function AddFeedTest::testFeedLabelEscaping

Ensures that the feed label is escaping when rendering the feed icon.

File

core/modules/aggregator/tests/src/Functional/AddFeedTest.php, line 65

Class

AddFeedTest

Add feed test.

Namespace

Code

public function testFeedLabelEscaping() {
  $feed = $this->createFeed(NULL, [
    'title[0][value]' => 'Test feed title <script>alert(123);</script>',
  ]);
  $this->checkForMetaRefresh();
  $this->drupalGet('aggregator/sources/' . $feed->id());
  $this->assertSession()
    ->statusCodeEquals(200);
  $this->assertSession()
    ->assertEscaped('Test feed title <script>alert(123);</script>');
  $this->assertSession()
    ->responseNotContains('Test feed title <script>alert(123);</script>');
  // Ensure the feed icon title is escaped.
  $this->assertStringContainsString('class="feed-icon">  Subscribe to Test feed title &lt;script&gt;alert(123);&lt;/script&gt; feed</a>', str_replace([
    "\n",
    "\r",
  ], '', $this->getSession()
    ->getPage()
    ->getContent()));
}