1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
<?php
/**
* Copyright © Magento, Inc. All rights reserved.
* See COPYING.txt for license details.
*/
namespace Magento\Developer\Model\Config\Backend;
class AllowedIpsTest extends \PHPUnit\Framework\TestCase
{
/**
* @param string $value
* @param string $expected
* @magentoDbIsolation enabled
* @dataProvider fieldDataProvider
*/
public function testSaveWithEscapeHtml($value, $expected)
{
/**
* @var \Magento\Developer\Model\Config\Backend\AllowedIps
*/
$model = \Magento\TestFramework\Helper\Bootstrap::getObjectManager()->create(
\Magento\Developer\Model\Config\Backend\AllowedIps::class
);
$model->setValue($value);
$model->setPath('path');
$model->beforeSave();
$model->save();
$this->assertEquals($expected, $model->getValue());
}
/**
* @return array
*/
public function fieldDataProvider()
{
return [
['<'.'script>alert(\'XSS\')</script>', '' ],
['10.64.202.22, <'.'script>alert(\'XSS\')</script>', '10.64.202.22' ]
];
}
}