function ElementsLabelsTest::testTitleEscaping

Tests XSS-protection of element labels.

File

core/modules/system/tests/src/Functional/Form/ElementsLabelsTest.php, line 115

Class

ElementsLabelsTest

Tests form element labels, required markers and associated output.

Namespace

Code

protected function testTitleEscaping() : void {
  $this->drupalGet('form_test/form-labels');
  foreach (FormTestLabelForm::$typesWithTitle as $type) {
    $this->assertSession()
      ->responseContains("{$type} alert('XSS') is XSS filtered!");
    $this->assertSession()
      ->responseNotContains("{$type} <script>alert('XSS')</script> is XSS filtered!");
  }
}