function FileFieldWidgetTest::testTemporaryFileRemovalExploit

Tests exploiting the temporary file removal of another user using fid.

File

core/modules/file/tests/src/Functional/FileFieldWidgetTest.php, line 431

Class

FileFieldWidgetTest

Tests the file field widget with public and private files.

Namespace

Code

public function testTemporaryFileRemovalExploit() : void {
    // Create a victim user.
    $victim_user = $this->drupalCreateUser();
    // Create an attacker user.
    $attacker_user = $this->drupalCreateUser([
        'access content',
        'create article content',
        'edit any article content',
    ]);
    // Log in as the attacker user.
    $this->drupalLogin($attacker_user);
    // Perform tests using the newly created users.
    $this->doTestTemporaryFileRemovalExploit($victim_user, $attacker_user);
}