Chris@0: <?php
Chris@0: 
Chris@0: namespace Drupal\system\Tests\Theme;
Chris@0: 
Chris@0: use Drupal\simpletest\WebTestBase;
Chris@0: 
Chris@0: /**
Chris@0:  * Tests Twig 'raw' filter.
Chris@0:  *
Chris@0:  * @group Theme
Chris@0:  */
Chris@0: class TwigRawTest extends WebTestBase {
Chris@0: 
Chris@0:   /**
Chris@0:    * Modules to enable.
Chris@0:    *
Chris@0:    * @var array
Chris@0:    */
Chris@0:   public static $modules = ['twig_theme_test'];
Chris@0: 
Chris@0:   /**
Chris@0:    * Tests the raw filter inside an autoescape tag.
Chris@0:    */
Chris@0:   public function testAutoescapeRaw() {
Chris@0:     $test = [
Chris@0:       '#theme' => 'twig_raw_test',
Chris@0:       '#script' => '<script>alert("This alert is real because I will put it through the raw filter!");</script>',
Chris@0:     ];
Chris@0:     $rendered = \Drupal::service('renderer')->renderRoot($test);
Chris@0:     $this->setRawContent($rendered);
Chris@0:     $this->assertRaw('<script>alert("This alert is real because I will put it through the raw filter!");</script>');
Chris@0:   }
Chris@0: 
Chris@0:   /**
Chris@0:    * Tests autoescaping of unsafe content.
Chris@0:    *
Chris@0:    * This is one of the most important tests in Drupal itself in terms of
Chris@0:    * security.
Chris@0:    */
Chris@0:   public function testAutoescape() {
Chris@0:     $script = '<script>alert("This alert is unreal!");</script>';
Chris@0:     $build = [
Chris@0:       '#theme' => 'twig_autoescape_test',
Chris@0:       '#script' => $script,
Chris@0:     ];
Chris@0:     $rendered = \Drupal::service('renderer')->renderRoot($build);
Chris@0:     $this->setRawContent($rendered);
Chris@0:     $this->assertEscaped($script);
Chris@0:   }
Chris@0: 
Chris@0: }