ProductionExceptionHandlerTest.php

Go to the documentation of this file.

<?php
namespace TYPO3\CMS\Core\Tests\Unit\Error;

class ProductionExceptionHandlerTest extends \TYPO3\CMS\Core\Tests\UnitTestCase {

    protected $fixture = NULL;

    protected function setUp() {
        $this->fixture = $this->getMock('TYPO3\\CMS\\Core\\Error\\ProductionExceptionHandler', array('discloseExceptionInformation', 'sendStatusHeaders', 'writeLogEntries'), array(), '', FALSE);
        $this->fixture->expects($this->any())->method('discloseExceptionInformation')->will($this->returnValue(TRUE));
    }

    public function echoExceptionWebEscapesExceptionMessage() {
        $message = '<b>b</b><script>alert(1);</script>';
        $exception = new \Exception($message);
        ob_start();
        $this->fixture->echoExceptionWeb($exception);
        $output = ob_get_contents();
        ob_end_clean();
        $this->assertContains(htmlspecialchars($message), $output);
        $this->assertNotContains($message, $output);
    }

    public function echoExceptionWebEscapesExceptionTitle() {
        $title = '<b>b</b><script>alert(1);</script>';
        $exception = $this->getMock('Exception', array('getTitle'), array('some message'));
        $exception->expects($this->any())->method('getTitle')->will($this->returnValue($title));
        ob_start();
        $this->fixture->echoExceptionWeb($exception);
        $output = ob_get_contents();
        ob_end_clean();
        $this->assertContains(htmlspecialchars($title), $output);
        $this->assertNotContains($title, $output);
    }

}