CWP\Core\Tests\Control\InitialisationMiddlewareTest

Complexity

Total Complexity

8

Size/Duplication

Total Lines	100
Duplicated Lines	0 %

Importance

Changes	1
Bugs	0	Features	0

8 Methods

Rating	Name	Duplication	Size	Complexity
A	testDoNotConfigureProxyIfNoEnvironmentVarsAreSet()	0	7	1
A	testConfigureEgressProxyWhenVarsAreSet()	0	11	1
A	testDoNotConfigureProxyDomainExclusionsWhenNoneAreDefined()	0	10	1
A	testConfigureEgressProxyDomainExclusions()	0	16	1
A	setUp()	0	10	1
A	runMiddleware()	0	3	1
A	testSecurityHeadersAddedByDefault()	0	5	1
A	testXSSProtectionHeaderNotAdded()	0	5	1

<?php

namespace CWP\Core\Tests\Control;

use CWP\Core\Control\InitialisationMiddleware;
use SilverStripe\Control\HTTPRequest;
use SilverStripe\Core\Config\Config;
use SilverStripe\Core\Environment;
use SilverStripe\Dev\FunctionalTest;

class InitialisationMiddlewareTest extends FunctionalTest
{
    /**
     * @var HTTPRequest
     */
    protected $request;

    /**
     * @var InitialisationMiddleware
     */
    protected $middleware;

    protected function setUp()
    {
        parent::setUp();

        $this->request = new HTTPRequest('GET', '/');
        $this->middleware = new InitialisationMiddleware();

        Environment::setEnv('SS_OUTBOUND_PROXY', '');
        Environment::setEnv('SS_OUTBOUND_PROXY_PORT', '');
        Environment::setEnv('NO_PROXY', '');
    }

    public function testDoNotConfigureProxyIfNoEnvironmentVarsAreSet()
    {
        $this->runMiddleware();

        $this->assertEmpty(
            Environment::getEnv('http_proxy'),
            'Proxy information is not set if no outbound proxy is configured'
        );
    }

    public function testConfigureEgressProxyWhenVarsAreSet()
    {
        Environment::setEnv('SS_OUTBOUND_PROXY', 'http://example.com');
        Environment::setEnv('SS_OUTBOUND_PROXY_PORT', '8024');

        $this->runMiddleware();

        $this->assertEquals(
            'http://example.com:8024',
            Environment::getEnv('http_proxy'),
            'Proxy is configured with proxy and port'
        );
    }

    public function testDoNotConfigureProxyDomainExclusionsWhenNoneAreDefined()
    {
        Config::modify()->remove(InitialisationMiddleware::class, 'egress_proxy_exclude_domains');

        $this->runMiddleware();

        $this->assertSame(
            '',
            Environment::getEnv('NO_PROXY'),
            'No domain exclusions are set when none are defined'
        );
    }

    public function testConfigureEgressProxyDomainExclusions()
    {
        Config::modify()->set(
            InitialisationMiddleware::class,
            'egress_proxy_exclude_domains',
            'example.com'
        );

        Environment::setEnv('NO_PROXY', 'foo.com,bar.com');

        $this->runMiddleware();

        $this->assertSame(
            'foo.com,bar.com,example.com',
            Environment::getEnv('NO_PROXY'),
            'Domain exclusions are combined with existing values and configuration settings'
        );
    }

    public function testSecurityHeadersAddedByDefault()
    {
        $response = $this->get('test');
        $this->assertArrayHasKey('x-xss-protection', $response->getHeaders());
        $this->assertSame('1; mode=block', $response->getHeader('x-xss-protection'));
    }

    public function testXSSProtectionHeaderNotAdded()
    {
        Config::modify()->set(InitialisationMiddleware::class, 'xss_protection_disabled', true);
        $response = $this->get('test');
        $this->assertArrayNotHasKey('x-xss-protection', $response->getHeaders());
    }

    /**
     * Runs the middleware with a stubbed delegate
     */
    protected function runMiddleware()
    {
        $this->middleware->process($this->request, function () {
            // no op
        });
    }
}