function BrowserTestBaseTest::testHtKey

Tests the protections provided by .htkey.

File

core/tests/Drupal/FunctionalTests/BrowserTestBaseTest.php, line 546

Class

BrowserTestBaseTest

Tests BrowserTestBase functionality.

Namespace

Code

public function testHtKey() : void {
  // Remove the Simpletest private key file so we can test the protection
  // against requests that forge a valid testing user agent to gain access
  // to the installer.
  // @see drupal_valid_test_ua()
  // Not using File API; a potential error must trigger a PHP warning.
  $install_url = Url::fromUri('base:core/install.php', [
    'external' => TRUE,
    'absolute' => TRUE,
  ])->toString();
  $this->drupalGet($install_url);
  $this->assertSession()
    ->statusCodeEquals(200);
  unlink($this->siteDirectory . '/.htkey');
  $this->drupalGet($install_url);
  $this->assertSession()
    ->statusCodeEquals(403);
}