Changeset 60887 for trunk/tests/phpunit/tests/html-api/wpHtmlTagProcessor.php

Timestamp:

10/01/2025 12:57:19 PM (5 months ago)

Author:

jonsurrell

Message:

HTML API: Ensure non-string HTML input is safely handled.

Prevents an issue where passing null to HTML API constructors could result in runtime errors.

Developed in ​https://github.com/WordPress/wordpress-develop/pull/9545.

Props kraftbj, jonsurrell, westonruter.
Fixes #63854.

File:

• trunk/tests/phpunit/tests/html-api/wpHtmlTagProcessor.php (modified) (1 diff)

trunk/tests/phpunit/tests/html-api/wpHtmlTagProcessor.php

@@ -71 +71 @@
             $this->assertFalse( $processor->has_self_closing_flag(), 'Found the self-closing tag when it was absent.' );
         }
+    }
+
+    /**
+     * @ticket 63854
+     *
+     * @covers WP_HTML_Tag_Processor::__construct
+     * @expectedIncorrectUsage WP_HTML_Tag_Processor::__construct
+     */
+    public function test_constructor_validates_html_parameter() {
+        // Test that passing null triggers _doing_it_wrong and sets HTML to empty string.
+        $processor = new WP_HTML_Tag_Processor( null );
+
+        // Verify that the HTML was set to an empty string.
+        $this->assertSame( '', $processor->get_updated_html(), 'HTML should be set to empty string when null is passed' );
+
+        // Verify that next_token() works without errors (indicating the processor is in a valid state).
+        $this->assertFalse( $processor->next_token(), 'next_token() should work without errors when HTML is empty string' );
     }