/** * Checks whether the given URL is blacklisted by checking its address and port number against the black/white lists. * The behaviour of this function can be classified as strict, as it returns true for URLs which are invalid or * could not be parsed, as well as those valid URLs which were found in the blacklist. * * @param string $urlstring the URL to check. * @return bool true if the URL is blacklisted or invalid and false if the URL is not blacklisted. */ public function url_is_blocked($urlstring) { // If no config data is present, then all hosts/ports are allowed. if (!$this->is_enabled()) { return false; } // Try to parse the URL to get the 'host' and 'port' components. try { $url = new \moodle_url($urlstring); $parsed['scheme'] = $url->get_scheme(); $parsed['host'] = $url->get_host(); $parsed['port'] = $url->get_port(); } catch (\moodle_exception $e) { // Moodle exception is thrown if the $urlstring is invalid. Treat as blocked. return true; } // The port will be empty unless explicitly set in the $url (uncommon), so try to infer it from the supported schemes. if (!$parsed['port'] && $parsed['scheme'] && isset($this->transportschemes[$parsed['scheme']])) { $parsed['port'] = $this->transportschemes[$parsed['scheme']]; } if ($parsed['port'] && $parsed['host']) { // Check the host and port against the blacklist/whitelist entries. return $this->host_is_blocked($parsed['host']) || $this->port_is_blocked($parsed['port']); } return true; }
public function test_moodle_url_get_port() { // Should return the port if one provided. $url = new moodle_url('http://www.example.org:447/my/file/is/here.txt?really=1'); $this->assertSame(447, $url->get_port()); // Should return an empty string if port not specified. $url = new moodle_url('http://www.example.org/some/path/here.php'); $this->assertSame('', $url->get_port()); }