FileExtensionSecureConstraintValidatorTest.php

<?php

declare (strict_types=1);
namespace Drupal\Tests\file\Kernel\Plugin\Validation\Constraint;

use Drupal\Tests\file\Kernel\Validation\FileValidatorTestBase;

/**
 * Tests the FileExtensionSecureConstraintValidator.
 *
 * @group file
 * @coversDefaultClass \Drupal\file\Plugin\Validation\Constraint\FileExtensionSecureConstraintValidator
 */
class FileExtensionSecureConstraintValidatorTest extends FileValidatorTestBase {
    
    /**
     * @covers ::validate
     */
    public function testValidate() : void {
        // Test success with .txt extension.
        $validators = [
            'FileExtensionSecure' => [],
        ];
        $violations = $this->validator
            ->validate($this->file, $validators);
        $this->assertCount(0, $violations);
        // Test failure with .php extension.
        $this->file
            ->setFilename('foo.php');
        $violations = $this->validator
            ->validate($this->file, $validators);
        $this->assertCount(1, $violations);
        $this->assertEquals('For security reasons, your upload has been rejected.', $violations->get(0)
            ->getMessage());
        // Test success with .php extension and allow_insecure_uploads.
        $this->config('system.file')
            ->set('allow_insecure_uploads', TRUE)
            ->save();
        $violations = $this->validator
            ->validate($this->file, $validators);
        $this->assertCount(0, $violations);
    }

}