44 lines
1.1 KiB
PHP
44 lines
1.1 KiB
PHP
<?php
|
|
|
|
namespace Tests\Feature;
|
|
|
|
use Illuminate\Foundation\Testing\RefreshDatabase;
|
|
use Illuminate\Support\Arr;
|
|
use Tests\TestCase;
|
|
|
|
class AdminPlatformLeadIndexBackLinkNotEscapedTest extends TestCase
|
|
{
|
|
use RefreshDatabase;
|
|
|
|
protected function loginAsPlatformAdmin(): void
|
|
{
|
|
$this->seed();
|
|
|
|
$this->post('/admin/login', [
|
|
'email' => 'platform.admin@demo.local',
|
|
'password' => 'Platform@123456',
|
|
])->assertRedirect('/admin');
|
|
}
|
|
|
|
public function test_index_should_render_back_link_with_ampersand_not_escaped(): void
|
|
{
|
|
$this->loginAsPlatformAdmin();
|
|
|
|
$back = '/admin/platform-orders?' . Arr::query([
|
|
'lead_id' => 12,
|
|
'payment_status' => 'paid',
|
|
]);
|
|
|
|
$url = '/admin/platform-leads?' . Arr::query([
|
|
'back' => $back,
|
|
]);
|
|
|
|
$res = $this->get($url);
|
|
$res->assertOk();
|
|
|
|
$res->assertSee('← 返回上一页（保留上下文）', false);
|
|
$res->assertSee('href="' . $back . '"', false);
|
|
$res->assertDontSee('&', false);
|
|
}
|
|
}
|