' . htmlspecialchars_decode($input, ENT_QUOTES | ENT_HTML5) . '
';
- } else {
- $safeInput = htmlspecialchars_decode($input, ENT_QUOTES | ENT_HTML5);
- }
-
- $dom->loadHTML(
- mb_convert_encoding($safeInput, 'HTML-ENTITIES', 'UTF-8'),
- LIBXML_HTML_NOIMPLIED | LIBXML_HTML_NODEFDTD
- );
-
- return $dom;
- }
-
- protected function cleanDomOutput(\DOMDocument $dom): string
- {
- // Save without XML declaration and DOCTYPE
- $output = $dom->saveHTML();
-
- if (false === $output) {
- return '';
- }
-
- // Remove DOCTYPE, html and body tags
- $output = preg_replace(
- [
- '/^\n?/',
- '/<\/?html[^>]*>\n?/',
- '/<\/?body[^>]*>\n?/',
- ],
- '',
- $output
- );
-
- return trim($output);
- }
-}
diff --git a/src/Trait/HtmlCleanerTrait.php b/src/Trait/HtmlCleanerTrait.php
deleted file mode 100644
index d90835c..0000000
--- a/src/Trait/HtmlCleanerTrait.php
+++ /dev/null
@@ -1,31 +0,0 @@
-]*>(.*?)<\/script>/is', '', $input);
- $input = preg_replace('/\bon\w+\s*=\s*"[^"]*"/i', '', $input);
-
- return $input;
- }
-
- protected function removeComments(string $input): string
- {
- // Regular expression that matches the innermost HTML comments first
- while (preg_match('//', $input)) {
- $input = preg_replace('//', '', $input);
- }
-
- return $input;
- }
-
- protected function removeStyle(string $input): string
- {
- return preg_replace('#This is a test.
'; - - $this->sanitizer->configure([ - 'allowedTags' => ['p'], - ]); - - // Nota: Agora esperamos um único espaço após a remoção do script - $expected = 'This is a test.
'; - $this->assertEquals($expected, $this->sanitizer->process($input)); - } - - public function testProcessPreservesContentOfRemovedTags(): void - { - $input = 'This is a nested text
';
-
- $this->sanitizer->configure([
- 'allowedTags' => [],
- ]);
-
- $expected = 'This is a nested text';
- $this->assertEquals($expected, $this->sanitizer->process($input));
- }
-
- public function testProcessRemovesDisallowedAttributes(): void
- {
- $input = 'Link';
-
- $this->sanitizer->configure([
- 'allowedTags' => ['a'],
- 'allowedAttributes' => ['href' => ['a']],
- ]);
-
- $expected = 'Link';
- $this->assertEquals($expected, $this->sanitizer->process($input));
- }
-
- public function testProcessRemovesHtmlComments(): void
- {
- $input = 'This is a test.
'; - - $this->sanitizer->configure([ - 'allowedTags' => ['p'], - ]); - - // Nota: Agora esperamos um único espaço após a remoção do comentário - $expected = 'This is a test.
'; - $this->assertEquals($expected, $this->sanitizer->process($input)); - } - - public function testConfigureChangesAllowedTags(): void - { - $this->sanitizer->configure([ - 'allowedTags' => ['p', 'strong'], - ]); - - $input = 'This is bold and italic.
'; - $expected = 'This is bold and italic.
'; - - $this->assertEquals($expected, $this->sanitizer->process($input)); - } - - // TODO: resolve fix - // public function testConfigureChangesAllowedAttributes(): void - // { - // $this->sanitizer->configure([ - // 'allowedTags' => ['p'], - // 'allowedAttributes' => ['class' => ['p']], - // ]); - - // $input = 'This is a test.
'; - - // $expected = 'This is a test.
'; - - // $this->assertEquals($expected, $this->sanitizer->process($input)); - // } - - public function testRemovesTagButPreservesAttributeContent(): void - { - $input = 'Title
Text with link
'; - - $this->sanitizer->configure([ - 'allowedTags' => ['p'], - ]); - - $expected = 'TitleText with link
'; - $this->assertEquals($expected, $this->sanitizer->process($input)); - } - - public function testProcessHandlesNonStringInput(): void - { - $this->expectException(SanitizationException::class); - $this->sanitizer->process(123); - } - - /** - * @doesNotPerformAssertions - */ - public function testProcessHandlesInvalidHtml(): void - { - // Removendo este teste por enquanto, pois o comportamento pode variar - // dependendo da versão do libxml e da configuração do sistema - } - - public function testProcessPreservesNestedStructure(): void - { - $input = 'First
- Item 1
- Item 2
- Item 1
- Item 2
Content
&test
';
- $expected = '<div class="test">&test</div>';
-
- $this->assertSame($expected, $this->sanitizer->process($input));
- }
-
- public function testHandleNonStringInput(): void
- {
- $this->expectException(SanitizationException::class);
- $this->sanitizer->process(123);
- }
-
- public static function htmlSpecialCharsProvider(): array
- {
- return [
- 'basic html' => [
- 'Test
', - '<p>Test</p>', - ], - 'attributes' => [ - 'Content
',
- '<div class="test">Content</div>',
- ],
- 'special chars' => [
- '& < > " \'',
- '& < > " '',
- ],
- 'already encoded' => [
- '& < >',
- '& < >',
- ],
- 'mixed content' => [
- 'Test & Demo
', - '<p class="test">Test & Demo</p>', - ], - ]; - } -} diff --git a/tests/Processor/Input/NormalizeLineBreaksSanitizerTest.php b/tests/Processor/Input/NormalizeLineBreaksSanitizerTest.php deleted file mode 100644 index bf22613..0000000 --- a/tests/Processor/Input/NormalizeLineBreaksSanitizerTest.php +++ /dev/null @@ -1,81 +0,0 @@ -sanitizer = new NormalizeLineBreaksSanitizer(); - } - - /** - * @dataProvider lineBreaksProvider - */ - public static function testBasicNormalization(string $input, string $expected): void - { - $sanitizer = new NormalizeLineBreaksSanitizer(); - self::assertSame($expected, $sanitizer->process($input)); - } - - public function testCustomLineEnding(): void - { - $this->sanitizer->configure(['lineEnding' => 'windows']); - $input = "Line1\nLine2\rLine3\r\nLine4"; - $expected = "Line1\r\nLine2\r\nLine3\r\nLine4"; - - $this->assertSame($expected, $this->sanitizer->process($input)); - } - - public function testInvalidLineEndingConfiguration(): void - { - $this->sanitizer->configure(['lineEnding' => 'invalid']); - $input = "Line1\nLine2"; - - $this->assertSame("Line1\nLine2", $this->sanitizer->process($input)); - } - - public function testHandleNonStringInput(): void - { - $this->expectException(SanitizationException::class); - $this->sanitizer->process(123); - } - - public static function lineBreaksProvider(): array - { - return [ - 'unix line endings' => [ - "Line1\nLine2\nLine3", - "Line1\nLine2\nLine3", - ], - 'windows line endings' => [ - "Line1\r\nLine2\r\nLine3", - "Line1\nLine2\nLine3", - ], - 'mac line endings' => [ - "Line1\rLine2\rLine3", - "Line1\nLine2\nLine3", - ], - 'mixed line endings' => [ - "Line1\rLine2\r\nLine3\nLine4", - "Line1\nLine2\nLine3\nLine4", - ], - 'no line endings' => [ - 'SingleLine', - 'SingleLine', - ], - 'multiple consecutive line endings' => [ - "Line1\n\n\nLine2", - "Line1\n\n\nLine2", - ], - ]; - } -} diff --git a/tests/Processor/Input/NumericSanitizerTest.php b/tests/Processor/Input/NumericSanitizerTest.php deleted file mode 100644 index be19208..0000000 --- a/tests/Processor/Input/NumericSanitizerTest.php +++ /dev/null @@ -1,99 +0,0 @@ -sanitizer = new NumericSanitizer(); - } - - /** - * @dataProvider numericDataProvider - */ - public static function testNumericSanitization(string $input, array $config, string $expected): void - { - $sanitizer = new