mcst-linux-kernel/patches-2024.06.26/xdg-utils-1.1.3/0002-debian-test.patch

33 lines
1.1 KiB
Diff

--- xdg-utils-1.1.3/autotests/t-xdg-open.sh 2018-05-10 18:02:31.000000000 +0300
+++ xdg-utils_1.1.3/autotests/t-xdg-open.sh 2020-03-30 22:41:49.445543988 +0300
@@ -129,12 +129,6 @@
mock_default_app x-scheme-handler/http mosaic
test_open_url generic mosaic
-test_that_it always uses \$BROWSER if set in generic mode
-BROWSER=cyberdog
-mock_desktop_file mosaic %u
-mock_default_app x-scheme-handler/http mosaic
-mock mosaic
-test_open_url generic cyberdog
test_that_it works with multi-word \$BROWSER commands
BROWSER="cyberdog --url %s"
@@ -147,6 +141,16 @@
run generic xdg-open 'http://www.freedesktop.org/; echo BUSTED'
assert_run cyberdog --url 'http://www.freedesktop.org/; echo BUSTED'
+unmock cyberdog
+
+test_that_it is not vulnerable to argument injection in URLs when using \
+ \$BROWSER in generic mode
+mock cyberdog
+BROWSER="cyberdog --url %s"
+run generic xdg-open 'http://www.freedesktop.org/ --evil-option'
+assert_run cyberdog --url 'http://www.freedesktop.org/ --evil-option'
+unmock cyberdog
+
test_that_it opens files in generic mode
test_generic_open_file test.txt