function LegacyValidateTest::testInsecureExtensions

Tests hard-coded security check in file_validate().

File

core/modules/file/tests/src/Kernel/LegacyValidateTest.php, line 42

Class

LegacyValidateTest

Tests the <a href="/api/drupal/core%21modules%21file%21file.module/function/file_validate/10" title="Checks that a file meets the criteria specified by the validators." class="local">file_validate</a>() function.

Namespace

Code

public function testInsecureExtensions() {
    $file = $this->createFile('test.php', 'Invalid PHP');
    // Test that file_validate() will check for insecure extensions by default.
    $this->expectDeprecation('file_validate() is deprecated in drupal:10.2.0 and is removed from drupal:11.0.0. Use the \'file.validator\' service instead. See https://www.drupal.org/node/3363700');
    $errors = file_validate($file, []);
    $this->assertEquals('For security reasons, your upload has been rejected.', $errors[0]);
    $this->assertFileHooksCalled([]);
    file_test_reset();
    // Test that the 'allow_insecure_uploads' is respected.
    $this->config('system.file')
        ->set('allow_insecure_uploads', TRUE)
        ->save();
    $errors = file_validate($file, []);
    $this->assertEmpty($errors);
    $this->assertFileHooksCalled([]);
}