NumericSanitizer(); - $sanitizer->configure($config); - self::assertSame($expected, $sanitizer->process($input)); - } - - public function testCustomDecimalSeparator(): void - { - $this->sanitizer->configure([ - 'allowDecimal' => true, - 'decimalSeparator' => ',', - ]); - - $input = '123,45'; - $expected = '123,45'; - - $this->assertSame($expected, $this->sanitizer->process($input)); - } - - public function testHandleNonStringInput(): void - { - $this->expectException(SanitizationException::class); - $this->sanitizer->process(123); - } - - public static function numericDataProvider(): array - { - return [ - 'basic integer' => [ - '123', - [], - '123', - ], - 'with decimals allowed' => [ - '123.45', - ['allowDecimal' => true], - '123.45', - ], - 'with decimals disabled' => [ - '123.45', - ['allowDecimal' => false], - '12345', - ], - 'negative number allowed' => [ - '-123.45', - ['allowDecimal' => true, 'allowNegative' => true], - '-123.45', - ], - 'negative number disabled' => [ - '-123.45', - ['allowDecimal' => true, 'allowNegative' => false], - '123.45', - ], - 'mixed characters' => [ - 'abc123.45xyz', - ['allowDecimal' => true], - '123.45', - ], - 'multiple decimal points' => [ - '123.45.67', - ['allowDecimal' => true], - '123.4567', - ], - 'only non-numeric' => [ - 'abc', - [], - '', - ], - 'empty string' => [ - '', - [], - '', - ], - ]; - } -} diff --git a/tests/Processor/Input/PhoneSanitizerTest.php b/tests/Processor/Input/PhoneSanitizerTest.php deleted file mode 100644 index 216360a..0000000 --- a/tests/Processor/Input/PhoneSanitizerTest.php +++ /dev/null @@ -1,107 +0,0 @@ -sanitizer = new PhoneSanitizer(); - } - - /** - * @dataProvider phoneDataProvider - */ - public static function testPhoneSanitization(string $input, array $config, string $expected): void - { - $sanitizer = new PhoneSanitizer(); - $sanitizer->configure($config); - self::assertSame($expected, $sanitizer->process($input)); - } - - public function testHandleNonStringInput(): void - { - $this->expectException(SanitizationException::class); - $this->sanitizer->process(123); - } - - public static function phoneDataProvider(): array - { - return [ - 'basic number without format' => [ - '(11) 99999-9999', - [], - '11999999999', - ], - 'mixed characters' => [ - 'Tel: +55 (11) 99999-9999', - [], - '5511999999999', - ], - 'with special characters' => [ - '11.99999-9999', - [], - '11999999999', - ], - 'with optional formatting' => [ - '11999999999', - [ - 'applyFormat' => true, - 'format' => '(##) #####-####', - ], - '(11) 99999-9999', - ], - 'international with format' => [ - '5511999999999', - [ - 'applyFormat' => true, - 'format' => '+## (##) #####-####', - ], - '+55 (11) 99999-9999', - ], - 'partial number' => [ - '11999', - [ - 'applyFormat' => true, - 'format' => '(##) #####-####', - ], - '11999', - ], - 'custom format' => [ - '11999999999', - [ - 'applyFormat' => true, - 'format' => '## # ####-####', - ], - '11 9 9999-9999', - ], - 'empty string' => [ - '', - [], - '', - ], - 'only non-numeric' => [ - '(abc) def-ghij', - [], - '', - ], - 'with custom placeholder' => [ - '11999999999', - [ - 'applyFormat' => true, - 'format' => '(**)_*****-****', - 'placeholder' => '*', - ], - '(11)_99999-9999', - ], - ]; - } -} diff --git a/tests/Processor/Input/StripTagsSanitizerTest.php b/tests/Processor/Input/StripTagsSanitizerTest.php deleted file mode 100644 index aa2935d..0000000 --- a/tests/Processor/Input/StripTagsSanitizerTest.php +++ /dev/null @@ -1,96 +0,0 @@ -sanitizer = new StripTagsSanitizer(); - } - - /** - * @dataProvider stripTagsProvider - */ - public function testBasicStripping(string $input, array $config, string $expected): void - { - $this->sanitizer->configure($config); - self::assertSame($expected, $this->sanitizer->process($input)); - } - - public function testWithAllowedTagsAndAttributes(): void - { - $this->sanitizer->configure([ - 'allowedTags' => ['p', 'div'], - 'keepSafeAttributes' => true, - 'safeAttributes' => ['class', 'id'], - ]); - - $input = 'Text
'; - $expected = 'Text
'; - - $this->assertSame($expected, $this->sanitizer->process($input)); - } - - public function testWithoutSafeAttributes(): void - { - $this->sanitizer->configure([ - 'allowedTags' => ['p'], - 'keepSafeAttributes' => false, - ]); - - $input = 'Text
'; - $expected = 'Text
'; - - $this->assertSame($expected, $this->sanitizer->process($input)); - } - - public function testHandleNonStringInput(): void - { - $this->expectException(SanitizationException::class); - $this->sanitizer->process(123); - } - - public static function stripTagsProvider(): array - { - return [ - 'no tags' => [ - 'Plain text content', - [], - 'Plain text content', - ], - 'simple tags' => [ - 'Paragraph
Division
',
- [],
- 'ParagraphDivision',
- ],
- 'nested tags' => [
- 'Nested content
Nested content
',
- ],
- 'mixed content' => [
- 'Text
', - ['allowedTags' => ['p']], - 'Text
', - ], - 'with attributes' => [ - 'Text
', - [ - 'allowedTags' => ['p'], - 'keepSafeAttributes' => true, - 'safeAttributes' => ['class'], - ], - 'Text
', - ], - ]; - } -} diff --git a/tests/Processor/Input/TrimSanitizerTest.php b/tests/Processor/Input/TrimSanitizerTest.php deleted file mode 100644 index f50545d..0000000 --- a/tests/Processor/Input/TrimSanitizerTest.php +++ /dev/null @@ -1,111 +0,0 @@ -sanitizer = new TrimSanitizer(); - } - - /** - * @dataProvider trimDataProvider - */ - public static function testBasicTrim(string $input, array $config, string $expected): void - { - $sanitizer = new TrimSanitizer(); - $sanitizer->configure($config); - self::assertSame($expected, $sanitizer->process($input)); - } - - public function testCustomCharacterMask(): void - { - $this->sanitizer->configure(['characterMask' => 'xyz']); - $this->assertSame('123', $this->sanitizer->process('xyz123xxxyz')); - - $this->sanitizer->configure(['characterMask' => 'ab']); - $this->assertSame('123', $this->sanitizer->process('aabb123bbaa')); - - $this->sanitizer->configure(['characterMask' => '_']); - $this->assertSame('abc-123', $this->sanitizer->process('__abc-123__')); - } - - public function testSelectiveTrimming(): void - { - // Test left trim only - $sanitizer = new TrimSanitizer(); - $sanitizer->configure(['trimRight' => false]); - $this->assertSame('test ', $sanitizer->process(' test ')); - - // Test right trim only - $sanitizer = new TrimSanitizer(); - $sanitizer->configure(['trimLeft' => false]); - $this->assertSame(' test', $sanitizer->process(' test ')); - - // Test no trimming - $sanitizer = new TrimSanitizer(); - $sanitizer->configure(['trimLeft' => false, 'trimRight' => false]); - $this->assertSame(' test ', $sanitizer->process(' test ')); - } - - public function testHandleNonStringInput(): void - { - $this->expectException(SanitizationException::class); - $this->sanitizer->process(123); - } - - public static function trimDataProvider(): array - { - return [ - 'basic spaces' => [ - ' test ', - [], - 'test', - ], - 'tabs and newlines' => [ - "\t\ttest\n\n", - [], - 'test', - ], - 'mixed whitespace' => [ - " \t\n\r\0\x0Btest \t\n\r\0\x0B", - [], - 'test', - ], - 