function SelectTest::makeCommentsProvider

Provides expected and input values for testVulnerableComment().

File

core/tests/Drupal/KernelTests/Core/Database/SelectTest.php, line 78

Class

SelectTest

Tests the Select query builder.

Namespace

Code

public function makeCommentsProvider() {
    return [
        [
            '/*  */ ',
            [
                '',
            ],
        ],
        // Try and close the comment early.
[
            '/* Exploit  * / DROP TABLE node. -- */ ',
            [
                'Exploit */ DROP TABLE node; --',
            ],
        ],
        // Variations on comment closing.
[
            '/* Exploit  * / * / DROP TABLE node. -- */ ',
            [
                'Exploit */*/ DROP TABLE node; --',
            ],
        ],
        [
            '/* Exploit  *  * // DROP TABLE node. -- */ ',
            [
                'Exploit **// DROP TABLE node; --',
            ],
        ],
        // Try closing the comment in the second string which is appended.
[
            '/* Exploit  * / DROP TABLE node. --. Another try  * / DROP TABLE node. -- */ ',
            [
                'Exploit */ DROP TABLE node; --',
                'Another try */ DROP TABLE node; --',
            ],
        ],
    ];
}