annotate core/tests/Drupal/FunctionalTests/BrowserTestBaseUserAgentTest.php @ 5:12f9dff5fda9 tip

Update to Drupal core 8.7.1
author Chris Cannam
date Thu, 09 May 2019 15:34:47 +0100
parents
children
rev   line source
Chris@5 1 <?php
Chris@5 2
Chris@5 3 namespace Drupal\FunctionalTests;
Chris@5 4
Chris@5 5 use Drupal\Tests\BrowserTestBase;
Chris@5 6
Chris@5 7 /**
Chris@5 8 * Tests BrowserTestBase functionality.
Chris@5 9 *
Chris@5 10 * @group browsertestbase
Chris@5 11 */
Chris@5 12 class BrowserTestBaseUserAgentTest extends BrowserTestBase {
Chris@5 13
Chris@5 14 /**
Chris@5 15 * The user agent string to use.
Chris@5 16 *
Chris@5 17 * @var string
Chris@5 18 */
Chris@5 19 protected $agent;
Chris@5 20
Chris@5 21 /**
Chris@5 22 * Test validation of the User-Agent header we use to perform test requests.
Chris@5 23 */
Chris@5 24 public function testUserAgentValidation() {
Chris@5 25 $assert_session = $this->assertSession();
Chris@5 26 $system_path = $this->buildUrl(drupal_get_path('module', 'system'));
Chris@5 27 $http_path = $system_path . '/tests/http.php/user/login';
Chris@5 28 $https_path = $system_path . '/tests/https.php/user/login';
Chris@5 29 // Generate a valid simpletest User-Agent to pass validation.
Chris@5 30 $this->assertTrue(preg_match('/test\d+/', $this->databasePrefix, $matches), 'Database prefix contains test prefix.');
Chris@5 31 $this->agent = drupal_generate_test_ua($matches[0]);
Chris@5 32
Chris@5 33 // Test pages only available for testing.
Chris@5 34 $this->drupalGet($http_path);
Chris@5 35 $assert_session->statusCodeEquals(200);
Chris@5 36 $this->drupalGet($https_path);
Chris@5 37 $assert_session->statusCodeEquals(200);
Chris@5 38
Chris@5 39 // Now slightly modify the HMAC on the header, which should not validate.
Chris@5 40 $this->agent = 'X';
Chris@5 41 $this->drupalGet($http_path);
Chris@5 42 $assert_session->statusCodeEquals(403);
Chris@5 43 $this->drupalGet($https_path);
Chris@5 44 $assert_session->statusCodeEquals(403);
Chris@5 45
Chris@5 46 // Use a real User-Agent and verify that the special files http.php and
Chris@5 47 // https.php can't be accessed.
Chris@5 48 $this->agent = 'Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12';
Chris@5 49 $this->drupalGet($http_path);
Chris@5 50 $assert_session->statusCodeEquals(403);
Chris@5 51 $this->drupalGet($https_path);
Chris@5 52 $assert_session->statusCodeEquals(403);
Chris@5 53 }
Chris@5 54
Chris@5 55 /**
Chris@5 56 * {@inheritdoc}
Chris@5 57 */
Chris@5 58 protected function prepareRequest() {
Chris@5 59 $session = $this->getSession();
Chris@5 60 if ($this->agent) {
Chris@5 61 $session->setCookie('SIMPLETEST_USER_AGENT', $this->agent);
Chris@5 62 }
Chris@5 63 else {
Chris@5 64 $session->setCookie('SIMPLETEST_USER_AGENT', drupal_generate_test_ua($this->databasePrefix));
Chris@5 65 }
Chris@5 66 }
Chris@5 67
Chris@5 68 }