apunkt/nyx
1
0
Fork 0
mirror of https://github.com/elicpeter/nyx.git synced 2026-06-15 20:05:13 +02:00
Code Issues Projects Releases Packages Wiki Activity

refactor(dynamic): replace PHP route stubs with framework-aware route replay logic for Laravel and Symfony, enhance helper functions, and update related test fixtures

Browse source
This commit is contained in:
elipeter 2026-05-26 14:19:01 -05:00
parent aaf49acefb
commit ed398e2834
14 changed files with 835 additions and 345 deletions
Download patch file Download diff file Expand all files Collapse all files

30
tests/php_frameworks_corpus.rs
View file

@ -48,14 +48,14 @@ fn laravel_vuln_fixture_binds_route() {
assert_eq!(binding.adapter, "php-laravel");
assert_eq!(binding.kind, EntryKind::HttpRoute);
let route = binding.route.as_ref().expect("route");
assert_eq!(route.path, "/run");
assert_eq!(route.path, "/run/{payload}");
assert_eq!(route.method, HttpMethod::GET);
let payload = binding
.request_params
.iter()
.find(|p| p.name == "payload")
.expect("payload formal");
assert!(matches!(payload.source, ParamSource::QueryParam(_)));
assert!(matches!(payload.source, ParamSource::PathSegment(_)));
}
#[test]
@ -68,7 +68,7 @@ fn laravel_benign_fixture_binds_same_route_shape() {
.expect("laravel adapter must bind benign fixture");
assert_eq!(binding.adapter, "php-laravel");
let route = binding.route.as_ref().expect("route");
assert_eq!(route.path, "/run");
assert_eq!(route.path, "/run/{payload}");
assert_eq!(route.method, HttpMethod::GET);
}
@ -82,7 +82,7 @@ fn laravel_multi_verb_fixture_preserves_match_methods() {
.expect("laravel adapter must bind multi-verb fixture");
assert_eq!(binding.adapter, "php-laravel");
let route = binding.route.as_ref().expect("route");
assert_eq!(route.path, "/run");
assert_eq!(route.path, "/run/{payload}");
assert_eq!(route.method, HttpMethod::GET);
assert_eq!(
route.reachable_methods(),
@ -101,7 +101,7 @@ fn symfony_vuln_fixture_binds_route_via_attribute() {
assert_eq!(binding.adapter, "php-symfony");
assert_eq!(binding.kind, EntryKind::HttpRoute);
let route = binding.route.as_ref().expect("route");
assert_eq!(route.path, "/run");
assert_eq!(route.path, "/run/{payload}");
assert_eq!(route.method, HttpMethod::GET);
}
@ -115,7 +115,7 @@ fn symfony_benign_fixture_binds_same_route_shape() {
.expect("symfony adapter must bind benign fixture");
assert_eq!(binding.adapter, "php-symfony");
let route = binding.route.as_ref().expect("route");
assert_eq!(route.path, "/run");
assert_eq!(route.path, "/run/{payload}");
}
#[test]
@ -153,7 +153,7 @@ fn codeigniter_vuln_fixture_binds_route() {
assert_eq!(binding.adapter, "php-codeigniter");
assert_eq!(binding.kind, EntryKind::HttpRoute);
let route = binding.route.as_ref().expect("route");
assert_eq!(route.path, "run");
assert_eq!(route.path, "run/(:any)");
assert_eq!(route.method, HttpMethod::GET);
}
@ -167,7 +167,7 @@ fn codeigniter_benign_fixture_binds_same_route_shape() {
.expect("codeigniter adapter must bind benign fixture");
assert_eq!(binding.adapter, "php-codeigniter");
let route = binding.route.as_ref().expect("route");
assert_eq!(route.path, "run");
assert_eq!(route.path, "run/(:any)");
}
#[test]
@ -270,6 +270,13 @@ mod e2e_phase_16_framework_dispatchers {
let tmp = TempDir::new().expect("create tempdir");
let dst = tmp.path().join(file);
std::fs::copy(&src, &dst).expect("copy fixture into tempdir");
for manifest in ["composer.json", "composer.lock"] {
let candidate = src.parent().expect("fixture parent").join(manifest);
if candidate.exists() {
std::fs::copy(&candidate, tmp.path().join(manifest))
.expect("copy composer manifest into tempdir");
}
}
let entry_file = dst.to_string_lossy().into_owned();
let bytes = std::fs::read(&dst).expect("copied fixture readable");
let tree = parse_php(&bytes);
@ -425,6 +432,13 @@ mod e2e_phase_16_laravel_multi_verb {
let tmp = TempDir::new().expect("create tempdir");
let dst = tmp.path().join(file);
std::fs::copy(&src, &dst).expect("copy fixture into tempdir");
for manifest in ["composer.json", "composer.lock"] {
let candidate = src.parent().expect("fixture parent").join(manifest);
if candidate.exists() {
std::fs::copy(&candidate, tmp.path().join(manifest))
.expect("copy composer manifest into tempdir");
}
}
let entry_file = dst.to_string_lossy().into_owned();
let bytes = std::fs::read(&dst).expect("copied fixture readable");
let tree = parse_php(&bytes);