76 lines
2.2 KiB
PHP
76 lines
2.2 KiB
PHP
|
<?php
|
||
|
|
|
||
|
|
declare(strict_types=1);
|
||
|
|
|
||
|
|
namespace Drupal\FunctionalTests;
|
||
|
|
|
||
|
|
use Drupal\Tests\BrowserTestBase;
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Tests BrowserTestBase functionality.
|
||
|
|
*
|
||
|
|
* @group browsertestbase
|
||
|
|
*/
|
||
|
|
class BrowserTestBaseUserAgentTest extends BrowserTestBase {
|
||
|
|
|
||
|
|
/**
|
||
|
|
* {@inheritdoc}
|
||
|
|
*/
|
||
|
|
protected $defaultTheme = 'stark';
|
||
|
|
|
||
|
|
/**
|
||
|
|
* The user agent string to use.
|
||
|
|
*
|
||
|
|
* @var string
|
||
|
|
*/
|
||
|
|
protected $agent;
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Tests validation of the User-Agent header we use to perform test requests.
|
||
|
|
*/
|
||
|
|
public function testUserAgentValidation(): void {
|
||
|
|
$assert_session = $this->assertSession();
|
||
|
|
$system_path = $this->buildUrl(\Drupal::service('extension.list.module')->getPath('system'));
|
||
|
|
$http_path = $system_path . '/tests/http.php/user/login';
|
||
|
|
$https_path = $system_path . '/tests/https.php/user/login';
|
||
|
|
// Generate a valid test User-Agent to pass validation.
|
||
|
|
$this->assertNotFalse(preg_match('/test\d+/', $this->databasePrefix, $matches), 'Database prefix contains test prefix.');
|
||
|
|
$this->agent = drupal_generate_test_ua($matches[0]);
|
||
|
|
|
||
|
|
// Test pages only available for testing.
|
||
|
|
$this->drupalGet($http_path);
|
||
|
|
$assert_session->statusCodeEquals(200);
|
||
|
|
$this->drupalGet($https_path);
|
||
|
|
$assert_session->statusCodeEquals(200);
|
||
|
|
|
||
|
|
// Now slightly modify the HMAC on the header, which should not validate.
|
||
|
|
$this->agent = 'X';
|
||
|
|
$this->drupalGet($http_path);
|
||
|
|
$assert_session->statusCodeEquals(403);
|
||
|
|
$this->drupalGet($https_path);
|
||
|
|
$assert_session->statusCodeEquals(403);
|
||
|
|
|
||
|
|
// Use a real User-Agent and verify that the special files http.php and
|
||
|
|
// https.php can't be accessed.
|
||
|
|
$this->agent = 'Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12';
|
||
|
|
$this->drupalGet($http_path);
|
||
|
|
$assert_session->statusCodeEquals(403);
|
||
|
|
$this->drupalGet($https_path);
|
||
|
|
$assert_session->statusCodeEquals(403);
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* {@inheritdoc}
|
||
|
|
*/
|
||
|
|
protected function prepareRequest(): void {
|
||
|
|
$session = $this->getSession();
|
||
|
|
if ($this->agent) {
|
||
|
|
$session->setCookie('SIMPLETEST_USER_AGENT', $this->agent);
|
||
|
|
}
|
||
|
|
else {
|
||
|
|
$session->setCookie('SIMPLETEST_USER_AGENT', drupal_generate_test_ua($this->databasePrefix));
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
}
|