function ModuleThemePageXssVulnerabilityTest::testExtensionInfoXss

Tests extension info cannot create XSS vulnerabilities.

File

core/modules/system/tests/src/Functional/ModuleThemePageXssVulnerabilityTest.php, line 42

Class

ModuleThemePageXssVulnerabilityTest

Tests module and theme pages do not have XSS vulnerabilities.

Namespace

Code

public function testExtensionInfoXss() : void {
    $this->drupalGet("admin/modules");
    $this->assertSession()
        ->pageTextContains("alert('Evil module name');");
    $this->assertSession()
        ->pageTextContains("alert('Evil module desc');");
    $this->assertSession()
        ->responseNotContains("<script>alert(");
    $this->drupalGet("admin/appearance");
    $this->assertSession()
        ->pageTextContains("alert('Evil theme name');");
    $this->assertSession()
        ->pageTextContains("alert('Evil theme desc');");
    $this->assertSession()
        ->responseNotContains("<script>alert(");
}