'custom mask' => [ - '...test...', - ['characterMask' => '.'], - 'test', - ], - 'left trim only' => [ - ' test ', - ['trimRight' => false], - 'test ', - ], - 'right trim only' => [ - ' test ', - ['trimLeft' => false], - ' test', - ], - 'no trim' => [ - ' test ', - ['trimLeft' => false, 'trimRight' => false], - ' test ', - ], - 'preserve characters in middle' => [ - 'xyz123xxxyz', - ['characterMask' => 'xyz'], - '123', - ], - ]; - } -} diff --git a/tests/Processor/Input/UrlSanitizerTest.php b/tests/Processor/Input/UrlSanitizerTest.php deleted file mode 100644 index 5ef32ab..0000000 --- a/tests/Processor/Input/UrlSanitizerTest.php +++ /dev/null @@ -1,89 +0,0 @@ -sanitizer = new UrlSanitizer(); - } - - /** - * @dataProvider urlDataProvider - */ - public static function testUrlSanitization(string $input, array $config, string $expected): void - { - $sanitizer = new UrlSanitizer(); - $sanitizer->configure($config); - self::assertSame($expected, $sanitizer->process($input)); - } - - public function testCustomProtocol(): void - { - $this->sanitizer->configure([ - 'enforceProtocol' => true, - 'defaultProtocol' => 'http://', - ]); - - $input = 'example.com'; - $expected = 'http://example.com'; - - $this->assertSame($expected, $this->sanitizer->process($input)); - } - - public function testHandleNonStringInput(): void - { - $this->expectException(SanitizationException::class); - $this->sanitizer->process(123); - } - - public static function urlDataProvider(): array - { - return [ - 'basic url' => [ - 'example.com', - ['enforceProtocol' => true], - 'https://example.com', - ], - 'with protocol' => [ - 'https://example.com', - ['enforceProtocol' => true], - 'https://example.com', - ], - 'multiple slashes' => [ - 'https://example.com//path///to//resource', - [], - 'https://example.com/path/to/resource', - ], - 'with trailing slash' => [ - 'https://example.com/', - ['removeTrailingSlash' => true], - 'https://example.com', - ], - 'keep trailing slash' => [ - 'https://example.com/', - ['removeTrailingSlash' => false], - 'https://example.com/', - ], - 'no protocol enforcement' => [ - 'example.com', - ['enforceProtocol' => false], - 'example.com', - ], - 'with spaces' => [ - ' https://example.com ', - [], - 'https://example.com', - ], - ]; - } -} diff --git a/tests/Processor/Security/FilenameSanitizerTest.php b/tests/Processor/Security/FilenameSanitizerTest.php deleted file mode 100644 index 4b94183..0000000 --- a/tests/Processor/Security/FilenameSanitizerTest.php +++ /dev/null @@ -1,108 +0,0 @@ -sanitizer = new FilenameSanitizer(); - } - - public function testBasicFilenameSanitization(): void - { - $input = 'file@name!.txt'; - $expected = 'file_name.txt'; - $this->assertSame($expected, $this->sanitizer->process($input)); - } - - public function testSanitizationWithoutExtension(): void - { - $this->sanitizer->configure(['preserveExtension' => false]); - $input = 'file@name!.txt'; - $expected = 'file_name_txt'; - $this->assertSame($expected, $this->sanitizer->process($input)); - } - - public function testCustomReplacementCharacter(): void - { - $this->sanitizer->configure(['replacement' => '-']); - $input = 'file@name!.txt'; - $expected = 'file-name.txt'; - $this->assertSame($expected, $this->sanitizer->process($input)); - } - - public function testInvalidReplacementCharacter(): void - { - $this->sanitizer->configure(['replacement' => '*']); - $input = 'file@name!.txt'; - $expected = 'file_name.txt'; - $this->assertSame($expected, $this->sanitizer->process($input)); - } - - public function testAllowedCharacters(): void - { - $this->sanitizer->configure(['allowedChars' => ['a-z', 'A-Z', '0-9']]); - $input = 'file_name-123.txt'; - $expected = 'file_name_123.txt'; - $this->assertSame($expected, $this->sanitizer->process($input)); - } - - public function testCustomAllowedCharacters(): void - { - $this->sanitizer->configure(['allowedChars' => ['a-z', 'A-Z', '0-9', '_']]); - $input = 'file@name!.txt'; - $expected = 'file_name.txt'; - $this->assertSame($expected, $this->sanitizer->process($input)); - } - - public function testEmptyFilenameReturnsEmptyString(): void - { - $input = ''; - $expected = ''; - $this->assertSame($expected, $this->sanitizer->process($input)); - } - - public function testFilenameWithoutExtension(): void - { - $input = 'filename@!with_no_extension'; - $expected = 'filename_with_no_extension'; - $this->assertSame($expected, $this->sanitizer->process($input)); - } - - public function testFilenameWithMultipleExtensions(): void - { - $input = 'file.name@!.tar.gz'; - $expected = 'file.name.tar.gz'; - $this->assertSame($expected, $this->sanitizer->process($input)); - } - - public function testNonStringInputThrowsException(): void - { - $this->expectException(SanitizationException::class); - $this->expectExceptionMessage('Input must be a string'); - $this->sanitizer->process(12345); - } - - public function testObjectInputThrowsException(): void - { - $this->expectException(SanitizationException::class); - $this->expectExceptionMessage('Input must be a string'); - $this->sanitizer->process(new \stdClass()); - } - - public function testArrayInputThrowsException(): void - { - $this->expectException(SanitizationException::class); - $this->expectExceptionMessage('Input must be a string'); - $this->sanitizer->process(['invalid', 'input']); - } -} diff --git a/tests/Processor/Security/SqlInjectionSanitizerTest.php b/tests/Processor/Security/SqlInjectionSanitizerTest.php deleted file mode 100644 index 597523a..0000000 --- a/tests/Processor/Security/SqlInjectionSanitizerTest.php +++ /dev/null @@ -1,103 +0,0 @@ -sanitizer = new SqlInjectionSanitizer(); - } - - public function testProcessWithSafeInput(): void - { - $input = 'Safe input without SQL keywords'; - $expected = 'Safe input without SQL keywords'; - - $this->assertSame($expected, $this->sanitizer->process($input)); - } - - public function testProcessWithSqlInjectionAttempt(): void - { - $input = "SELECT * FROM users WHERE name='admin'--"; - $expected = "SELECT * FROM users WHERE name=\\'admin\\'"; - - $this->assertSame($expected, $this->sanitizer->process($input)); - } - - public function testProcessWithCustomEscapeMap(): void - { - $customSanitizer = new SqlInjectionSanitizer(); - $customSanitizer->configure([ - 'escapeMap' => ["'" => "''", '\\' => '\\\\'], - ]); - - $input = "O'Reilly"; - $expected = "O''Reilly"; - - $this->assertSame($expected, $customSanitizer->process($input)); - } - - public function testProcessWithEscapedCharacters(): void - { - $input = "This contains a null byte: \x00 and a quote: '"; - $expected = "This contains a null byte: \\0 and a quote: \\'"; - - $this->assertSame($expected, $this->sanitizer->process($input)); - } - - public function testProcessWithMultiLineComment(): void - { - $input = 'SELECT * FROM users /* hidden comment */ WHERE id = 1;'; - $expected = 'SELECT * FROM users WHERE id = 1'; - - $this->assertSame($expected, $this->sanitizer->process($input)); - } - - public function testProcessWithSemicolons(): void - { - $input = 'DROP TABLE