function SimpleTestBrowserTest::testUserAgentValidation

Test validation of the User-Agent header we use to perform test requests.

File

core/modules/simpletest/src/Tests/SimpleTestBrowserTest.php, line 83

Class

SimpleTestBrowserTest

Tests the WebTestBase internal browser.

Namespace

Code

public function testUserAgentValidation() {
    global $base_url;
    // Logout the user which was logged in during test-setup.
    $this->drupalLogout();
    $system_path = $base_url . '/' . drupal_get_path('module', 'system');
    $http_path = $system_path . '/tests/http.php/user/login';
    $https_path = $system_path . '/tests/https.php/user/login';
    // Generate a valid simpletest User-Agent to pass validation.
    $this->assertTrue(preg_match('/test\\d+/', $this->databasePrefix, $matches), 'Database prefix contains test prefix.');
    $test_ua = drupal_generate_test_ua($matches[0]);
    $this->additionalCurlOptions = [
        CURLOPT_USERAGENT => $test_ua,
    ];
    // Test pages only available for testing.
    $this->drupalGet($http_path);
    $this->assertResponse(200, 'Requesting http.php with a legitimate simpletest User-Agent returns OK.');
    $this->drupalGet($https_path);
    $this->assertResponse(200, 'Requesting https.php with a legitimate simpletest User-Agent returns OK.');
    // Now slightly modify the HMAC on the header, which should not validate.
    $this->additionalCurlOptions = [
        CURLOPT_USERAGENT => $test_ua . 'X',
    ];
    $this->drupalGet($http_path);
    $this->assertResponse(403, 'Requesting http.php with a bad simpletest User-Agent fails.');
    $this->drupalGet($https_path);
    $this->assertResponse(403, 'Requesting https.php with a bad simpletest User-Agent fails.');
    // Use a real User-Agent and verify that the special files http.php and
    // https.php can't be accessed.
    $this->additionalCurlOptions = [
        CURLOPT_USERAGENT => 'Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12',
    ];
    $this->drupalGet($http_path);
    $this->assertResponse(403, 'Requesting http.php with a normal User-Agent fails.');
    $this->drupalGet($https_path);
    $this->assertResponse(403, 'Requesting https.php with a normal User-Agent fails.');
}