Releases: php-http/psr7-integration-tests
Releases · php-http/psr7-integration-tests
1.5.0
1.4.0
1.3.0
Added
-
Adds
UriIntegrationTest::testSpecialCharsInUserInfoandUriIntegrationTest::testAlreadyEncodedUserInfo.
These validate that usernames and passwords which contain reserved characters (defined by RFC3986) are being encoded
so that the URI does not contain these reserved characters at any time. -
Adds support for testing against PSR-7 1.1 and 2.0. In particular, it adapts tests that were verifying invalid parameters threw
InvalidArgumentExceptionpreviously now either throw that OR (more correctly) raise aTypeError.
1.2.0
Added
- Adds
UriIntegrationTest::testGetPathNormalizesMultipleLeadingSlashesToSingleSlashToPreventXSS(),UriIntegrationTest::testStringRepresentationWithMultipleSlashes(array $test), andRequestIntegrationTest::testGetRequestTargetInOriginFormNormalizesUriWithMultipleLeadingSlashesInPath().
These validate that a path containing multiple leading slashes is (a) represented with a single slash when callingUriInterface::getPath(), and (b) represented without changes when callingUriInterface::__toString(), including when callingRequestInterface::getRequestTarget()(which returns the path without the URI authority by default, to comply with origin-form).
This is done to validate mitigations for CVE-2015-3257.
Changed
- Modifies
UriIntegrationTest::testPathWithMultipleSlashes()to only validate multiple slashes in the middle of a path.
Multiple leading slashes are covered with the newly introduced tests.
Release 1.1.1
Replace deprecated assertRegExp() with assertMatchesRegularExpression()
Release 1.1.0
Support for PHP8 and PHPUnit 8 and 9
Release 1.0.0
Compatible with PHP5