users;'; - $expected = 'DROP TABLE users'; - - $this->assertSame($expected, $this->sanitizer->process($input)); - } - - public function testProcessWithNormalizedWhitespace(): void - { - $input = 'SELECT * FROM users'; - $expected = 'SELECT * FROM users'; - - $this->assertSame($expected, $this->sanitizer->process($input)); - } - - public function testRemoveSuspiciousPatterns(): void - { - $reflection = new \ReflectionClass(SqlInjectionSanitizer::class); - $method = $reflection->getMethod('removeSuspiciousPatterns'); - $method->setAccessible(true); - - $input = 'SELECT * FROM users WHERE id = 1; -- malicious comment'; - $expected = 'SELECT * FROM users WHERE id = 1 '; - - $this->assertSame($expected, $method->invoke($this->sanitizer, $input)); - } - - public function testEscapeString(): void - { - $reflection = new \ReflectionClass(SqlInjectionSanitizer::class); - $method = $reflection->getMethod('escapeString'); - $method->setAccessible(true); - - $input = "This contains a null byte: \x00 and a quote: '"; - $expected = "This contains a null byte: \\0 and a quote: \\'"; - - $this->assertSame($expected, $method->invoke($this->sanitizer, $input)); - } -} diff --git a/tests/Processor/Security/XssSanitizerTest.php b/tests/Processor/Security/XssSanitizerTest.php deleted file mode 100644 index 13ef0e3..0000000 --- a/tests/Processor/Security/XssSanitizerTest.php +++ /dev/null @@ -1,20 +0,0 @@ -assertEquals( - '<script>alert("xss")</script>', - $sanitizer->process('') - ); - } -} diff --git a/tests/SanitizerTest.php b/tests/SanitizerTest.php deleted file mode 100644 index 3e8feb0..0000000 --- a/tests/SanitizerTest.php +++ /dev/null @@ -1,193 +0,0 @@ -registry = $this->createMock(ProcessorRegistry::class); - $this->sanitizer = new Sanitizer($this->registry); - } - - private function createProcessorMock(mixed $input, mixed $output): Processor|MockObject - { - $processor = $this->createMock(Processor::class); - $processor->method('process') - ->with($input) - ->willReturn($output); - - return $processor; - } - - public function testSanitizeProcessesObjectProperties(): void - { - $testObject = new class { - #[Sanitize(processors: ['trim'])] - public string $name = ' Walmir Silva '; - - #[Sanitize(processors: ['email'])] - public string $email = 'walmir.silva@example..com'; - }; - - // Configure TrimSanitizer mock to actually perform the trim operation - $trimProcessor = $this->getMockBuilder(Processor::class) - ->getMock(); - - $trimProcessor->method('process') - ->willReturnCallback(function ($input) { - return trim($input); // Execute actual trim - }); - - $emailProcessor = $this->createMock(Processor::class); - $emailProcessor->method('process') - ->with('walmir.silva@example..com') - ->willReturn('walmir.silva@example.com'); - - // Ensure registry returns processors correctly - $this->registry->method('get') - ->willReturnCallback(function ($type, $name) use ($trimProcessor, $emailProcessor) { - if ('trim' === $name) { - return $trimProcessor; - } - if ('email' === $name) { - return $emailProcessor; - } - - return null; - }); - - $result = $this->sanitizer->sanitize($testObject); - - $this->assertSame('Walmir Silva', $testObject->name); - $this->assertSame('walmir.silva@example.com', $testObject->email); - $this->assertInstanceOf(SanitizationResult::class, $result); - } - - public function testSanitizeHandlesNonProcessableAttributes(): void - { - $testObject = new class { - #[Sanitize(processors: ['trim'])] - public string $processable = ' trim me '; - - public string $nonProcessable = 'leave me alone'; - }; - - $trimProcessor = $this->createProcessorMock( - ' trim me ', - 'trim me' - ); - - $this->registry->method('get') - ->with('sanitizer', 'trim') - ->willReturn($trimProcessor); - - $result = $this->sanitizer->sanitize($testObject); - - $this->assertSame('trim me', $testObject->processable); - $this->assertSame('leave me alone', $testObject->nonProcessable); - $this->assertInstanceOf(SanitizationResult::class, $result); - } - - public function testSanitizeHandlesExceptionsAndUsesFallbackValue(): void - { - $testObject = new class { - #[Sanitize(processors: ['problematic'], messages: ['fallback' => 'Processing failed'])] - public string $problematic = 'cause problem'; - }; - - $problematicProcessor = $this->createMock(Processor::class); - $problematicProcessor->method('process') - ->willThrowException(new \Exception('Processing failed')); - - $this->registry->method('get') - ->with('sanitizer', 'problematic') - ->willReturn($problematicProcessor); - - $result = $this->sanitizer->sanitize($testObject); - - $this->assertSame('cause problem', $testObject->problematic); - $this->assertInstanceOf(SanitizationResult::class, $result); - } - - public function testSanitizeHandlesPrivateAndProtectedProperties(): void - { - $testObject = new class { - #[Sanitize(processors: ['trim'])] - private string $privateProp = ' private '; - - #[Sanitize(processors: ['trim'])] - protected string $protectedProp = ' protected '; - - public function getPrivateProp(): string - { - return $this->privateProp; - } - - public function getProtectedProp(): string - { - return $this->protectedProp; - } - }; - - // Create a single trim processor for both properties - $trimProcessor = $this->createMock(Processor::class); - $trimProcessor->method('process') - ->willReturnMap([ - [' private ', 'private'], - [' protected ', 'protected'], - ]); - - $this->registry->method('get') - ->with('sanitizer', 'trim') - ->willReturn($trimProcessor); - - $result = $this->sanitizer->sanitize($testObject); - - $this->assertSame('private', $testObject->getPrivateProp()); - $this->assertSame('protected', $testObject->getProtectedProp()); - $this->assertInstanceOf(SanitizationResult::class, $result); - } - - public function testSanitizeHandlesMultipleProcessorsForSingleProperty(): void - { - $testObject = new class { - #[Sanitize(processors: ['trim', 'uppercase'])] - public string $multiProcessed = ' hello world '; - }; - - $trimProcessor = $this->createProcessorMock( - ' hello world ', - 'hello world' - ); - - $uppercaseProcessor = $this->createProcessorMock( - 'hello world', - 'HELLO WORLD' - ); - - $this->registry->method('get') - ->willReturnMap([ - ['sanitizer', 'trim', $trimProcessor], - ['sanitizer', 'uppercase', $uppercaseProcessor], - ]); - - $result = $this->sanitizer->sanitize($testObject); - - $this->assertSame('HELLO WORLD', $testObject->multiProcessed); - $this->assertInstanceOf(SanitizationResult::class, $result); - } -} diff --git a/tests/Trait/CaseTransformerTraitTest.php b/tests/Trait/CaseTransformerTraitTest.php deleted file mode 100644 index d44fa92..0000000 --- a/tests/Trait/CaseTransformerTraitTest.php +++ /dev/null @@ -1,96 +0,0 @@ -traitObject = new class { - use CaseTransformerTrait; - - public function callToLowerCase(string $input): string - { - return $this->toLowerCase($input); - } - - public function callToUpperCase(string $input): string - { - return $this->toUpperCase($input); - } - - public function callToCamelCase(string $input): string - { - return $this->toCamelCase($input); - } - }; - } - - /** - * @dataProvider toLowerCaseProvider - */ - public function testToLowerCase(string $input, string $expected): void - { - $this->assertSame($expected, $this->traitObject->callToLowerCase($input)); - } - - /** - * @dataProvider toUpperCaseProvider - */ - public function testToUpperCase(string $input, string $expected): void - { - $this->assertSame($expected, $this->traitObject->callToUpperCase($input)); - } - - /** - * @dataProvider toCamelCaseProvider - */ - public function testToCamelCase(string $input, string $expected): void - { - $this->assertSame($expected, $this->traitObject->callToCamelCase($input)); - } - - public static function toLowerCaseProvider(): array - { - return [ - 'mixed case' => ['HelloWorld', 'helloworld'], - 'already lowercase' => ['hello', 'hello'], - 'all uppercase' => ['HELLO', 'hello'], - 'with numbers' => ['Hello123World', 'hello123world'], - 'with special chars' => ['Hello@World', 'hello@world'], - 'empty string' => ['', ''], - ]; - } - - public static function toUpperCaseProvider(): array - { - return [ - 'mixed case' => ['HelloWorld', 'HELLOWORLD'], - 'already uppercase' => ['HELLO', 'HELLO'], - 'all lowercase' => ['hello', 'HELLO'], - 'with numbers' => ['Hello123World', 'HELLO123WORLD'], - 'with special chars' => ['Hello@World', 'HELLO@WORLD'], - 'empty string' => ['', ''], - ]; - } - - public static function toCamelCaseProvider(): array - { - return [ - 'simple underscored' => ['hello_world', 'helloWorld'], - 'multiple underscores' => ['hello_beautiful_world', 'helloBeautifulWorld'], - 'already camel case' => ['helloWorld', 'helloWorld'], - 'uppercase' => ['HELLO_WORLD', 'helloWorld'], - 'with numbers' => ['hello_123_world', 'hello123World'], - 'empty string' => ['', ''], - 'single word' => ['hello', 'hello'], - ]; - } -} diff --git a/tests/Trait/CharacterFilterTraitTest.php b/tests/Trait/CharacterFilterTraitTest.php deleted file mode 100644 index 65bb5e3..0000000 --- a/tests/Trait/CharacterFilterTraitTest.php +++ /dev/null @@ -1,71 +0,0 @@ -traitObject = new class { - use CharacterFilterTrait; - - public function callFilterAllowedCharacters(string $input, string $allowed): string - { - return $this->filterAllowedCharacters($input, $allowed); - } - - public function callKeepOnlyAlphanumeric(string $input, array $additionalChars = []): string - { - return $this->keepOnlyAlphanumeric($input, $additionalChars); - } - }; - } - - /** - * @dataProvider filterAllowedCharactersProvider - */ - public function testFilterAllowedCharacters(string $input, string $allowed, string $expected): void - { - $this->assertSame($expected, $this->traitObject->callFilterAllowedCharacters($input, $allowed)); - } - - /** - * @dataProvider keepOnlyAlphanumericProvider - */ - public function testKeepOnlyAlphanumeric(string $input, array $additionalChars, string $expected): void - { - $this->assertSame($expected, $this->traitObject->callKeepOnlyAlphanumeric($input, $additionalChars)); - } - - public static function filterAllowedCharactersProvider(): array - { - return [ - 'basic filtering' => ['hello123!@#', 'a-z', 'hello'], - 'numbers only' => ['hello123!@#', '0-9', '123'], - 'mixed allowed chars' => ['hello123!@#', 'a-z0-9', 'hello123'], - 'special chars' => ['hello@world!', '@!', '@!'], - 'empty string' => ['', 'a-z', ''], - 'no allowed chars' => ['hello123', 'x-z', ''], - 'with spaces' => ['hello world', 'a-z ', 'hello world'], - ]; - } - - public static function keepOnlyAlphanumericProvider(): array - { - return [ - 'basic alphanumeric' => ['hello123!@#', [], 'hello123'], - 'with dash' => ['hello-123', ['-'], 'hello-123'], - 'with multiple chars' => ['hello@world!123', ['@', '!'], 'hello@world!123'], - 'empty string' => ['', [], ''], - 'only special chars' => ['!@#$%', [], ''], - 'with spaces' => ['hello world', [' '], 'hello world'], - ]; - } -} diff --git a/tests/Trait/CharacterReplacementTraitTest.php b/tests/Trait/CharacterReplacementTraitTest.php deleted file mode 100644 index d0937e3..0000000 --- a/tests/Trait/CharacterReplacementTraitTest.php +++ /dev/null @@ -1,95 +0,0 @@ -traitObject = new class { - use CharacterReplacementTrait; - - public function callReplaceConsecutiveCharacters(string $input, string $char, string $replacement): string - { - return $this->replaceConsecutiveCharacters($input, $char, $replacement); - } - - public function callReplaceMultipleCharacters(string $input, array $replacements): string - { - return $this->replaceMultipleCharacters($input, $replacements); - } - }; - } - - /** - * @dataProvider replaceConsecutiveCharactersProvider - */ - public function testReplaceConsecutiveCharacters(string $input, string $char, string $replacement, string $expected): void - { - $this->assertSame( - $expected, - $this->traitObject->callReplaceConsecutiveCharacters($input, $char, $replacement) - ); - } - - /** - * @dataProvider replaceMultipleCharactersProvider - */ - public function testReplaceMultipleCharacters(string $input, array $replacements, string $expected): void - { - $this->assertSame( - $expected, - $this->traitObject->callReplaceMultipleCharacters($input, $replacements) - ); - } - - public static function replaceConsecutiveCharactersProvider(): array - { - return [ - 'basic replacement' => ['hello....world', '.', '.', 'hello.world'], - 'multiple occurrences' => ['hi....there....now', '.', '.', 'hi.there.now'], - 'no consecutive chars' => ['hello.world', '.', '.', 'hello.world'], - 'empty string' => ['', '.', '.', ''], - 'special characters' => ['test***case', '*', '_', 'test_case'], - 'with spaces' => ['hello world', ' ', ' ', 'hello world'], - ]; - } - - public static function replaceMultipleCharactersProvider(): array - { - return [ - 'basic replacements' => [ - 'hello world', - ['hello' => 'hi', 'world' => 'earth'], - 'hi earth', - ], - 'no matches' => [ - 'test case', - ['foo' => 'bar'], - 'test case', - ], - 'empty string' => [ - '', - ['a' => 'b'], - '', - ], - 'special characters' => [ - 'test@case#example', - ['@' => 'at', '#' => 'hash'], - 'testatcasehashexample', - ], - 'overlapping replacements' => [ - 'hello', - ['hell' => 'heaven', 'llo' => 'goodbye'], - 'heaveno', - ], - ]; - } -} diff --git a/tests/Trait/DomSanitizerTraitTest.php b/tests/Trait/DomSanitizerTraitTest.php deleted file mode 100644 index db68b9c..0000000 --- a/tests/Trait/DomSanitizerTraitTest.php +++ /dev/null @@ -1,88 +0,0 @@ -traitObject = new class { - use DomSanitizerTrait; - - public function callCreateDom(string $input, bool $wrapInRoot = true): \DOMDocument - { - return $this->createDom($input, $wrapInRoot); - } - - public function callCleanDomOutput(\DOMDocument $dom): string - { - return $this->cleanDomOutput($dom); - } - }; - } - - public function testCreateDomWithWrapping(): void - { - $input = 'Test content
'; - $dom = $this->traitObject->callCreateDom($input); - - $this->assertInstanceOf(\DOMDocument::class, $dom); - $root = $dom->getElementById('temp-root'); - $this->assertNotNull($root); - $this->assertTrue($root->hasChildNodes()); - } - - public function testCreateDomWithoutWrapping(): void - { - $input = 'Test content
