UrlencodeViewHelperTest.php

Go to the documentation of this file.

<?php
 
declare(strict_types=1);
 
/*
 * This file is part of the TYPO3 CMS project.
 *
 * It is free software; you can redistribute it and/or modify it under
 * the terms of the GNU General Public License, either version 2
 * of the License, or any later version.
 *
 * For the full copyright and license information, please read the
 * LICENSE.txt file that was distributed with this source code.
 *
 * The TYPO3 project - inspiring people to share!
 */
 
namespace ‪TYPO3\CMS\Fluid\Tests\Functional\ViewHelpers\Format;
 
use ‪TYPO3\CMS\Fluid\View\StandaloneView;
use TYPO3\TestingFramework\Core\Functional\FunctionalTestCase;
 
class ‪UrlencodeViewHelperTest extends FunctionalTestCase
{
    protected ‪$initializeDatabase = false;
 
    public function ‪renderDataProvider(): array
    {
        return [
            'renderUsesValueAsSourceIfSpecified' => [
                '<f:format.urlencode value="Source" />',
                'Source',
            ],
            'renderUsesChildnodesAsSourceIfSpecified' => [
                '<f:format.urlencode>Source</f:format.urlencode>',
                'Source',
            ],
            'renderDoesNotModifyValueIfItDoesNotContainSpecialCharacters' => [
                '<f:format.urlencode>StringWithoutSpecialCharacters</f:format.urlencode>',
                'StringWithoutSpecialCharacters',
            ],
            'renderEncodesString' => [
                '<f:format.urlencode>Foo @+%/ "</f:format.urlencode>',
                'Foo%20%40%2B%25%2F%20%22',
            ],
        ];
    }
 
    public function ‪render(string $template, string $expected): void
    {
        $view = new ‪StandaloneView();
        $view->setTemplateSource($template);
        self::assertEquals($expected, $view->render());
    }
 
    public function ‪renderEscapesObjectIfPossible(): void
    {
        $toStringClass = new class () {
            public function __toString(): string
            {
                return '<script>alert(\'"xss"\')</script>';
            }
        };
        $view = new StandaloneView();
        $view->assign('value', $toStringClass);
        $view->setTemplateSource('<f:format.urlencode>{value}</f:format.urlencode>');
        self::assertEquals('%3Cscript%3Ealert%28%27%22xss%22%27%29%3C%2Fscript%3E', $view->render());
    }
}