function ConfirmFormTest::testConfirmFormWithExternalDestination

Tests that the confirm form does not use external destinations.

File

core/modules/system/tests/src/Functional/Form/ConfirmFormTest.php, line 62

Class

ConfirmFormTest

Tests confirmation forms.

Namespace

Code

public function testConfirmFormWithExternalDestination() : void {
    $this->drupalGet('form-test/confirm-form');
    $this->assertSession()
        ->linkByHrefExists(Url::fromRoute('form_test.route8')->toString());
    $this->drupalGet('form-test/confirm-form', [
        'query' => [
            'destination' => 'node',
        ],
    ]);
    $this->assertSession()
        ->linkByHrefExists(Url::fromUri('internal:/node')->toString());
    $this->drupalGet('form-test/confirm-form', [
        'query' => [
            'destination' => 'http://example.com',
        ],
    ]);
    $this->assertSession()
        ->linkByHrefExists(Url::fromRoute('form_test.route8')->toString());
    $this->drupalGet('form-test/confirm-form', [
        'query' => [
            'destination' => '<front>',
        ],
    ]);
    $this->assertSession()
        ->linkByHrefExists(Url::fromRoute('<front>')->toString());
    // Other invalid destinations, should fall back to the form default.
    $this->drupalGet('form-test/confirm-form', [
        'query' => [
            'destination' => '/http://example.com',
        ],
    ]);
    $this->assertSession()
        ->linkByHrefExists(Url::fromRoute('form_test.route8')->toString());
}