function CoderSecurityTest::testSecurityFormSetError in Coder 6.2

File

tests/coder_security.test, line 129

Class

CoderSecurityTest

Code

function testSecurityFormSetError() {
  $this
    ->assertCoderPass('  form_set_error("name", t("Here is some safe_data"));');
  $this
    ->assertCoderPass('  form_set_error($name, t("Here is some safe_data"));');
  $this
    ->assertCoderPass('  form_set_error($name, t("Here is some @safe_data", array("@safe_data" => $tainted_data));');
  $this
    ->assertCoderPass('  form_set_error($name, t("Here is some %safe_data", array("%safe_data" => $tainted_data));');
  $this
    ->assertCoderPass('  form_set_error($name, t("Here is some @safe_data", $safe_data_array));');
  $this
    ->assertCoderPass('  form_set_error($name, check_plain($tainted_data));');
  $this
    ->assertCoderPass('  form_set_error($name, filter_xss_admin($tainted_data));');
  $this
    ->assertCoderPass('  form_set_error($name, format_plural($tainted_count, "1 item", "@count items"));');
  $this
    ->assertCoderPass('  form_set_error($name, check_markup($tainted_data));');
  $this
    ->assertCoderPass("  function abc() {\n \$tainted_data = check_plain('mystring');\n  form_set_error(\$name, \$tainted_data);\n}");
  $this
    ->assertCoderFail("  function abc() {\n form_set_error(\$name, \$tainted_data);\n}");
  $this
    ->assertCoderFail('  form_set_error($name, t($tainted_data));');
  $this
    ->assertCoderFail('  form_set_error($name, "Here is some ". $tainted_data);');
  $this
    ->assertCoderFail('  form_set_error($name, "Here is some $tainted_data");');
  $this
    ->assertCoderFail('  form_set_error($name, t("Here is some ". $tainted_data));');
  $this
    ->assertCoderFail('  form_set_error($name, t("Here is some !tainted_data", array("!tainted_data" => $tainted_data));');
}