MAGETWO-70971: Remote code execution via downloadable products

svitja · svitja · commit 5018f86003c0 · 2018-03-12T18:54:18.000+02:00
diff --git a/dev/tests/integration/testsuite/Magento/Downloadable/Controller/Adminhtml/Downloadable/FileTest.php b/dev/tests/integration/testsuite/Magento/Downloadable/Controller/Adminhtml/Downloadable/FileTest.php
@@ -68,6 +68,7 @@ public function testUploadProhibitedExtensions($fileName)
         $body = $this->getResponse()->getBody();
         $result = Bootstrap::getObjectManager()->get(Json::class)->unserialize($body);
 
+        self::assertArrayHasKey('errorcode', $result);
         self::assertEquals(0, $result['errorcode']);
         self::assertEquals('Disallowed file type.', $result['error']);
     }

Original file line number	Diff line number	Diff line change
`@@ -68,6 +68,7 @@ public function testUploadProhibitedExtensions($fileName)`
`68`	`68`	`$body = $this->getResponse()->getBody();`
`69`	`69`	`$result = Bootstrap::getObjectManager()->get(Json::class)->unserialize($body);`
`70`	`70`
	`71`	`+ self::assertArrayHasKey('errorcode', $result);`
`71`	`72`	`self::assertEquals(0, $result['errorcode']);`
`72`	`73`	`self::assertEquals('Disallowed file type.', $result['error']);`
`73`	`74`	`}`