...
 
Commits (1)
......@@ -276,7 +276,7 @@ public function eventDetails($event_id) {
),
array(
array('data' => $this->t('Operations'), 'header' => TRUE),
$dblog->link,
SafeMarkup::checkAdminXss($dblog->link),
),
);
$build['dblog_table'] = array(
......
......@@ -10,6 +10,7 @@
use Drupal\Component\Utility\Unicode;
use Drupal\Component\Utility\Xss;
use Drupal\Core\Logger\RfcLogLevel;
use Drupal\Core\Url;
use Drupal\dblog\Controller\DbLogController;
use Drupal\simpletest\WebTestBase;
......@@ -71,6 +72,7 @@ function testDbLog() {
$this->verifyEvents();
$this->verifyReports();
$this->verifyBreadcrumbs();
$this->verifyLinkEscaping();
// Verify the overview table sorting.
$orders = array('Date', 'Type', 'User');
$sorts = array('asc', 'desc');
......@@ -129,21 +131,33 @@ private function verifyCron($row_limit) {
*
* @param int $count
* Number of watchdog entries to generate.
* @param string $type
* (optional) The type of watchdog entry. Defaults to 'custom'.
* @param int $severity
* (optional) The severity of the watchdog entry. Defaults to
* \Drupal\Core\Logger\RfcLogLevel::NOTICE.
* @param array $options
* These options are used to override the defaults for the test.
* An associative array containing any of the following keys:
* - 'channel': String identifying the log channel to be output to.
* If the channel is not set, the default of 'custom' will be used.
* - 'message': String containing a message to be output to the log.
* A simple default message is used if not provided.
* - 'variables': Array of variables that match the message string.
* - 'severity': Log severity level as defined in logging_severity_levels.
* - 'link': String linking to view the result of the event.
* - 'user': String identifying the username.
* - 'uid': Int identifying the user id for the user.
* - 'request_uri': String identifying the location of the request.
* - 'referer': String identifying the referring url.
* - 'ip': String The ip address of the client machine triggering the log
* entry.
* - 'timestamp': Int unix timestamp.
*/
private function generateLogEntries($count, $type = 'custom', $severity = RfcLogLevel::NOTICE) {
private function generateLogEntries($count, $options = array()) {
global $base_root;
// Prepare the fields to be logged
$log = array(
'channel' => $type,
'message' => 'Log entry added to test the dblog row limit.',
$log = $options + array(
'channel' => 'custom',
'message' => 'Dblog test log message',
'variables' => array(),
'severity' => $severity,
'severity' => RfcLogLevel::NOTICE,
'link' => NULL,
'user' => $this->adminUser,
'uid' => $this->adminUser->id(),
......@@ -151,11 +165,13 @@ private function generateLogEntries($count, $type = 'custom', $severity = RfcLog
'referer' => \Drupal::request()->server->get('HTTP_REFERER'),
'ip' => '127.0.0.1',
'timestamp' => REQUEST_TIME,
);
$message = 'Log entry added to test the dblog row limit. Entry #';
);
$logger = $this->container->get('logger.dblog');
$message = $log['message'] . ' Entry #';
for ($i = 0; $i < $count; $i++) {
$log['message'] = $message . $i;
$this->container->get('logger.dblog')->log($severity, $log['message'], $log);
$logger->log($log['severity'], $log['message'], $log);
}
}
......@@ -246,6 +262,25 @@ public function verifySort($sort = 'asc', $order = 'Date') {
$this->assertText(t('Recent log messages'), 'DBLog report was displayed correctly and sorting went fine.');
}
/**
* Tests the escaping of links in the operation row of a database log detail
* page.
*/
private function verifyLinkEscaping() {
$link = \Drupal::l('View', Url::fromRoute('entity.node.canonical', array('node' => 1)));
$message = 'Log entry added to do the verifyLinkEscaping test.';
$this->generateLogEntries(1, array(
'message' => $message,
'link' => $link,
));
$result = db_query_range('SELECT wid FROM {watchdog} ORDER BY wid DESC', 0, 1);
$this->drupalGet('admin/reports/dblog/event/' . $result->fetchField());
// Check if the link exists (unescaped).
$this->assertRaw($link);
}
/**
* Generates and then verifies some user events.
*/
......@@ -497,7 +532,10 @@ public function testFilter() {
'type' => $type_name,
'severity' => $severity++,
);
$this->generateLogEntries($type['count'], $type['type'], $type['severity']);
$this->generateLogEntries($type['count'], array(
'channel' => $type['type'],
'severity' => $type['severity'],
));
}
}
......