function CoderReviewSecurityTest::testSecurityFormError in Coder 7.2
Same name and namespace in other branches
- 7 coder_review/tests/coder_review_security.test \CoderReviewSecurityTest::testSecurityFormError()
Tests the functionality to detect the correct use of Drupal form_error().
File
- coder_review/
tests/ coder_review_security.test, line 149
Class
- CoderReviewSecurityTest
- Tests the Coder_review functionality to detect security-related rules.
Code
function testSecurityFormError() {
$this
->assertCoderReviewPass(' form_error("name", t("Here is some safe_data"));');
$this
->assertCoderReviewPass(' form_error($name, t("Here is some safe_data"));');
$this
->assertCoderReviewPass(' form_error($name, t("Here is some @safe_data", array("@safe_data" => $tainted_data));');
$this
->assertCoderReviewPass(' form_error($name, t("Here is some %safe_data", array("%safe_data" => $tainted_data));');
$this
->assertCoderReviewPass(' form_error($name, t("Here is some @safe_data", $safe_data_array));');
$this
->assertCoderReviewPass(' form_error($name, check_plain($tainted_data));');
$this
->assertCoderReviewPass(' form_error($name, filter_xss_admin($tainted_data));');
$this
->assertCoderReviewPass(' form_error($name, format_plural($tainted_count, "1 item", "@count items"));');
$this
->assertCoderReviewPass(' form_error($name, check_markup($tainted_data));');
$this
->assertCoderReviewPass(" function abc() {\n \$tainted_data = check_plain('mystring');\n form_error(\$name, \$tainted_data);\n}");
$this
->assertCoderReviewFail(" function abc() {\n form_error(\$name, \$tainted_data);\n}");
$this
->assertCoderReviewFail(' form_error($name, t($tainted_data));');
$this
->assertCoderReviewFail(' form_error($name, "Here is some ". $tainted_data);');
$this
->assertCoderReviewFail(' form_error($name, "Here is some $tainted_data");');
$this
->assertCoderReviewFail(' form_error($name, t("Here is some ". $tainted_data));');
$this
->assertCoderReviewFail(' form_error($name, t("Here is some !tainted_data", array("!tainted_data" => $tainted_data));');
}