function ConfirmFormTest::testConfirmFormWithExternalDestination

Tests that the confirm form does not use external destinations.

File

core/modules/system/tests/src/Functional/Form/ConfirmFormTest.php, line 58

Class

ConfirmFormTest

Tests confirmation forms.

Namespace

Code

public function testConfirmFormWithExternalDestination() {
    $this->drupalGet('form-test/confirm-form');
    $this->assertCancelLinkUrl(Url::fromRoute('form_test.route8'));
    $this->drupalGet('form-test/confirm-form', [
        'query' => [
            'destination' => 'node',
        ],
    ]);
    $this->assertCancelLinkUrl(Url::fromUri('internal:/node'));
    $this->drupalGet('form-test/confirm-form', [
        'query' => [
            'destination' => 'http://example.com',
        ],
    ]);
    $this->assertCancelLinkUrl(Url::fromRoute('form_test.route8'));
    $this->drupalGet('form-test/confirm-form', [
        'query' => [
            'destination' => '<front>',
        ],
    ]);
    $this->assertCancelLinkUrl(Url::fromRoute('<front>'));
    // Other invalid destinations, should fall back to the form default.
    $this->drupalGet('form-test/confirm-form', [
        'query' => [
            'destination' => '/http://example.com',
        ],
    ]);
    $this->assertCancelLinkUrl(Url::fromRoute('form_test.route8'));
}