'; - $dom = $this->traitObject->callCreateDom($input, false); - - $this->assertInstanceOf(\DOMDocument::class, $dom); - $root = $dom->getElementById('temp-root'); - $this->assertNull($root); - } - - public function testCleanDomOutput(): void - { - $dom = new \DOMDocument(); - $dom->loadHTML('Test
'); - - $output = $this->traitObject->callCleanDomOutput($dom); - $this->assertSame('Test
', $output); - } - - public function testCreateDomWithSpecialCharacters(): void - { - $input = 'Test & content
'; - $dom = $this->traitObject->callCreateDom($input); - - $this->assertInstanceOf(\DOMDocument::class, $dom); - $html = $dom->saveHTML(); - $this->assertStringContainsString('Test & content', $html); - } - - public function testCreateDomWithNestedElements(): void - { - $input = 'Test content
Text
', - 'Text
', - ], - 'script with attributes' => [ - '', - '', - ], - 'inline event handler' => [ - 'Click me', - 'Click me', - ], - 'multiple scripts' => [ - 'Text
', - 'Text
', - ], - 'no scripts' => [ - 'Clean text
', - 'Clean text
', - ], - ]; - } - - public static function removeCommentsProvider(): array - { - return [ - 'basic comment' => [ - 'Text
', - 'Text
', - ], - 'multiple comments' => [ - 'Text
', - 'Text
', - ], - 'multiline comment' => [ - "Text
", - 'Text
', - ], - 'no comments' => [ - 'Clean text
', - 'Clean text
', - ], - 'nested comments' => [ - ' Comment -->', - '', - ], - ]; - } - - public static function removeStyleProvider(): array - { - return [ - 'basic style' => [ - '', - '', - ], - 'style with attributes' => [ - '', - '', - ], - 'multiple styles' => [ - 'Text
', - 'Text
', - ], - 'no styles' => [ - 'Clean text
', - 'Clean text
', - ], - ]; - } -} diff --git a/tests/Trait/NumericSanitizerTraitTest.php b/tests/Trait/NumericSanitizerTraitTest.php deleted file mode 100644 index 08d2997..0000000 --- a/tests/Trait/NumericSanitizerTraitTest.php +++ /dev/null @@ -1,71 +0,0 @@ -traitObject = new class { - use NumericSanitizerTrait; - - public function callExtractNumbers(string $input): string - { - return $this->extractNumbers($input); - } - - public function callPreserveDecimalPoint(string $input, string $decimalPoint = '.'): string - { - return $this->preserveDecimalPoint($input, $decimalPoint); - } - }; - } - - /** - * @dataProvider extractNumbersProvider - */ - public function testExtractNumbers(string $input, string $expected): void - { - $this->assertSame($expected, $this->traitObject->callExtractNumbers($input)); - } - - /** - * @dataProvider preserveDecimalPointProvider - */ - public function testPreserveDecimalPoint(string $input, string $decimalPoint, string $expected): void - { - $this->assertSame($expected, $this->traitObject->callPreserveDecimalPoint($input, $decimalPoint)); - } - - public static function extractNumbersProvider(): array - { - return [ - 'only numbers' => ['123456', '123456'], - 'mixed content' => ['abc123def456', '123456'], - 'with special chars' => ['!@#123$%^456', '123456'], - 'empty string' => ['', ''], - 'no numbers' => ['abcdef', ''], - 'with spaces' => ['123 456', '123456'], - ]; - } - - public static function preserveDecimalPointProvider(): array - { - return [ - 'simple decimal' => ['123.456', '.', '123.456'], - 'custom decimal point' => ['123,456', ',', '123,456'], - 'multiple decimal points' => ['123.456.789', '.', '123.456789'], - 'no decimal point' => ['123456', '.', '123456'], - 'only decimal point' => ['.', '.', '.'], - 'decimal at start' => ['.123', '.', '.123'], - 'decimal at end' => ['123.', '.', '123.'], - ]; - } -} diff --git a/tests/Trait/UrlSanitizerTraitTest.php b/tests/Trait/UrlSanitizerTraitTest.php deleted file mode 100644 index 012eb2f..0000000 --- a/tests/Trait/UrlSanitizerTraitTest.php +++ /dev/null @@ -1,73 +0,0 @@ -traitObject = new class { - use UrlSanitizerTrait; - - public function callNormalizeProtocol(string $url, string $defaultProtocol = 'https://'): string - { - return $this->normalizeProtocol($url, $defaultProtocol); - } - - public function callNormalizeSlashes(string $url): string - { - return $this->normalizeSlashes($url); - } - }; - } - - /** - * @dataProvider normalizeProtocolProvider - */ - public function testNormalizeProtocol(string $input, string $defaultProtocol, string $expected): void - { - $this->assertSame($expected, $this->traitObject->callNormalizeProtocol($input, $defaultProtocol)); - } - - /** - * @dataProvider normalizeSlashesProvider - */ - public function testNormalizeSlashes(string $input, string $expected): void - { - $this->assertSame($expected, $this->traitObject->callNormalizeSlashes($input)); - } - - public static function normalizeProtocolProvider(): array - { - return [ - 'no protocol' => ['example.com', 'https://', 'https://example.com'], - 'with http' => ['http://example.com', 'https://', 'http://example.com'], - 'with https' => ['https://example.com', 'http://', 'https://example.com'], - 'with ftp' => ['ftp://example.com', 'https://', 'ftp://example.com'], - 'with sftp' => ['sftp://example.com', 'https://', 'sftp://example.com'], - 'custom protocol' => ['example.com', 'http://', 'http://example.com'], - 'empty string' => ['', 'https://', 'https://'], - 'with extra slashes' => ['/example.com', 'https://', 'https://example.com'], - ]; - } - - public static function normalizeSlashesProvider(): array - { - return [ - 'normal url' => ['https://example.com/path', 'https://example.com/path'], - 'multiple slashes' => ['https://example.com//path', 'https://example.com/path'], - 'preserve protocol slashes' => ['https://example.com', 'https://example.com'], - 'complex path' => ['https://example.com/path//to///resource', 'https://example.com/path/to/resource'], - 'empty string' => ['', ''], - 'only slashes' => ['////', '/'], - 'mixed slashes' => ['http:///example.com//path', 'http://example.com/path'], - ]; - } -} diff --git a/tests/Trait/ValidationTraitTest.php b/tests/Trait/ValidationTraitTest.php deleted file mode 100644 index 0c668fe..0000000 --- a/tests/Trait/ValidationTraitTest.php +++ /dev/null @@ -1,93 +0,0 @@ -traitObject = new class { - use ValidationTrait; - - public function callIsNotEmpty(string $input): bool - { - return $this->isNotEmpty($input); - } - - public function callIsValidUtf8(string $input): bool - { - return $this->isValidUtf8($input); - } - - public function callContainsPattern(string $input, string $pattern): bool - { - return $this->containsPattern($input, $pattern); - } - }; - } - - /** - * @dataProvider isNotEmptyProvider - */ - public function testIsNotEmpty(string $input, bool $expected): void - { - $this->assertSame($expected, $this->traitObject->callIsNotEmpty($input)); - } - - /** - * @dataProvider isValidUtf8Provider - */ - public function testIsValidUtf8(string $input, bool $expected): void - { - $this->assertSame($expected, $this->traitObject->callIsValidUtf8($input)); - } - - /** - * @dataProvider containsPatternProvider - */ - public function testContainsPattern(string $input, string $pattern, bool $expected): void - { - $this->assertSame($expected, $this->traitObject->callContainsPattern($input, $pattern)); - } - - public static function isNotEmptyProvider(): array - { - return [ - 'non empty string' => ['test', true], - 'empty string' => ['', false], - 'spaces only' => [' ', false], - 'tabs and newlines' => ["\t\n", false], - 'zero as string' => ['0', true], - 'with spaces' => [' test ', true], - ]; - } - - public static function isValidUtf8Provider(): array - { - return [ - 'ascii string' => ['Hello World', true], - 'utf8 string' => ['áéíóú', true], - 'emojis' => ['😀👍🎉', true], - 'empty string' => ['', true], - 'valid mixed content' => ['Hello 世界', true], - ]; - } - - public static function containsPatternProvider(): array - { - return [ - 'simple pattern' => ['test123', '/\d+/', true], - 'email pattern' => ['test@example.com', '/^[\w\-\.]