FormattableMarkupKernelTest.php

<?php

namespace Drupal\KernelTests\Component\Render;

use Drupal\Component\Render\FormattableMarkup;
use Drupal\Core\Url;
use Drupal\KernelTests\KernelTestBase;

/**
 * Provides a test covering integration of FormattableMarkup with other systems.
 *
 * @group Render
 */
class FormattableMarkupKernelTest extends KernelTestBase {
    
    /**
     * {@inheritdoc}
     */
    protected static $modules = [
        'system',
    ];
    
    /**
     * Gets arguments for FormattableMarkup based on Url::fromUri() parameters.
     *
     * @param string $uri
     *   The URI of the resource.
     * @param array $options
     *   The options to pass to Url::fromUri().
     *
     * @return array
     *   Array containing:
     *   - ':url': A URL string.
     *
     * @see \Drupal\Component\Render\FormattableMarkup
     */
    protected static function getFormattableMarkupUriArgs($uri, $options = []) {
        $args[':url'] = Url::fromUri($uri, $options)->toString();
        return $args;
    }
    
    /**
     * Tests URL ":placeholders" in \Drupal\Component\Render\FormattableMarkup.
     *
     * @dataProvider providerTestFormattableMarkupUri
     */
    public function testFormattableMarkupUri($string, $uri, $options, $expected) {
        $args = self::getFormattableMarkupUriArgs($uri, $options);
        $this->assertEquals($expected, new FormattableMarkup($string, $args));
    }
    
    /**
     * @return array
     */
    public function providerTestFormattableMarkupUri() {
        $data = [];
        $data['routed-url'] = [
            'Hey giraffe <a href=":url">MUUUH</a>',
            'route:system.admin',
            [],
            'Hey giraffe <a href="/admin">MUUUH</a>',
        ];
        $data['routed-with-query'] = [
            'Hey giraffe <a href=":url">MUUUH</a>',
            'route:system.admin',
            [
                'query' => [
                    'bar' => 'baz#',
                ],
            ],
            'Hey giraffe <a href="/admin?bar=baz%23">MUUUH</a>',
        ];
        $data['routed-with-fragment'] = [
            'Hey giraffe <a href=":url">MUUUH</a>',
            'route:system.admin',
            [
                'fragment' => 'bar&lt;',
            ],
            'Hey giraffe <a href="/admin#bar&amp;lt;">MUUUH</a>',
        ];
        $data['unrouted-url'] = [
            'Hey giraffe <a href=":url">MUUUH</a>',
            'base://foo',
            [],
            'Hey giraffe <a href="/foo">MUUUH</a>',
        ];
        $data['unrouted-with-query'] = [
            'Hey giraffe <a href=":url">MUUUH</a>',
            'base://foo',
            [
                'query' => [
                    'bar' => 'baz#',
                ],
            ],
            'Hey giraffe <a href="/foo?bar=baz%23">MUUUH</a>',
        ];
        $data['unrouted-with-fragment'] = [
            'Hey giraffe <a href=":url">MUUUH</a>',
            'base://foo',
            [
                'fragment' => 'bar&lt;',
            ],
            'Hey giraffe <a href="/foo#bar&amp;lt;">MUUUH</a>',
        ];
        $data['mailto-protocol'] = [
            'Hey giraffe <a href=":url">MUUUH</a>',
            'mailto:test@example.com',
            [],
            'Hey giraffe <a href="mailto:test@example.com">MUUUH</a>',
        ];
        return $data;
    }
    
    /**
     * @dataProvider providerTestFormattableMarkupUriWithException
     */
    public function testFormattableMarkupUriWithExceptionUri($string, $uri) {
        // Should throw an \InvalidArgumentException, due to Uri::toString().
        $this->expectException(\InvalidArgumentException::class);
        $args = self::getFormattableMarkupUriArgs($uri);
        new FormattableMarkup($string, $args);
    }
    
    /**
     * @return array
     */
    public function providerTestFormattableMarkupUriWithException() {
        $data = [];
        $data['js-protocol'] = [
            'Hey giraffe <a href=":url">MUUUH</a>',
            "javascript:alert('xss')",
        ];
        $data['js-with-fromCharCode'] = [
            'Hey giraffe <a href=":url">MUUUH</a>',
            "javascript:alert(String.fromCharCode(88,83,83))",
        ];
        $data['non-url-with-colon'] = [
            'Hey giraffe <a href=":url">MUUUH</a>',
            "llamas: they are not URLs",
        ];
        $data['non-url-with-html'] = [
            'Hey giraffe <a href=":url">MUUUH</a>',
            '<span>not a url</span>',
        ];
        return $data;
    }

}