1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
|
#!/usr/bin/perl -w
use strict;
use Test::More tests => 24;
use Safe;
use_ok 'Text::MicroMason', qw( safe_compile safe_execute try_safe_compile try_safe_execute );
######################################################################
{
my $scr_bold = '<b><% $ARGS{label} %></b>';
is safe_compile($scr_bold)->(label => 'Foo'), '<b>Foo</b>';
is safe_execute($scr_bold, label => 'Foo'), '<b>Foo</b>';
}
######################################################################
{
my $scr_time = 'The time is <% time() %>';
ok !try_safe_compile( $scr_time );
ok !try_safe_execute( $scr_time );
}
######################################################################
{
my $scr_time = 'The time is <% time() %>';
my $safe = Safe->new();
$safe->permit('time');
ok try_safe_compile( $safe, $scr_time );
ok try_safe_execute( $safe, $scr_time );
ok safe_compile( $safe, $scr_time )->();
ok safe_execute( $safe, $scr_time );
}
######################################################################
{
local $^W; # no warnings uninitialized
my $variable = 'secret';
my $scr_hidden = '<% $variable %>';
my ($output, $err) = try_safe_execute( $scr_hidden );
is $output, undef;
like $err, qr/requires explicit package name/;
}
{
local $^W;
$main::variable = $main::variable = 'secret';
my $scr_hidden = '<% $main::variable %>';
unlike try_safe_execute( $scr_hidden ), qr/secret/;
}
{
local $^W;
$Foo::variable = $Foo::variable = 'secret';
my $scr_hidden = '<% $Foo::variable %>';
unlike try_safe_execute( $scr_hidden ), qr/secret/;
}
######################################################################
{
my $scr_mobj = 'You\'ve been compiled by <% ref $m %>.';
like safe_execute( $scr_mobj ), qr/Text::MicroMason::Safe::Facade/;
}
######################################################################
SKIP:
{
skip "Safe doesn't die in Perl >= 5.13.1", 2
if $] >= 5.013001;
my $script = qq| <& 'samples/test.msn', %ARGS &> |;
my ($output, $err) = try_safe_execute($script, name => 'Sam', hour => 9);
is $output, undef;
like $err, qr/Can't call .*?execute/;
}
SKIP:
{
skip "Safe doesn't die in Perl >= 5.13.1", 2
if $] >= 5.013001;
my $m = Text::MicroMason->new( '-Safe' );
my $script = qq| <& 'samples/test.msn', %ARGS &> |;
my $output = eval{ $m->execute( text => $script, name => 'Sam', hour => 9)};
is $output, undef;
like $@, qr/Can't call .*?execute/;
}
SKIP:
{
skip "safe_methods is deprecated because it can't work with modern Safe", 2;
my $m = Text::MicroMason->new( '-Safe', safe_methods => 'execute' );
my $script = qq| <& 'samples/test.msn', %ARGS &> |;
my $output = eval{ $m->execute( text => $script, name => 'Sam', hour => 9)};
ok length $output;
ok !$@, "Execute produced error: $@";
}
my $safe_dir_mason = Text::MicroMason->class( 'Safe', 'TemplateDir' );
SKIP:
{
skip "safe_methods is deprecated because it can't work with modern Safe", 2;
my $m = Text::MicroMason->new(
-TemplateDir, template_root => 'samples', strict_root => 1,
'-Safe', safe_methods => 'execute',
);
my $script = qq| <& 'test.msn', %ARGS &> |;
my $output = eval{ $m->execute( text => $script, name => 'Sam', hour => 9)};
ok length $output;
ok !$@, "Execute produced error: $@";
}
SKIP:
{
skip "safe_methods is deprecated because it can't work with modern Safe", 2;
my $m = Text::MicroMason->new(
'-Safe', safe_methods => 'execute',
-TemplateDir, template_root => 'samples', strict_root => 1 );
my $script = qq| <& '../MicroMason.pm', %ARGS &> |;
my $output = eval{ $m->execute( text => $script, name => 'Sam', hour => 9)};
is $output, undef;
like $@, qr/required base path/;
}
######################################################################
|
