function ViewsEscapingTest::testViewsFieldHeaderEscaping

Tests for incorrectly escaped markup in a header label on a display table.

File

core/modules/views/tests/src/Functional/ViewsEscapingTest.php, line 75

Class

ViewsEscapingTest

Tests output of Views.

Namespace

Code

public function testViewsFieldHeaderEscaping() {
    // Test with a field header label having an html element wrapper.
    $this->drupalGet('test_field_header');
    // Assert that there are no escaped '<'s characters.
    $this->assertNoEscaped('<');
    // Test with a field header label having a XSS test as a wrapper.
    $this->drupalGet('test_field_header_xss');
    // Assert that XSS test is escaped.
    $this->assertNoRaw('<script>alert("XSS")</script>', 'Harmful tags are escaped in header label.');
}