示例#1
0
 public function test315()
 {
     $version = "3.1.5";
     $vulnerabilities = \Selim\SecurityChecker::findVulnerabilitiesForVersion($version);
     $expected = array("SS-2015-016", "SS-2015-015", "SS-2015-014", "SS-2015-013", "SS-2015-012", "SS-2015-011", "SS-2015-010", "SS-2015-009", "SS-2014-017", "SS-2014-015", "SS-2014-018", "SS-2014-016", "SS-2014-014", "SS-2014-012", "SS-2015-007", "SS-2015-006", "SS-2015-005", "SS-2015-004", "SS-2015-003", "SS-2015-001", "SS-2015-008");
     $this->assertCount(count($expected), $vulnerabilities);
     $this->checkVulnerabilityTitlesContainStrings($vulnerabilities, $expected);
 }
示例#2
0
 protected function execute(InputInterface $input, OutputInterface $output)
 {
     $name = $input->getArgument('name');
     $cfg = $this->getSelimConfig($input);
     if ($cfg->siteExists($name)) {
         echo "Security-test for {$name}:" . PHP_EOL;
         $site = $cfg->getSite($name);
         $sc = new SecurityChecker(new SilverstripePage($site));
         $vulns = $sc->findVulnerabilities(true);
         foreach ($vulns as $vul) {
             $severity = $vul["severity"] ? $vul["severity"] : "Warning";
             Util::forceStringMinLength($severity, 9);
             echo "{$severity} " . $vul["title"] . PHP_EOL;
         }
     } else {
         Util::reportError("Site with name '{$name}' doesn't exists!");
     }
 }