ColorSafePreviewTest.php

<?php

namespace Drupal\Tests\color\Functional;

use Drupal\Core\Url;
use Drupal\Tests\BrowserTestBase;

/**
 * Tests sanitizing color preview loaded from theme.
 *
 * @group color
 * @group legacy
 */
class ColorSafePreviewTest extends BrowserTestBase {
    
    /**
     * Modules to enable.
     *
     * @var string[]
     */
    protected static $modules = [
        'color',
        'color_test',
    ];
    
    /**
     * {@inheritdoc}
     */
    protected $defaultTheme = 'stark';
    
    /**
     * A user with administrative permissions.
     *
     * @var \Drupal\user\UserInterface
     */
    protected $bigUser;
    
    /**
     * {@inheritdoc}
     */
    protected function setUp() : void {
        parent::setUp();
        // Create user.
        $this->bigUser = $this->drupalCreateUser([
            'administer themes',
        ]);
    }
    
    /**
     * Ensures color preview.html is sanitized.
     */
    public function testColorPreview() {
        // Install the color test theme.
        \Drupal::service('theme_installer')->install([
            'color_test_theme',
        ]);
        $this->drupalLogin($this->bigUser);
        // Markup is being printed from an HTML file located in:
        // core/modules/color/tests/modules/color_test/themes/color_test_theme/color/preview.html
        $url = Url::fromRoute('system.theme_settings_theme', [
            'theme' => 'color_test_theme',
        ]);
        $this->drupalGet($url);
        $this->assertSession()
            ->pageTextContains('TEST COLOR PREVIEW');
        $this->assertSession()
            ->responseNotContains('<script>alert("security filter test");</script>');
        $this->assertSession()
            ->responseContains('<h2>TEST COLOR PREVIEW</h2>');
    }

}