function EntityQueryTest::testInjectionInCondition

Tests SQL inject of condition field.

This covers a database driver's EntityQuery\Condition class.

File

core/tests/Drupal/KernelTests/Core/Entity/EntityQueryTest.php, line 1229

Class

EntityQueryTest

Tests Entity Query functionality.

Namespace

Code

public function testInjectionInCondition() : void {
    $this->expectException(\Exception::class);
    $this->queryResults = $this->storage
        ->getQuery()
        ->accessCheck(FALSE)
        ->condition('1 ; -- ', [
        0,
        1,
    ], 'IN')
        ->sort('id')
        ->execute();
}