Phpunit: ํŒŒ์ผ์— ๋ณด์•ˆ ์ค‘๋‹จ ๊ฐ€๋Šฅ์„ฑ ์žˆ์Œ

์— ๋งŒ๋“  2018๋…„ 05์›” 03์ผ  ยท  4์ฝ”๋ฉ˜ํŠธ  ยท  ์ถœ์ฒ˜: sebastianbergmann/phpunit

| ์งˆ๋ฌธ | NS
| --------------------| ---------------
| PHPUnit ๋ฒ„์ „ | ๋ชจ๋ฅด๊ฒ ์–ด์š”
| PHP ๋ฒ„์ „ | 7.1.15
| ์„ค์น˜ ๋ฐฉ๋ฒ• | ์ž‘๊ณก๊ฐ€

์ด ํ”„๋กœ์ ํŠธ(wordpress ์‚ฌ์ดํŠธ)์— phpunit์ด ์—†๊ณ  ๋‚ด ๊ณต๊ธ‰์—…์ฒด๊ฐ€ ์ธํ„ฐ๋„ท์— ๋…ธ์ถœ๋˜์–ด ์žˆ์ง€ ์•Š์ง€๋งŒ ์ด๊ฒƒ์ด ๋ฌธ์ œ๊ฐ€ ๋  ์ˆ˜ ์žˆ๋‹ค๊ณ  ์ƒ๊ฐํ•ฉ๋‹ˆ๋‹ค. ์–ด๋–ป๊ฒŒ ์ƒ๊ฐํ•˜์„ธ์š”?

์ด๊ฒƒ์€ ๋‚ด WAF์˜ ๋ณด๊ณ ์„œ์ž…๋‹ˆ๋‹ค.

Time:       3 May 2018 12:59:35
Session:    This is secret
Client:     Unclassified, from France (212.xxx.yyy.zzz)
User agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML...
Entry page: my.domain/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Requests:   1

URL: /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php (POST)
Status: Blocked by security rules
Post: a=%3c%3fphp%20echo%2800000%200000006832%29%3b
Incident ID: Other secret

https://github.com/sebastianbergmann/phpunit/blob/master/src/Util/PHP/eval-stdin.php

๊ฐ€์žฅ ์œ ์šฉํ•œ ๋Œ“๊ธ€

PHPUnit์„ ํ”„๋กœ๋•์…˜ ์›น ์„œ๋ฒ„์— ์—…๋กœ๋“œํ•˜๋ฉด ๋ฐฐํฌ ํ”„๋กœ์„ธ์Šค๊ฐ€ ์ค‘๋‹จ๋ฉ๋‹ˆ๋‹ค.

๋ชจ๋“  4 ๋Œ“๊ธ€

PHPUnit์„ ํ”„๋กœ๋•์…˜ ์›น ์„œ๋ฒ„์— ์—…๋กœ๋“œํ•˜๋ฉด ๋ฐฐํฌ ํ”„๋กœ์„ธ์Šค๊ฐ€ ์ค‘๋‹จ๋ฉ๋‹ˆ๋‹ค.

@joubertredrat ๋ฒค๋” / node_modules ํด๋”๋ฅผ ์ œ๊ณตํ•ด์„œ๋Š” ์•ˆ๋ฉ๋‹ˆ๋‹ค.
ํ•ด๋‹น ํด๋”์— ๋Œ€ํ•œ ์ผ๋ถ€ ์˜ค๋ฅ˜ ์ฝ”๋“œ๋ฅผ ๋ฐ˜ํ™˜ํ•˜๋„๋ก http ์„œ๋ฒ„ ๊ตฌ์„ฑ์„ ํŽธ์ง‘ํ•˜์‹ญ์‹œ์˜ค.

PHPUnit์„ ํ”„๋กœ๋•์…˜ ์›น ์„œ๋ฒ„์— ์—…๋กœ๋“œํ•˜๋ฉด ๋ฐฐํฌ ํ”„๋กœ์„ธ์Šค๊ฐ€ ์ค‘๋‹จ๋ฉ๋‹ˆ๋‹ค.

์ด๊ฒƒ์€ ์นจ์ž…ํ•  ์‹œ์Šคํ…œ์„ ์ฐพ๋Š” ํ•ด์ปค๊ฐ€ ์‚ฌ์šฉํ•˜๋Š” ์ผ๋ฐ˜์ ์ธ ๊ณต๊ฒฉ์ž…๋‹ˆ๋‹ค.
๊ท€ํ•˜์˜ ์˜๊ฒฌ์„ ํ†ตํ•ด ๊ท€ํ•˜๋Š” ์ด ์ž˜ ์•Œ๋ ค์ ธ ์žˆ๊ณ  ํ”ผํ•ด๋ฅผ ์ฃผ๋Š” ๊ณต๊ฒฉ์„ ์™„ํ™”ํ•˜๊ธฐ ์œ„ํ•ด ์–ด๋– ํ•œ ์กฐ์น˜๋„ ์ทจํ•  ์˜๋„๊ฐ€ ์—†์Œ์ด ๋ถ„๋ช…ํ•ฉ๋‹ˆ๋‹ค.

์ด๊ฒƒ์€ PHP๋ฅผ ์ ˆ๋Œ€ ์‚ฌ์šฉํ•˜์ง€ ์•Š๋Š” ๋˜ ํ•˜๋‚˜์˜ ์ด์œ ์ž…๋‹ˆ๋‹ค. PHP ์ปค๋ฎค๋‹ˆํ‹ฐ๋Š” ๋ณด์•ˆ์„ ์–ป์ง€ ๋ชปํ•ฉ๋‹ˆ๋‹ค.
๊ทธ๋ฆฌ๊ณ  ๊ธฐ๊บผ์ด ์–ด๊นจ๋ฅผ ์œผ์“ฑํ•˜๊ณ  ์—„์ฒญ๋‚œ ์ทจ์•ฝ์ ์„ ๊ณต๊ฐœํ•ฉ๋‹ˆ๋‹ค.

์ด ํŽ˜์ด์ง€๊ฐ€ ๋„์›€์ด ๋˜์—ˆ๋‚˜์š”?
0 / 5 - 0 ๋“ฑ๊ธ‰