From f30f5a3ce8b207a18c0fc72ca3e5560032d50e86 Mon Sep 17 00:00:00 2001
From: Esad Cetiner <104706115+EsadCetiner@users.noreply.github.com>
Date: Fri, 5 Jan 2024 19:31:26 +1100
Subject: [PATCH] test: create 9520133, 9520110, 9502104 regression tests

---
 .../sogo-rule-exclusions-plugin/9520101.yaml  |   2 +-
 .../sogo-rule-exclusions-plugin/9520104.yaml  | 135 ++++++++++++++++++
 .../sogo-rule-exclusions-plugin/9520110.yaml  |  39 +++++
 .../sogo-rule-exclusions-plugin/9520133.yaml  |  23 +++
 4 files changed, 198 insertions(+), 1 deletion(-)
 create mode 100644 tests/regression/sogo-rule-exclusions-plugin/9520104.yaml
 create mode 100644 tests/regression/sogo-rule-exclusions-plugin/9520110.yaml
 create mode 100644 tests/regression/sogo-rule-exclusions-plugin/9520133.yaml

diff --git a/tests/regression/sogo-rule-exclusions-plugin/9520101.yaml b/tests/regression/sogo-rule-exclusions-plugin/9520101.yaml
index 7fef043..266eabd 100644
--- a/tests/regression/sogo-rule-exclusions-plugin/9520101.yaml
+++ b/tests/regression/sogo-rule-exclusions-plugin/9520101.yaml
@@ -6,7 +6,7 @@ meta:
   name: 9520101.yaml
 tests:
   - test_title: 9520101-1
-    desc: Disable OWASP_CRS for ARGS:json.password
+    desc: Disable OWASP_CRS for password box when logging in
     stages:
       - stage:
           input:
diff --git a/tests/regression/sogo-rule-exclusions-plugin/9520104.yaml b/tests/regression/sogo-rule-exclusions-plugin/9520104.yaml
new file mode 100644
index 0000000..c5e76a0
--- /dev/null
+++ b/tests/regression/sogo-rule-exclusions-plugin/9520104.yaml
@@ -0,0 +1,135 @@
+---
+meta:
+  author: "Esad Cetiner"
+  description: "SOGo Rule Exclusions Plugin"
+  enabled: true
+  name: 9520104.yaml
+tests:
+  - test_title: 9520104-1
+    desc: Disable OWASP CRS for email body when sending an email
+    stages:
+      - stage:
+          input:
+            dest_addr: 127.0.0.1
+            headers:
+              Host: localhost
+              User-Agent: SOGo rule exclusions plugin
+              Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+              Content-Type: text/vcard
+            port: 80
+            method: GET
+            uri: /SOGo/so/user@example.com/Mail/4/folderDrafts/newDraft-4/send?json.text=<script>
+          output:
+            no_log_contains: id "941110"
+  - test_title: 9520104-2
+    desc: Disable OWASP CRS for email body when saving an email
+    stages:
+      - stage:
+          input:
+            dest_addr: 127.0.0.1
+            headers:
+              Host: localhost
+              User-Agent: SOGo rule exclusions plugin
+              Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+              Content-Type: text/vcard
+            port: 80
+            method: GET
+            uri: /SOGo/so/user@example.com/Mail/4/folderDrafts/newDraft-4/save?json.text=<script>
+          output:
+            no_log_contains: id "941110"
+  - test_title: 9520104-3
+    desc: Disable OWASP CRS for email subject when sending an email
+    stages:
+      - stage:
+          input:
+            dest_addr: 127.0.0.1
+            headers:
+              Host: localhost
+              User-Agent: SOGo rule exclusions plugin
+              Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+              Content-Type: text/vcard
+            port: 80
+            method: GET
+            uri: /SOGo/so/user@example.com/Mail/4/folderDrafts/newDraft-4/send?json.subject=<script>
+          output:
+            no_log_contains: id "941110"
+  - test_title: 9520104-4
+    desc: Disable OWASP CRS for email subject when saving an email
+    stages:
+      - stage:
+          input:
+            dest_addr: 127.0.0.1
+            headers:
+              Host: localhost
+              User-Agent: SOGo rule exclusions plugin
+              Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+              Content-Type: text/vcard
+            port: 80
+            method: GET
+            uri: /SOGo/so/user@example.com/Mail/4/folderDrafts/newDraft-4/save?json.subject=<script>
+          output:
+            no_log_contains: id "941110"
+  - test_title: 9520104-5
+    desc: Disable 942131 for source email address when saving an email
+    stages:
+      - stage:
+          input:
+            dest_addr: 127.0.0.1
+            headers:
+              Host: localhost
+              User-Agent: SOGo rule exclusions plugin
+              Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+              Content-Type: text/vcard
+            port: 80
+            method: GET
