function XssTest::testViewsUi

File

core/modules/views_ui/tests/src/Functional/XssTest.php, line 24

Class

XssTest

Tests the Xss vulnerability.

Namespace

Code

public function testViewsUi() {
    $this->drupalGet('admin/structure/views/view/sa_contrib_2013_035');
    // Verify that the field admin label is properly escaped.
    $this->assertEscaped('<marquee>test</marquee>');
    $this->drupalGet('admin/structure/views/nojs/handler/sa_contrib_2013_035/page_1/header/area');
    // Verify that the token label is properly escaped.
    $this->assertEscaped('{{ title }} == <marquee>test</marquee>');
    $this->assertEscaped('{{ title_1 }} == <script>alert("XSS")</script>');
}