class BlockInterestCohortTest in Drupal 10

Tests the Permissions-Policy header added by FinishResponseSubscriber.

@group Http

Hierarchy

• class \Drupal\KernelTests\KernelTestBase extends \PHPUnit\Framework\TestCase implements ServiceProviderInterface uses \Drupal\Tests\PhpUnitCompatibilityTrait, \Symfony\Bridge\PhpUnit\ExpectDeprecationTrait, AssertContentTrait, ConfigTestTrait, ExtensionListTestTrait, RandomGeneratorTrait, TestRequirementsTrait, PhpUnitWarnings
  • class \Drupal\KernelTests\Core\Http\BlockInterestCohortTest

File

core/tests/Drupal/KernelTests/Core/Http/BlockInterestCohortTest.php, line 17

Namespace

Drupal\KernelTests\Core\Http

class BlockInterestCohortTest extends KernelTestBase {

  /**
   * Tests that FLoC is blocked by default.
   */
  public function testDefaultBlocking() {
    $request = Request::create('/');
    $response = \Drupal::service('http_kernel')
      ->handle($request);
    $this
      ->assertSame('interest-cohort=()', $response->headers
      ->get('Permissions-Policy'));
  }

  /**
   * Tests that an existing interest-cohort policy is not overwritten.
   */
  public function testExistingInterestCohortPolicy() {
    $headers['Permissions-Policy'] = 'interest-cohort=*';
    $kernel = \Drupal::service('http_kernel');
    $request = Request::create('/');
    $response = new Response('', 200, $headers);
    $event = new ResponseEvent($kernel, $request, HttpKernelInterface::MAIN_REQUEST, $response);
    \Drupal::service('finish_response_subscriber')
      ->onRespond($event);
    $this
      ->assertSame($headers['Permissions-Policy'], $response->headers
      ->get('Permissions-Policy'));
  }

  /**
   * Tests that an existing header is not modified.
   */
  public function testExistingPolicyHeader() {
    $headers['Permissions-Policy'] = 'geolocation=()';
    $kernel = \Drupal::service('http_kernel');
    $request = Request::create('/');
    $response = new Response('', 200, $headers);
    $event = new ResponseEvent($kernel, $request, HttpKernelInterface::MAIN_REQUEST, $response);
    \Drupal::service('finish_response_subscriber')
      ->onRespond($event);
    $this
      ->assertSame($headers['Permissions-Policy'], $response->headers
      ->get('Permissions-Policy'));
  }

  /**
   * Tests that FLoC blocking is ignored for subrequests.
   */
  public function testSubrequestBlocking() {
    $request = Request::create('/');
    $response = \Drupal::service('http_kernel')
      ->handle($request, HttpKernelInterface::SUB_REQUEST);
    $this
      ->assertFalse($response->headers
      ->has('Permissions-Policy'));
  }

  /**
   * Tests that FLoC blocking can be disabled in settings.php.
   */
  public function testDisableBlockSetting() {
    $settings = Settings::getAll();
    $settings['block_interest_cohort'] = FALSE;
    new Settings($settings);
    $request = Request::create('/');
    $response = \Drupal::service('http_kernel')
      ->handle($request);
    $this
      ->assertFalse($response->headers
      ->has('Permissions-Policy'));
  }

}