+@([\w\-]+\.)+[\w\-]{2,}$/', true], - 'no match' => ['abcdef', '/\d+/', false], - 'complex pattern' => ['ABC-123', '/^[A-Z]+-\d+$/', true], - 'empty string' => ['', '/.*/', true], - ]; - } -} diff --git a/tests/Trait/WhitespaceSanitizerTraitTest.php b/tests/Trait/WhitespaceSanitizerTraitTest.php deleted file mode 100644 index 15bda3d..0000000 --- a/tests/Trait/WhitespaceSanitizerTraitTest.php +++ /dev/null @@ -1,99 +0,0 @@ -traitObject = new class { - use WhitespaceSanitizerTrait; - - public function callRemoveAllWhitespace(string $input): string - { - return $this->removeAllWhitespace($input); - } - - public function callNormalizeWhitespace(string $input): string - { - return $this->normalizeWhitespace($input); - } - - public function callTrimWhitespace(string $input): string - { - return $this->trimWhitespace($input); - } - }; - } - - /** - * @dataProvider removeAllWhitespaceProvider - */ - public function testRemoveAllWhitespace(string $input, string $expected): void - { - $this->assertSame($expected, $this->traitObject->callRemoveAllWhitespace($input)); - } - - /** - * @dataProvider normalizeWhitespaceProvider - */ - public function testNormalizeWhitespace(string $input, string $expected): void - { - $this->assertSame($expected, $this->traitObject->callNormalizeWhitespace($input)); - } - - /** - * @dataProvider trimWhitespaceProvider - */ - public function testTrimWhitespace(string $input, string $expected): void - { - $this->assertSame($expected, $this->traitObject->callTrimWhitespace($input)); - } - - public static function removeAllWhitespaceProvider(): array - { - return [ - 'spaces' => ['hello world', 'helloworld'], - 'tabs and spaces' => ["hello\tworld", 'helloworld'], - 'newlines' => ["hello\nworld", 'helloworld'], - 'multiple spaces' => ['hello world', 'helloworld'], - 'complex whitespace' => ["hello\n\t world", 'helloworld'], - 'empty string' => ['', ''], - 'only whitespace' => [' ', ''], - ]; - } - - public static function normalizeWhitespaceProvider(): array - { - return [ - 'multiple spaces' => ['hello world', 'hello world'], - 'tabs' => ["hello\tworld", 'hello world'], - 'newlines' => ["hello\nworld", 'hello world'], - 'mixed whitespace' => ["hello\n\t world", 'hello world'], - 'empty string' => ['', ''], - 'only whitespace' => [' ', ' '], - 'leading/trailing spaces' => [' hello world ', ' hello world '], - ]; - } - - public static function trimWhitespaceProvider(): array - { - return [ - 'leading spaces' => [' hello', 'hello'], - 'trailing spaces' => ['hello ', 'hello'], - 'both sides' => [' hello ', 'hello'], - 'tabs' => ["\thello\t", 'hello'], - 'newlines' => ["\nhello\n", 'hello'], - 'mixed whitespace' => [" \t\nhello\t \n", 'hello'], - 'empty string' => ['', ''], - 'only whitespace' => [' ', ''], - ]; - } -} diff --git a/tests/Unit/Attribute/AttributeSanitizerTest.php b/tests/Unit/Attribute/AttributeSanitizerTest.php new file mode 100644 index 0000000..7d03151 --- /dev/null +++ b/tests/Unit/Attribute/AttributeSanitizerTest.php @@ -0,0 +1,54 @@ +createAttributeSanitizer(); + $result = $sanitizer->sanitize($dto); + + $this->assertSame('user@test.com', $dto->email); + $this->assertSame('Walmir Silva', $dto->name); + $this->assertSame('no rules', $dto->untouched); + $this->assertTrue($result->wasModified()); + } + + #[Test] + public function testParameterizedAttributeRules(): void + { + $dto = new class () { + #[Sanitize(['truncate', ['max' => 10, 'suffix' => '…']])] + public string $bio = 'This is a very long text'; + }; + + $sanitizer = new SanitizerServiceProvider()->createAttributeSanitizer(); + $sanitizer->sanitize($dto); + + $this->assertSame('This is a…', $dto->bio); + } +} diff --git a/tests/Unit/Core/InMemoryRuleRegistryTest.php b/tests/Unit/Core/InMemoryRuleRegistryTest.php new file mode 100644 index 0000000..698e5ea --- /dev/null +++ b/tests/Unit/Core/InMemoryRuleRegistryTest.php @@ -0,0 +1,48 @@ +register('trim', $rule); + + $this->assertTrue($registry->has('trim')); + $this->assertFalse($registry->has('unknown')); + $this->assertSame($rule, $registry->resolve('trim')); + $this->assertSame(['trim'], $registry->aliases()); + } + + #[Test] + public function testDuplicateAliasThrows(): void + { + $registry = new InMemoryRuleRegistry(); + $registry->register('trim', new TrimRule()); + + $this->expectException(InvalidRuleException::class); + $registry->register('trim', new TrimRule()); + } + + #[Test] + public function testUnknownAliasThrows(): void + { + $registry = new InMemoryRuleRegistry(); + + $this->expectException(InvalidRuleException::class); + $registry->resolve('unknown'); + } +} diff --git a/tests/Unit/Core/SanitizationContextImplTest.php b/tests/Unit/Core/SanitizationContextImplTest.php new file mode 100644 index 0000000..5a1d768 --- /dev/null +++ b/tests/Unit/Core/SanitizationContextImplTest.php @@ -0,0 +1,48 @@ + 1]); + + $this->assertSame('', $ctx->getFieldName()); + $this->assertSame(['a' => 1], $ctx->getRootData()); + $this->assertSame([], $ctx->getParameters()); + } + + #[Test] + public function testWithFieldReturnsNewInstance(): void + { + $ctx = SanitizationContextImpl::create([]); + $ctx2 = $ctx->withField('email'); + + $this->assertSame('', $ctx->getFieldName()); + $this->assertSame('email', $ctx2->getFieldName()); + $this->assertNotSame($ctx, $ctx2); + } + + #[Test] + public function testWithParametersMerges(): void + { + $ctx = SanitizationContextImpl::create([]) + ->withParameters(['a' => 1]) + ->withParameters(['b' => 2]); + + $this->assertSame(1, $ctx->getParameter('a')); + $this->assertSame(2, $ctx->getParameter('b')); + $this->assertNull($ctx->getParameter('c')); + $this->assertSame('default', $ctx->getParameter('c', 'default')); + } +} diff --git a/tests/Unit/Core/SanitizationResultTest.php b/tests/Unit/Core/SanitizationResultTest.php new file mode 100644 index 0000000..30184b0 --- /dev/null +++ b/tests/Unit/Core/SanitizationResultTest.php @@ -0,0 +1,110 @@ + 'WALMIR'], ['name' => 'walmir']); + $this->assertSame(['name' => 'WALMIR'], $result->getOriginalData()); + $this->assertSame(['name' => 'walmir'], $result->getSanitizedData()); + $this->assertSame('walmir', $result->get('name')); + $this->assertNull($result->get('missing')); + } + + #[Test] + public