Security update for Core, with self-updated composer

[yaffs-website] / web / core / modules / system / tests / src / Functional / Form / UrlTest.php

diff --git a/web/core/modules/system/tests/src/Functional/Form/UrlTest.php b/web/core/modules/system/tests/src/Functional/Form/UrlTest.php
new file mode 100644 (file)
index 0000000..82d227b
--- /dev/null
+++ b/web/core/modules/system/tests/src/Functional/Form/UrlTest.php
@@ -0,0 +1,52 @@
+<?php
+
+namespace Drupal\Tests\system\Functional\Form;
+
+use Drupal\Component\Serialization\Json;
+use Drupal\Tests\BrowserTestBase;
+
+/**
+ * Tests the form API URL element.
+ *
+ * @group Form
+ */
+class UrlTest extends BrowserTestBase {
+
+  /**
+   * Modules to enable.
+   *
+   * @var array
+   */
+  public static $modules = ['form_test'];
+
+  protected $profile = 'testing';
+
+  /**
+   * Tests that #type 'url' fields are properly validated and trimmed.
+   */
+  public function testFormUrl() {
+    $edit = [];
+    $edit['url'] = 'http://';
+    $edit['url_required'] = ' ';
+    $this->drupalPostForm('form-test/url', $edit, 'Submit');
+    $this->assertRaw(t('The URL %url is not valid.', ['%url' => 'http://']));
+    $this->assertRaw(t('@name field is required.', ['@name' => 'Required URL']));
+
+    $edit = [];
+    $edit['url'] = "\n";
+    $edit['url_required'] = 'http://example.com/   ';
+    $this->drupalPostForm('form-test/url', $edit, 'Submit');
+    $values = Json::decode($this->getSession()->getPage()->getContent());
+    $this->assertIdentical($values['url'], '');
+    $this->assertEqual($values['url_required'], 'http://example.com/');
+
+    $edit = [];
+    $edit['url'] = 'http://foo.bar.example.com/';
+    $edit['url_required'] = 'https://www.drupal.org/node/1174630?page=0&foo=bar#new';
+    $this->drupalPostForm('form-test/url', $edit, 'Submit');
+    $values = Json::decode($this->getSession()->getPage()->getContent());
+    $this->assertEqual($values['url'], $edit['url']);
+    $this->assertEqual($values['url_required'], $edit['url_required']);
+  }
+
+}