'] and $_REQUEST['destination'] validation.
552
 */
553
class BootstrapDestinationTestCase extends DrupalWebTestCase {
554

  
555
  public static function getInfo() {
556
    return array(
557
      'name' => 'URL destination validation',
558
      'description' => 'Test that $_GET[\'destination\'] and $_REQUEST[\'destination\'] cannot contain external URLs.',
559
      'group' => 'Bootstrap',
560
    );
561
  }
562

  
563
  function setUp() {
564
    parent::setUp('system_test');
565
  }
566

  
567
  /**
568
   * Tests that $_GET/$_REQUEST['destination'] only contain internal URLs.
569
   *
570
   * @see _drupal_bootstrap_variables()
571
   * @see system_test_get_destination()
572
   * @see system_test_request_destination()
573
   */
574
  public function testDestination() {
575
    $test_cases = array(
576
      array(
577
        'input' => 'node',
578
        'output' => 'node',
579
        'message' => "Standard internal example node path is present in the 'destination' parameter.",
580
      ),
581
      array(
582
        'input' => '/example.com',
583
        'output' => '/example.com',
584
        'message' => 'Internal path with one leading slash is allowed.',
585
      ),
586
      array(
587
        'input' => '//example.com/test',
588
        'output' => '',
589
        'message' => 'External URL without scheme is not allowed.',
590
      ),
591
      array(
592
        'input' => 'example:test',
593
        'output' => 'example:test',
594
        'message' => 'Internal URL using a colon is allowed.',
595
      ),
596
      array(
597
        'input' => 'http://example.com',
598
        'output' => '',
599
        'message' => 'External URL is not allowed.',
600
      ),
601
      array(
602
        'input' => 'javascript:alert(0)',
603
        'output' => 'javascript:alert(0)',
604
        'message' => 'Javascript URL is allowed because it is treated as an internal URL.',
605
      ),
606
    );
607
    foreach ($test_cases as $test_case) {
608
      // Test $_GET['destination'].
609
      $this->drupalGet('system-test/get-destination', array('query' => array('destination' => $test_case['input'])));
610
      $this->assertIdentical($test_case['output'], $this->drupalGetContent(), $test_case['message']);
611
      // Test $_REQUEST['destination']. There's no form to submit to, so
612
      // drupalPost() won't work here; this just tests a direct $_POST request
613
      // instead.
614
      $curl_parameters = array(
615
        CURLOPT_URL => $this->getAbsoluteUrl('system-test/request-destination'),
616
        CURLOPT_POST => TRUE,
617
        CURLOPT_POSTFIELDS => 'destination=' . urlencode($test_case['input']),
618
        CURLOPT_HTTPHEADER => array(),
619
      );
620
      $post_output = $this->curlExec($curl_parameters);
621
      $this->assertIdentical($test_case['output'], $post_output, $test_case['message']);
622
    }
623

  
624
    // Make sure that 404 pages do not populate $_GET['destination'] with
625
    // external URLs.
626
    variable_set('site_404', 'system-test/get-destination');
627
    $this->drupalGet('http://example.com', array('external' => FALSE));
628
    $this->assertIdentical('', $this->drupalGetContent(), 'External URL is not allowed on 404 pages.');
629
  }
630
}
drupal7/modules/simpletest/tests/common.test
209 209
    // Test that drupal can recognize an absolute URL. Used to prevent attack vectors.
210 210
    $this->assertTrue(url_is_external($url), 'Correctly identified an external URL.');
211 211

  
212
    // External URL without an explicit protocol.
213
    $url = '//drupal.org/foo/bar?foo=bar&bar=baz&baz#foo';
214
    $this->assertTrue(url_is_external($url), 'Correctly identified an external URL without a protocol part.');
215

  
216
    // Internal URL starting with a slash.
217
    $url = '/drupal.org';
218
    $this->assertFalse(url_is_external($url), 'Correctly identified an internal URL with a leading slash.');
219

  
212 220
    // Test the parsing of absolute URLs.
221
    $url = 'http://drupal.org/foo/bar?foo=bar&bar=baz&baz#foo';
213 222
    $result = array(
214 223
      'path' => 'http://drupal.org/foo/bar',
215 224
      'query' => array('foo' => 'bar', 'bar' => 'baz', 'baz' => ''),
......
349 358
    $query = array($this->randomName(5) => $this->randomName(5));
350 359
    $result = url($url, array('query' => $query));
351 360
    $this->assertEqual($url . '&' . http_build_query($query, '', '&'), $result, 'External URL query string can be extended with a custom query string in $options.');
361

  
362
    // Verify that an internal URL does not result in an external URL without
363
    // protocol part.
364
    $url = '/drupal.org';
365
    $result = url($url);
366
    $this->assertTrue(strpos($result, '//') === FALSE, 'Internal URL does not turn into an external URL.');
367

