public function DBLogTestCase::testLogMessageSanitized

Make sure HTML tags are filtered out in the log detail page.

File

core/modules/dblog/tests/dblog.test, line 706

Tests for dblog.module.

Class

DBLogTestCase

Tests logging messages to the database.

Code

public function testLogMessageSanitized() {
  $this->backdropLogin($this->big_user);

  // Make sure dangerous HTML tags are filtered out in log detail page.
  $log = array(
    'uid' => 0,
    'type' => 'custom',
    'message' => "<script>alert('foo');</script> <strong>Lorem ipsum</strong>",
    'variables' => NULL,
    'severity' => WATCHDOG_NOTICE,
    'link' => 'foo/bar',
    'request_uri' => 'http://example.com?dblog=1',
    'referer' => 'http://example.org?dblog=2',
    'ip' => '0.0.1.0',
    'timestamp' => REQUEST_TIME,
  );
  dblog_watchdog($log);

  $wid = db_query('SELECT MAX(wid) FROM {watchdog}')->fetchField();
  $this->backdropGet('admin/reports/event/' . $wid);
  $this->assertResponse(200);
  $this->assertNoRaw("<script>alert('foo');</script>");
  $this->assertRaw("alert('foo'); <strong>Lorem ipsum</strong>");
}