function BlockUiTest::testRouteProtection

Tests that the enable/disable routes are protected from CSRF.

File

core/modules/block/tests/src/Functional/BlockUiTest.php, line 371

Class

BlockUiTest

Tests that the block configuration UI exists and stores data correctly.

Namespace

Code

public function testRouteProtection() : void {
  // Get the first block generated in our setUp method.
  /** @var \Drupal\block\BlockInterface $block */
  $block = reset($this->blocks);
  // Ensure that the enable and disable routes are protected.
  $this->drupalGet('admin/structure/block/manage/' . $block->id() . '/disable');
  $this->assertSession()
    ->statusCodeEquals(403);
  $this->drupalGet('admin/structure/block/manage/' . $block->id() . '/enable');
  $this->assertSession()
    ->statusCodeEquals(403);
}