  
368
    // Verify that an external URL without protocol part is recognized as such.
369
    $url = '//drupal.org';
370
    $result = url($url);
371
    $this->assertEqual($url, $result, 'External URL without protocol is not altered.');
352 372
  }
353 373
}
354 374

  
drupal7/modules/simpletest/tests/common_test.info
7 7
stylesheets[print][] = common_test.print.css
8 8
hidden = TRUE
9 9

  
10
; Information added by Drupal.org packaging script on 2014-11-19
11
version = "7.34"
10
; Information added by Drupal.org packaging script on 2015-03-18
11
version = "7.35"
12 12
project = "drupal"
13
datestamp = "1416429488"
13
datestamp = "1426707463"
14 14

  
drupal7/modules/simpletest/tests/common_test_cron_helper.info
5 5
core = 7.x
6 6
hidden = TRUE
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/simpletest/tests/database_test.info
5 5
version = VERSION
6 6
hidden = TRUE
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/simpletest/tests/drupal_system_listing_compatible_test/drupal_system_listing_compatible_test.info
5 5
core = 7.x
6 6
hidden = TRUE
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/simpletest/tests/drupal_system_listing_incompatible_test/drupal_system_listing_incompatible_test.info
5 5
core = 7.x
6 6
hidden = TRUE
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/simpletest/tests/entity_cache_test.info
6 6
dependencies[] = entity_cache_test_dependency
7 7
hidden = TRUE
8 8

  
9
; Information added by Drupal.org packaging script on 2014-11-19
10
version = "7.34"
9
; Information added by Drupal.org packaging script on 2015-03-18
10
version = "7.35"
11 11
project = "drupal"
12
datestamp = "1416429488"
12
datestamp = "1426707463"
13 13

  
drupal7/modules/simpletest/tests/entity_cache_test_dependency.info
5 5
core = 7.x
6 6
hidden = TRUE
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/simpletest/tests/entity_crud_hook_test.info
5 5
version = VERSION
6 6
hidden = TRUE
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/simpletest/tests/entity_query_access_test.info
5 5
core = 7.x
6 6
hidden = TRUE
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/simpletest/tests/error_test.info
5 5
core = 7.x
6 6
hidden = TRUE
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/simpletest/tests/file_test.info
6 6
files[] = file_test.module
7 7
hidden = TRUE
8 8

  
9
; Information added by Drupal.org packaging script on 2014-11-19
10
version = "7.34"
9
; Information added by Drupal.org packaging script on 2015-03-18
10
version = "7.35"
11 11
project = "drupal"
12
datestamp = "1416429488"
12
datestamp = "1426707463"
13 13

  
drupal7/modules/simpletest/tests/filter_test.info
5 5
core = 7.x
6 6
hidden = TRUE
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/simpletest/tests/form_test.info
5 5
core = 7.x
6 6
hidden = TRUE
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/simpletest/tests/image_test.info
5 5
core = 7.x
6 6
hidden = TRUE
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/simpletest/tests/menu_test.info
5 5
core = 7.x
6 6
hidden = TRUE
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/simpletest/tests/module_test.info
5 5
core = 7.x
6 6
hidden = TRUE
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/simpletest/tests/path_test.info
5 5
core = 7.x
6 6
hidden = TRUE
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/simpletest/tests/psr_0_test/psr_0_test.info
5 5
hidden = TRUE
6 6
package = Testing
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/simpletest/tests/requirements1_test.info
5 5
core = 7.x
6 6
hidden = TRUE
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/simpletest/tests/requirements2_test.info
7 7
core = 7.x
8 8
hidden = TRUE
9 9

  
10
; Information added by Drupal.org packaging script on 2014-11-19
11
version = "7.34"
10
; Information added by Drupal.org packaging script on 2015-03-18
11
version = "7.35"
12 12
project = "drupal"
13
datestamp = "1416429488"
13
datestamp = "1426707463"
14 14

  
drupal7/modules/simpletest/tests/session_test.info
5 5
core = 7.x
6 6
hidden = TRUE
7 7

  
8
; Information added by Drupal.org packaging script on 2014-11-19
9
version = "7.34"
8
; Information added by Drupal.org packaging script on 2015-03-18
9
version = "7.35"
10 10
project = "drupal"
11
datestamp = "1416429488"
11
datestamp = "1426707463"
12 12

  
drupal7/modules/simpletest/tests/system_dependencies_test.info
6 6
hidden = TRUE
7 7
dependencies[] = _missing_dependency
8 8

  
9
; Information added by Drupal.org packaging script on 2014-11-19
10
version = "7.34"
9
; Information added by Drupal.org packaging script on 2015-03-18
10
version = "7.35"
11 11
project = "drupal"
12
datestamp = "1416429488"
12
datestamp = "1426707463"
13 13

  
drupal7/modules/simpletest/tests/system_incompatible_core_version_dependencies_test.info
6 6
hidden = TRUE
7 7
dependencies[] = system_incompatible_core_version_test
8 8

  
9
; Information added by Drupal.org packaging script on 2014-11-19
10
version = "7.34"
... Ce différentiel a été tronqué car il excède la taille maximale pouvant être affichée.

Formats disponibles : Unified diff