', $response); // taken from https://www.owasp.org/index.php/Cross-site_Scripting_(XSS) $htmlWithXss = ' click me! '; ob_start(); $handler->sendPhpResponse(new \RuntimeException($htmlWithXss)); $response = ob_get_clean(); $this->assertStringContainsString(sprintf('

%s

', htmlspecialchars($htmlWithXss, ENT_COMPAT | ENT_SUBSTITUTE, 'UTF-8')), $response); } public function testStatusCode() { $handler = new ExceptionHandler(false, 'iso8859-1'); ob_start(); $handler->sendPhpResponse(new NotFoundHttpException('Foo')); $response = ob_get_clean(); $this->assertStringContainsString('Sorry, the page you are looking for could not be found.', $response); $expectedHeaders = [ ['HTTP/1.0 404', true, null], ['Content-Type: text/html; charset=iso8859-1', true, null], ]; $this->assertSame($expectedHeaders, testHeader()); } public function testHeaders() { $handler = new ExceptionHandler(false, 'iso8859-1'); ob_start(); $handler->sendPhpResponse(new MethodNotAllowedHttpException(['POST'])); ob_get_clean(); $expectedHeaders = [ ['HTTP/1.0 405', true, null], ['Allow: POST', false, null], ['Content-Type: text/html; charset=iso8859-1', true, null], ]; $this->assertSame($expectedHeaders, testHeader()); } public function testNestedExceptions() { $handler = new ExceptionHandler(true); ob_start(); $handler->sendPhpResponse(new \RuntimeException('Foo', 0, new \RuntimeException('Bar'))); $response = ob_get_clean(); $this->assertStringMatchesFormat('%A

Foo

%A

Bar

%A', $response); } public function testHandle() { $handler = new ExceptionHandler(true); ob_start(); $handler->handle(new \Exception('foo')); $this->assertThatTheExceptionWasOutput(ob_get_clean(), \Exception::class, 'Exception', 'foo'); } public function testHandleWithACustomHandlerThatOutputsSomething() { $handler = new ExceptionHandler(true); ob_start(); $handler->setHandler(function () { echo 'ccc'; }); $handler->handle(new \Exception()); ob_end_flush(); // Necessary because of this PHP bug : https://bugs.php.net/76563 $this->assertSame('ccc', ob_get_clean()); } public function testHandleWithACustomHandlerThatOutputsNothing() { $handler = new ExceptionHandler(true); $handler->setHandler(function () {}); $handler->handle(new \Exception('ccc')); $this->assertThatTheExceptionWasOutput(ob_get_clean(), \Exception::class, 'Exception', 'ccc'); } public function testHandleWithACustomHandlerThatFails() { $handler = new ExceptionHandler(true); $handler->setHandler(function () { throw new \RuntimeException(); }); $handler->handle(new \Exception('ccc')); $this->assertThatTheExceptionWasOutput(ob_get_clean(), \Exception::class, 'Exception', 'ccc'); } public function testHandleOutOfMemoryException() { $handler = new ExceptionHandler(true); ob_start(); $handler->setHandler(function () { $this->fail('OutOfMemoryException should bypass the handler'); }); $handler->handle(new OutOfMemoryException('foo', 0, E_ERROR, __FILE__, __LINE__)); $this->assertThatTheExceptionWasOutput(ob_get_clean(), OutOfMemoryException::class, 'OutOfMemoryException', 'foo'); } private function assertThatTheExceptionWasOutput($content, $expectedClass, $expectedTitle, $expectedMessage) { $this->assertStringContainsString(sprintf('%s', $expectedClass, $expectedTitle), $content); $this->assertStringContainsString(sprintf('

%s

', $expectedMessage), $content); } }