Changeset 49396 for branches/5.0/tests/phpunit/tests/multisite/site.php

Timestamp:

10/29/2020 06:50:55 PM (5 years ago)

Author:

whyisjake

Message:

General: WordPress updates

• XML-RPC: Improve error messages for unprivileged users.
• External Libraries: Disable deserialization in Requests_Utility_FilteredIterator
• Embeds: Disable embeds on deactivated Multisite sites.
• Coding standards: Modify escaping functions to avoid potential false positives.
• XML-RPC: Return error message if attachment ID is incorrect.
• Upgrade/install: Improve logic check when determining installation status.
• Meta: Sanitize meta key before checking protection status.
• Themes: Ensure that only privileged users can set a background image when a theme is using the deprecated custom background page.

Brings the changes from [49380,49382-49388] to the 5.0 branch.

Props xknown, zieladam, peterwilsoncc, whyisjake, desrosj, dd32.

Location:

branches/5.0

Files:

• . (modified) (1 prop)
• tests/phpunit/tests/multisite/site.php (modified) (1 diff)

branches/5.0/tests/phpunit/tests/multisite/site.php

@@ -444 +444 @@
 
         remove_action( 'make_ham_blog', array( $this, '_action_counter_cb' ), 10 );
+    }
+
+    function test_content_from_spam_blog_is_not_available() {
+        $spam_blog_id = self::factory()->blog->create();
+        switch_to_blog( $spam_blog_id );
+        $post_data      = array(
+            'post_title'   => 'Hello World!',
+            'post_content' => 'Hello world content',
+        );
+        $post_id        = self::factory()->post->create( $post_data );
+        $post           = get_post( $post_id );
+        $spam_permalink = site_url() . '/?p=' . $post->ID;
+        $spam_embed_url = get_post_embed_url( $post_id );
+
+        restore_current_blog();
+        $this->assertNotEmpty( $spam_permalink );
+        $this->assertEquals( $post_data['post_title'], $post->post_title );
+
+        update_blog_status( $spam_blog_id, 'spam', 1 );
+
+        $post_id = self::factory()->post->create(
+            array(
+                'post_content' => "\n $spam_permalink \n",
+            )
+        );
+        $post    = get_post( $post_id );
+        $content = apply_filters( 'the_content', $post->post_content );
+
+        $this->assertNotContains( $post_data['post_title'], $content );
+        $this->assertNotContains( "src=\"{$spam_embed_url}#?", $content );
     }