CI: Add tests for ThemeController - refs BT#21621

chamilo · Jul 1, 2024 · d67702b · d67702b
1 parent c590ece
commit d67702b
Showing 1 changed file with 45 additions and 0 deletions.
diff --git a/tests/CoreBundle/Controller/ThemeControllerTest.php b/tests/CoreBundle/Controller/ThemeControllerTest.php
@@ -0,0 +1,45 @@
+<?php
+
+/* For licensing terms, see /license.txt */
+
+declare(strict_types=1);
+
+namespace Chamilo\Tests\CoreBundle\Controller;
+
+use Symfony\Bundle\FrameworkBundle\Test\WebTestCase;
+use Symfony\Component\HttpFoundation\Response;
+
+class ThemeControllerTest extends WebTestCase
+{
+
+    public function testValidAccess(): void
+    {
+        $client = static::createClient();
+
+        $client->request('GET', '/themes/chamilo/colors.css');
+
+        $this->assertResponseIsSuccessful();
+    }
+
+    public function testInvalidAccess(): void
+    {
+        $client = static::createClient();
+
+        $client->request('GET', '/themes/chamilo/default.css');
+
+        $this->assertResponseStatusCodeSame(Response::HTTP_NOT_FOUND);
+    }
+
+    public function testAccessToSystemFiles(): void
+    {
+        $client = static::createClient();
+        $client->request('GET', '/themes/chamilo/../../../../../../etc/passwd');
+
+        $this->assertResponseStatusCodeSame(Response::HTTP_INTERNAL_SERVER_ERROR);
+
+
+        $client->request('GET', 'themes/chamilo/../../../.env');
+
+        $this->assertResponseStatusCodeSame(Response::HTTP_INTERNAL_SERVER_ERROR);
+    }
+}