Security update for Core, with self-updated composer
[yaffs-website] / web / core / tests / Drupal / Tests / Component / HttpFoundation / SecuredRedirectResponseTest.php
1 <?php
2
3 /**
4  * @file
5  * Contains \Drupal\Tests\Component\HttpFoundation\SecuredRedirectResponseTest.
6  */
7
8 namespace Drupal\Tests\Component\HttpFoundation;
9
10 use Drupal\Component\HttpFoundation\SecuredRedirectResponse;
11 use PHPUnit\Framework\TestCase;
12 use Symfony\Component\HttpFoundation\Cookie;
13 use Symfony\Component\HttpFoundation\RedirectResponse;
14
15 /**
16  * Test secure redirect base class.
17  *
18  * @group Routing
19  * @coversDefaultClass \Drupal\Component\HttpFoundation\SecuredRedirectResponse
20  */
21 class SecuredRedirectResponseTest extends TestCase {
22
23   /**
24    * Test copying of redirect response.
25    *
26    * @covers ::createFromRedirectResponse
27    * @covers ::fromResponse
28    */
29   public function testRedirectCopy() {
30     $redirect = new RedirectResponse('/magic_redirect_url', 301, ['x-cache-foobar' => 123]);
31     $redirect->setProtocolVersion('2.0');
32     $redirect->setCharset('ibm-943_P14A-2000');
33     $redirect->headers->setCookie(new Cookie('name', 'value'));
34
35     // Make a cloned redirect.
36     $secureRedirect = SecuredRedirectStub::createFromRedirectResponse($redirect);
37     $this->assertEquals('/magic_redirect_url', $secureRedirect->getTargetUrl());
38     $this->assertEquals(301, $secureRedirect->getStatusCode());
39     // We pull the headers from the original redirect because there are default headers applied.
40     $headers1 = $redirect->headers->allPreserveCase();
41     $headers2 = $secureRedirect->headers->allPreserveCase();
42     // We unset cache headers so we don't test arcane Symfony weirdness.
43     // https://github.com/symfony/symfony/issues/16171
44     unset($headers1['Cache-Control'], $headers2['Cache-Control']);
45     $this->assertEquals($headers1, $headers2);
46     $this->assertEquals('2.0', $secureRedirect->getProtocolVersion());
47     $this->assertEquals('ibm-943_P14A-2000', $secureRedirect->getCharset());
48     $this->assertEquals($redirect->headers->getCookies(), $secureRedirect->headers->getCookies());
49   }
50
51 }
52
53 class SecuredRedirectStub extends SecuredRedirectResponse {
54
55   /**
56    * {@inheritdoc}
57    */
58   protected function isSafe($url) {
59     // Empty implementation for testing.
60     return TRUE;
61   }
62
63 }