public function LinkSanitizeTest::testXssFiltering

Assert that attributes are filtered.

File

core/modules/link/tests/link.sanitize.test, line 110

Contains simpletests for sanitization.

Class

LinkSanitizeTest

Test for _link_sanitize().

Code

public function testXssFiltering() {
  $item['url'] = 'https://www.backdropcms.org/';
  $item['attributes']['class'] = 'classy';
  $item['attributes']['onmouseover'] = 'alert(document.cookie)';
  list($field, $instance, $entity) = $this->generateParams();
  _link_sanitize($item, 0, $field, $instance, $entity);
  $this->assertEqual('classy', $item['attributes']['class']);
  $this->assertFalse(isset($item['attributes']['onmouseover']));
}