function EntityQueryTest::testInjectionInCondition

Test against SQL inject of condition field. This covers a database driver's EntityQuery\Condition class.

File

core/tests/Drupal/KernelTests/Core/Entity/EntityQueryTest.php, line 1108

Class

EntityQueryTest

Tests Entity Query functionality.

Namespace

Code

public function testInjectionInCondition() {
    $this->expectException(\Exception::class);
    $this->queryResults = $this->storage
        ->getQuery()
        ->condition('1 ; -- ', [
        0,
        1,
    ], 'IN')
        ->sort('id')
        ->execute();
}