/** * Test Lfi Protection * * @covers \AssetManager\Resolver\AliasPathStackResolver::resolve */ public function testLfiProtection() { $mimeResolver = new MimeResolver(); $resolver = new AliasPathStackResolver(array('my/alias/' => __DIR__)); $resolver->setMimeResolver($mimeResolver); // should be on by default $this->assertTrue($resolver->isLfiProtectionOn()); $this->assertNull($resolver->resolve('..' . DIRECTORY_SEPARATOR . basename(__DIR__) . DIRECTORY_SEPARATOR . basename(__FILE__))); $resolver->setLfiProtection(false); $this->assertEquals(file_get_contents(__FILE__), $resolver->resolve('my/alias/..' . DIRECTORY_SEPARATOR . basename(__DIR__) . DIRECTORY_SEPARATOR . basename(__FILE__))->dump()); }