25 lines
655 B
PHP
25 lines
655 B
PHP
<?php
|
|
|
|
uses(Tests\TestCase::class);
|
|
|
|
it('does not throw when session locale is a malicious string', function () {
|
|
$response = $this->withSession(['locale' => '-1 or 5*5=25 --'])
|
|
->get('/impressum');
|
|
|
|
$response->assertSuccessful();
|
|
});
|
|
|
|
it('applies a valid session locale', function () {
|
|
$response = $this->withSession(['locale' => 'en'])
|
|
->get('/impressum');
|
|
|
|
$response->assertSuccessful();
|
|
expect(app()->getLocale())->toBe('en');
|
|
});
|
|
|
|
it('clears invalid session locale', function () {
|
|
$this->withSession(['locale' => '-1 or 5*5=25 --'])
|
|
->get('/impressum');
|
|
|
|
expect(session('locale'))->toBeNull();
|
|
});
|