+            uri: /SOGo/so/user@example.com/Mail/4/folderDrafts/newDraft-4/save?json.from=<postmaster@example.com>Postmaster
+          output:
+            no_log_contains: id "942131"
+  - test_title: 9520104-6
+    desc: Disable 942131 for source email address when sending an email
+    stages:
+      - stage:
+          input:
+            dest_addr: 127.0.0.1
+            headers:
+              Host: localhost
+              User-Agent: SOGo rule exclusions plugin
+              Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+              Content-Type: text/vcard
+            port: 80
+            method: GET
+            uri: /SOGo/so/user@example.com/Mail/4/folderDrafts/newDraft-4/send?json.from=<postmaster@example.com>Postmaster
+          output:
+            no_log_contains: id "942131"
+  - test_title: 9520104-7
+    desc: Disable 942131 for destination email address when saving an email
+    stages:
+      - stage:
+          input:
+            dest_addr: 127.0.0.1
+            headers:
+              Host: localhost
+              User-Agent: SOGo rule exclusions plugin
+              Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+              Content-Type: text/vcard
+            port: 80
+            method: GET
+            uri: /SOGo/so/user@example.com/Mail/4/folderDrafts/newDraft-4/save?json.to.array_0=<postmaster@example.com>Postmaster
+          output:
+            no_log_contains: id "942131"
+  - test_title: 9520104-8
+    desc: Disable 942131 for destination email address when sending an email
+    stages:
+      - stage:
+          input:
+            dest_addr: 127.0.0.1
+            headers:
+              Host: localhost
+              User-Agent: SOGo rule exclusions plugin
+              Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+              Content-Type: text/vcard
+            port: 80
+            method: GET
+            uri: /SOGo/so/user@example.com/Mail/4/folderDrafts/newDraft-4/send?json.to.array_0=<postmaster@example.com>Postmaster
+          output:
+            no_log_contains: id "942131"
diff --git a/tests/regression/sogo-rule-exclusions-plugin/9520110.yaml b/tests/regression/sogo-rule-exclusions-plugin/9520110.yaml
new file mode 100644
index 0000000..4b86ef5
--- /dev/null
+++ b/tests/regression/sogo-rule-exclusions-plugin/9520110.yaml
@@ -0,0 +1,39 @@
+---
+meta:
+  author: "Esad Cetiner"
+  description: "SOGo Rule Exclusions Plugin"
+  enabled: true
+  name: 9520110.yaml
+tests:
+  - test_title: 9520110-1
+    desc: Disable OWASP CRS when changing passwords
+    stages:
+      - stage:
+          input:
+            dest_addr: 127.0.0.1
+            headers:
+              Host: localhost
+              User-Agent: SOGo rule exclusions plugin
+              Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+              Content-Type: text/vcard
+            port: 80
+            method: GET
+            uri: /SOGo/so/changePassword?json.oldPassword=<script>
+          output:
+            no_log_contains: id "941110"
+  - test_title: 9520110-2
+    desc: Disable OWASP CRS when changing passwords
+    stages:
+      - stage:
+          input:
+            dest_addr: 127.0.0.1
+            headers:
+              Host: localhost
+              User-Agent: SOGo rule exclusions plugin
+              Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+              Content-Type: text/vcard
+            port: 80
+            method: GET
+            uri: /SOGo/so/changePassword?json.newPassword=<script>
+          output:
+            no_log_contains: id "941110"
diff --git a/tests/regression/sogo-rule-exclusions-plugin/9520133.yaml b/tests/regression/sogo-rule-exclusions-plugin/9520133.yaml
new file mode 100644
index 0000000..c43a424
--- /dev/null
+++ b/tests/regression/sogo-rule-exclusions-plugin/9520133.yaml
@@ -0,0 +1,23 @@
+---
+meta:
+  author: "Esad Cetiner"
+  description: "SOGo Rule Exclusions Plugin"
+  enabled: true
+  name: 9520133.yaml
+tests:
+  - test_title: 9520133-1
+    desc: Disable 931130 for ARGS:json.url
+    stages:
+      - stage:
+          input:
+            dest_addr: 127.0.0.1
+            headers:
+              Host: localhost
+              User-Agent: SOGo rule exclusions plugin
+              Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
+              Content-Type: text/vcard
+            port: 80
+            method: GET
+            uri: /SOGo/so/user@example.com/Calendar/addWebCalendar?json.url=https://example.com
+          output:
+            no_log_contains: id "931130"