Security update for Core, with self-updated composer

[yaffs-website] / web / core / modules / system / tests / src / Functional / Form / ElementsVerticalTabsTest.php

diff --git a/web/core/modules/system/tests/src/Functional/Form/ElementsVerticalTabsTest.php b/web/core/modules/system/tests/src/Functional/Form/ElementsVerticalTabsTest.php
new file mode 100644 (file)
index 0000000..07f25fe
--- /dev/null
+++ b/web/core/modules/system/tests/src/Functional/Form/ElementsVerticalTabsTest.php
@@ -0,0 +1,95 @@
+<?php
+
+namespace Drupal\Tests\system\Functional\Form;
+
+use Drupal\Component\Utility\SafeMarkup;
+use Drupal\Component\Serialization\Json;
+use Drupal\Tests\BrowserTestBase;
+
+/**
+ * Tests the vertical_tabs form element for expected behavior.
+ *
+ * @group Form
+ */
+class ElementsVerticalTabsTest extends BrowserTestBase {
+
+  /**
+   * Modules to enable.
+   *
+   * @var array
+   */
+  public static $modules = ['form_test'];
+
+  /**
+   * A user with permission to access vertical_tab_test_tabs.
+   *
+   * @var \Drupal\user\UserInterface
+   */
+  protected $adminUser;
+
+  /**
+   * A normal user.
+   *
+   * @var \Drupal\user\UserInterface
+   */
+  protected $webUser;
+
+  protected function setUp() {
+    parent::setUp();
+
+    $this->adminUser = $this->drupalCreateUser(['access vertical_tab_test tabs']);
+    $this->webUser = $this->drupalCreateUser();
+    $this->drupalLogin($this->adminUser);
+  }
+
+  /**
+   * Ensures that vertical-tabs.js is included before collapse.js.
+   *
+   * Otherwise, collapse.js adds "SHOW" or "HIDE" labels to the tabs.
+   */
+  public function testJavaScriptOrdering() {
+    $this->drupalGet('form_test/vertical-tabs');
+    $content = $this->getSession()->getPage()->getContent();
+    $position1 = strpos($content, 'core/misc/vertical-tabs.js');
+    $position2 = strpos($content, 'core/misc/collapse.js');
+    $this->assertTrue($position1 !== FALSE && $position2 !== FALSE && $position1 < $position2, 'vertical-tabs.js is included before collapse.js');
+  }
+
+  /**
+   * Ensures that vertical tab markup is not shown if user has no tab access.
+   */
+  public function testWrapperNotShownWhenEmpty() {
+    // Test admin user can see vertical tabs and wrapper.
+    $this->drupalGet('form_test/vertical-tabs');
+    $wrapper = $this->xpath("//div[@data-vertical-tabs-panes]");
+    $this->assertTrue(isset($wrapper[0]), 'Vertical tab panes found.');
+
+    // Test wrapper markup not present for non-privileged web user.
+    $this->drupalLogin($this->webUser);
+    $this->drupalGet('form_test/vertical-tabs');
+    $wrapper = $this->xpath("//div[@data-vertical-tabs-panes]");
+    $this->assertFalse(isset($wrapper[0]), 'Vertical tab wrappers are not displayed to unprivileged users.');
+  }
+
+  /**
+   * Ensures that default vertical tab is correctly selected.
+   */
+  public function testDefaultTab() {
+    $this->drupalGet('form_test/vertical-tabs');
+
+    $value = $this->assertSession()
+      ->elementExists('css', 'input[name="vertical_tabs__active_tab"]')
+      ->getValue();
+
+    $this->assertSame('edit-tab3', $value, t('The default vertical tab is correctly selected.'));
+  }
+
+  /**
+   * Ensures that vertical tab form values are cleaned.
+   */
+  public function testDefaultTabCleaned() {
+    $values = Json::decode($this->drupalPostForm('form_test/form-state-values-clean', [], t('Submit')));
+    $this->assertFalse(isset($values['vertical_tabs__active_tab']), SafeMarkup::format('%element was removed.', ['%element' => 'vertical_tabs__active_tab']));
+  }
+
+}