function EntityQueryTest::testInjectionInCondition

Tests SQL inject of condition field.

This covers a database driver's EntityQuery\Condition class.

File

core/tests/Drupal/KernelTests/Core/Entity/EntityQueryTest.php, line 1231

Class

EntityQueryTest

Tests Entity Query functionality.

Namespace

Code

public function testInjectionInCondition() : void {
  $this->expectException(\Exception::class);
  $this->queryResults = $this->storage
    ->getQuery()
    ->accessCheck(FALSE)
    ->condition('1 ; -- ', [
    0,
    1,
  ], 'IN')
    ->sort('id')
    ->execute();
}