You are here

ColorSafePreviewTest.php in Drupal 9

Same filename and directory in other branches
  1. 8 core/modules/color/tests/src/Functional/ColorSafePreviewTest.php

File

core/modules/color/tests/src/Functional/ColorSafePreviewTest.php
View source
<?php

namespace Drupal\Tests\color\Functional;

use Drupal\Core\Url;
use Drupal\Tests\BrowserTestBase;

/**
 * Tests sanitizing color preview loaded from theme.
 *
 * @group color
 */
class ColorSafePreviewTest extends BrowserTestBase {

  /**
   * Modules to enable.
   *
   * @var string[]
   */
  protected static $modules = [
    'color',
    'color_test',
  ];

  /**
   * {@inheritdoc}
   */
  protected $defaultTheme = 'stark';

  /**
   * A user with administrative permissions.
   *
   * @var \Drupal\user\UserInterface
   */
  protected $bigUser;

  /**
   * {@inheritdoc}
   */
  protected function setUp() : void {
    parent::setUp();

    // Create user.
    $this->bigUser = $this
      ->drupalCreateUser([
      'administer themes',
    ]);
  }

  /**
   * Ensures color preview.html is sanitized.
   */
  public function testColorPreview() {

    // Install the color test theme.
    \Drupal::service('theme_installer')
      ->install([
      'color_test_theme',
    ]);
    $this
      ->drupalLogin($this->bigUser);

    // Markup is being printed from an HTML file located in:
    // core/modules/color/tests/modules/color_test/themes/color_test_theme/color/preview.html
    $url = Url::fromRoute('system.theme_settings_theme', [
      'theme' => 'color_test_theme',
    ]);
    $this
      ->drupalGet($url);
    $this
      ->assertSession()
      ->pageTextContains('TEST COLOR PREVIEW');
    $this
      ->assertSession()
      ->responseNotContains('<script>alert("security filter test");</script>');
    $this
      ->assertSession()
      ->responseContains('<h2>TEST COLOR PREVIEW</h2>');
  }

}

Classes

Namesort descending Description
ColorSafePreviewTest Tests sanitizing color preview loaded from theme.