function XssTest::testQuestionSign

Checks that strings starting with a question sign are correctly processed.

File

core/tests/Drupal/Tests/Component/Utility/XssTest.php, line 477

Class

XssTest

XSS Filtering tests.

Namespace

Code

public function testQuestionSign() : void {
    $value = Xss::filter('<?xml:namespace ns="urn:schemas-microsoft-com:time">');
    $this->assertStringNotContainsStringIgnoringCase('<?xml', $value, 'HTML tag stripping evasion -- starting with a question sign (processing instructions).');
}