NAME
Test::CGI::Untaint - Test CGI::Untaint Local Extraction Handlers
SYNOPSIS
use Test::More tests => 2;
use Test::CGI::Untaint;
# see that 'red' is extracted from 'Red'
is_extractable("Red","red","validcolor");
# see that validcolor fails
unextractable("tree","validcolor");DESCRIPTION
The CGI::Untaint module can be extended with "Local Extraction Handlers" that can be used define new ways of untainting data.
This module is designed to test these data extraction modules. It does this with the following two methods:
- is_extractable
-
Tests that first value passed has the second value passed extracted from it when the local extraction handler named in the third argument is called. An optional name for the test may be passed in the forth argument. For example:
# check that "Buffy" is extracted from "Buffy Summers" with # the CGI::Untaint::slayer local extraction handler is_extractable("Buffy Summers","Buffy", "slayer"); - unextractable
-
Checks that nothing is extracted from the first argument passed with the local extraction handler named in the second argument. For example:
# check that nothing is extracted from "Willow Rosenberg" # with the CGI::Untaint::slayer local extraction handler unextractable("Willow Rosenberg", "slayer");The third argument may optionally contain a name for the test.
And that's that all there is to it, apart from the one function that can be used to configure the test suite. It's not exported by default (though you may optionally import it if you want.)
- config_vars
-
The config_vars function is a get/set function that can be used to set the hashref that will be passed to the creation of the CGI::Untaint object used for testing. For example, if you need to instruct CGI::Untaint to use a custom prefix for your local extraction handlers, you can do so like so:
use Test::CGI::Untaint qw(:all); config_vars({ INCLUDE_PATH => "Profero" });
BUGS
None known.
Bugs (and requests for new features) can be reported to the open source development team at Profero though the CPAN RT system: http://rt.cpan.org/NoAuth/ReportBug.html?Queue=Test-CGI-Untaint
AUTHOR
Written By Mark Fowler <mark@twoshortplanks.com>.
Copyright Profero 2003
This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself.