mirror of
https://github.com/Cacti/cacti.git
synced 2026-10-24 03:57:32 +09:00
TheWitness
7b551eea72
Excludes vendored packages, third-party JS, patches, and the Win32 probe fixture. Pure EOL change; guards pass and php -l is clean.
25 lines
1.0 KiB
PHP
25 lines
1.0 KiB
PHP
<?php
|
|
/*
|
|
+-------------------------------------------------------------------------+
|
|
| Copyright (C) 2004-2026 The Cacti Group |
|
|
+-------------------------------------------------------------------------+
|
|
| Cacti: The Complete RRDtool-based Graphing Solution |
|
|
+-------------------------------------------------------------------------+
|
|
*/
|
|
|
|
/*
|
|
* GHSA-4rmr-wvjq-qxc2: include/auth.php returned true from the Basic Auth and
|
|
* guest branches before the per-page realm check. Both branches now fall
|
|
* through to the realm check.
|
|
*/
|
|
|
|
$root = dirname(__DIR__, 4);
|
|
|
|
test('the Basic Auth and guest branches fall through to the per-page realm check', function () use ($root) {
|
|
$source = file_get_contents($root . '/include/auth.php');
|
|
|
|
expect($source)->not->toContain("\$_SESSION[SESS_CLIENT_ADDR]]);\n\n\t\t\treturn true;")
|
|
->and($source)->not->toContain("[\$_SESSION[SESS_USER_ID]]);\n\n\t\treturn true;")
|
|
->and(substr_count($source, 'GHSA-4rmr-wvjq-qxc2'))->toBe(2);
|
|
});
|