silverstripe-userforms/tests/EditableLiteralFieldTest.php

<?php

/**
 * Tests the {@see EditableLiteralField} class
 */
class EditableLiteralFieldTest extends SapphireTest {

	public function setUp() {
		parent::setUp();
		Config::nest();
		HtmlEditorConfig::set_active('cms');
	}


	public function tearDown() {
		Config::unnest();
		parent::tearDown();
	}

	/**
	 * Tests the sanitisation of HTML content
	 */
	public function testSanitisation() {
		$rawContent = '<h1>Welcome</h1><script>alert("Hello!");</script><p>Giant Robots!</p>';
		$safeContent = '<h1>Welcome</h1><p>Giant Robots!</p>';
		$field = new EditableLiteralField();

		// Test with sanitisation enabled
		Config::inst()->update('HtmlEditorField', 'sanitise_server_side', true);
		$field->setContent($rawContent);
		$this->assertEquals($safeContent, $field->getContent());

		// Test with sanitisation disabled
		Config::inst()->remove('HtmlEditorField', 'sanitise_server_side');
		$field->setContent($rawContent);
		$this->assertEquals($rawContent, $field->getContent());
	}

	public function testHideLabel() {
		$field = new EditableLiteralField(array(
			'Title' => 'Test label'
		));

		$this->assertContains('Test label', $field->getFormField()->Field());

		$field->HideLabel = true;
		$this->assertNotContains('Test label', $field->getFormField()->Field());
	}
}