TYPO3CMS  8
 All Classes Namespaces Files Functions Variables Pages
ProductionExceptionHandlerTest.php
Go to the documentation of this file.
1 <?php
2 namespace TYPO3\CMS\Core\Tests\Unit\Error;
3 
4 /*
5  * This file is part of the TYPO3 CMS project.
6  *
7  * It is free software; you can redistribute it and/or modify it under
8  * the terms of the GNU General Public License, either version 2
9  * of the License, or any later version.
10  *
11  * For the full copyright and license information, please read the
12  * LICENSE.txt file that was distributed with this source code.
13  *
14  * The TYPO3 project - inspiring people to share!
15  */
16 
21 {
25  protected $subject = null;
26 
30  protected function setUp()
31  {
32  $this->subject = $this->getMockBuilder(\TYPO3\CMS\Core\Error\ProductionExceptionHandler::class)
33  ->setMethods(['discloseExceptionInformation', 'sendStatusHeaders', 'writeLogEntries'])
34  ->disableOriginalConstructor()
35  ->getMock();
36  $this->subject->expects($this->any())->method('discloseExceptionInformation')->will($this->returnValue(true));
37  }
38 
43  {
44  $message = '<b>b</b><script>alert(1);</script>';
45  $exception = new \Exception($message, 1476049364);
46  ob_start();
47  $this->subject->echoExceptionWeb($exception);
48  $output = ob_get_contents();
49  ob_end_clean();
50  $this->assertContains(htmlspecialchars($message), $output);
51  $this->assertNotContains($message, $output);
52  }
53 
57  public function echoExceptionWebEscapesExceptionTitle()
58  {
59  $title = '<b>b</b><script>alert(1);</script>';
61  $exception = $this->getMockBuilder('Exception')
62  ->setMethods(['getTitle'])
63  ->setConstructorArgs(['some message'])
64  ->getMock();
65  $exception->expects($this->any())->method('getTitle')->will($this->returnValue($title));
66  ob_start();
67  $this->subject->echoExceptionWeb($exception);
68  $output = ob_get_contents();
69  ob_end_clean();
70  $this->assertContains(htmlspecialchars($title), $output);
71  $this->assertNotContains($title, $output);
72  }
73 }