function testWasModified(): void + { + $changed = new SanitizationResult(['x' => 1], ['x' => 2]); + $unchanged = new SanitizationResult(['x' => 1], ['x' => 1]); + $this->assertTrue($changed->wasModified()); + $this->assertFalse($unchanged->wasModified()); + } + + #[Test] + public function testIsFieldModified(): void + { + $result = new SanitizationResult(['x' => 1], ['x' => 2, 'y' => 3]); + $this->assertTrue($result->isFieldModified('x')); + $this->assertTrue($result->isFieldModified('y')); // new key not in original + } + + #[Test] + public function testIsFieldModifiedFalse(): void + { + $result = new SanitizationResult(['x' => 1], ['x' => 1]); + $this->assertFalse($result->isFieldModified('x')); + } + + #[Test] + public function testModifiedFields(): void + { + $result = new SanitizationResult(['a' => 1, 'b' => 2], ['a' => 99, 'b' => 2]); + $this->assertSame(['a'], $result->modifiedFields()); + } + + #[Test] + public function testSetSanitizedValue(): void + { + $result = new SanitizationResult(['x' => 1], ['x' => 1]); + $result->setSanitizedValue('x', 42); + $this->assertSame(42, $result->get('x')); + } + + #[Test] + public function testAddModificationAndGetters(): void + { + $result = new SanitizationResult(['x' => 'A'], ['x' => 'a']); + $mod = new FieldModification('x', 'lower_case', 'A', 'a'); + $result->addModification($mod); + + $this->assertCount(1, $result->getModifications()); + $this->assertSame([$mod], $result->modificationsFor('x')); + $this->assertSame([], $result->modificationsFor('missing')); + $this->assertSame(1, $result->modificationCount()); + } + + #[Test] + public function testModificationCountZeroWhenNotModified(): void + { + $result = new SanitizationResult(['x' => 'same'], ['x' => 'same']); + $result->addModification(new FieldModification('x', 'rule', 'same', 'same')); + $this->assertSame(0, $result->modificationCount()); + } + + #[Test] + public function testMerge(): void + { + $r1 = new SanitizationResult(['a' => 1], ['a' => 2]); + $r1->addModification(new FieldModification('a', 'rule', 1, 2)); + + $r2 = new SanitizationResult(['b' => 3], ['b' => 4]); + $r2->addModification(new FieldModification('b', 'rule', 3, 4)); + + $merged = $r1->merge($r2); + $this->assertSame(['a' => 1, 'b' => 3], $merged->getOriginalData()); + $this->assertSame(['a' => 2, 'b' => 4], $merged->getSanitizedData()); + $this->assertCount(2, $merged->getModifications()); + } + + #[Test] + public function testFieldModificationWasModified(): void + { + $changed = new FieldModification('x', 'rule', 'A', 'a'); + $unchanged = new FieldModification('x', 'rule', 'same', 'same'); + $this->assertTrue($changed->wasModified()); + $this->assertFalse($unchanged->wasModified()); + } +} diff --git a/tests/Unit/Core/SanitizeAttributeHandlerTest.php b/tests/Unit/Core/SanitizeAttributeHandlerTest.php new file mode 100644 index 0000000..fb82ab0 --- /dev/null +++ b/tests/Unit/Core/SanitizeAttributeHandlerTest.php @@ -0,0 +1,97 @@ +handleAttribute('email', $attr, ' TEST@EXAMPLE.COM '); + + $this->assertSame(['email' => ' TEST@EXAMPLE.COM '], $handler->getProcessedPropertyValues()); + $this->assertSame(['email' => ['trim', 'lower_case']], $handler->getFieldRules()); + } + + #[Test] + public function testHandleAttributeMergesMultipleAttributesOnSameProperty(): void + { + $handler = new SanitizeAttributeHandler(); + $attr1 = new Sanitize('trim'); + $attr2 = new Sanitize('capitalize'); + + $handler->handleAttribute('name', $attr1, ' hello '); + $handler->handleAttribute('name', $attr2, ' hello '); + + $this->assertSame(['name' => ['trim', 'capitalize']], $handler->getFieldRules()); + } + + #[Test] + public function testHandleAttributeWithNonSanitizeAttributeReturnsNull(): void + { + $handler = new SanitizeAttributeHandler(); + $nonSanitize = new \stdClass(); + + $result = $handler->handleAttribute('field', $nonSanitize, 'value'); + + $this->assertNull($result); + $this->assertSame([], $handler->getFieldRules()); + } + + #[Test] + public function testGetProcessingResultMessagesReturnsEmpty(): void + { + $handler = new SanitizeAttributeHandler(); + $this->assertSame([], $handler->getProcessingResultMessages()); + } + + #[Test] + public function testGetProcessingResultErrorsReturnsEmpty(): void + { + $handler = new SanitizeAttributeHandler(); + $this->assertSame([], $handler->getProcessingResultErrors()); + } + + #[Test] + public function testSetProcessedValuesAndApplyChanges(): void + { + $handler = new SanitizeAttributeHandler(); + + $obj = new class () { + public string $name = 'original'; + }; + + $handler->setProcessedValues(['name' => 'updated']); + $handler->applyChanges($obj); + + $this->assertSame('updated', $obj->name); + } + + #[Test] + public function testApplyChangesSkipsMissingProperty(): void + { + $handler = new SanitizeAttributeHandler(); + + $obj = new class () { + public string $name = 'original'; + }; + + // 'nonexistent' does not exist on the object — must not throw + $handler->setProcessedValues(['nonexistent' => 'value']); + $handler->applyChanges($obj); + + $this->assertSame('original', $obj->name); + } +} diff --git a/tests/Unit/Core/SanitizerEngineTest.php b/tests/Unit/Core/SanitizerEngineTest.php new file mode 100644 index 0000000..0dedddc --- /dev/null +++ b/tests/Unit/Core/SanitizerEngineTest.php @@ -0,0 +1,179 @@ +createEngine(); + + $result = $engine->sanitize( + ['name' => ' Hello World ', 'email' => ' User@Test.COM '], + [ + 'name' => ['trim'], + 'email' => ['trim', 'lower_case'], + ], + ); + + $this->assertSame('Hello World', $result->get('name')); + $this->assertSame('user@test.com', $result->get('email')); + $this->assertTrue($result->wasModified()); + } + + #[Test] + public function testParameterizedRules(): void + { + $engine = new SanitizerServiceProvider()->createEngine(); + + $result = $engine->sanitize( + ['bio' => 'This is a very long biography text for testing'], + ['bio' => [['truncate', ['max' => 20, 'suffix' => '…']]]], + ); + + $this->assertSame('This is a very long…', $result->get('bio')); + } + + #[Test] + public function testModificationTracking(): void + { + $engine = new SanitizerServiceProvider()->createEngine(); + + $result = $engine->sanitize( + ['name' => ' Walmir ', 'untouched' => 'hello'], + [ + 'name' => ['trim'], + 'untouched' => ['trim'], + ], + ); + + $this->assertTrue($result->isFieldModified('name')); + $this->assertFalse($result->isFieldModified('untouched')); + $this->assertSame(['name'], $result->modifiedFields()); + $this->assertSame(1, $result->modificationCount()); + } + + #[Test] + public function testDotNotationResolution(): void + { + $engine = new SanitizerServiceProvider()->createEngine(); + + $result = $engine->sanitize( + ['user' => ['name' => ' Walmir ']], + ['user.name' => ['trim']], + ); + + $this->assertSame('Walmir', $result->get('user.name')); + } + + #[Test] + public function testPipelineOrdering(): void + { + $engine = new SanitizerServiceProvider()->createEngine(); + + $result = $engine->sanitize( + ['tag' => ' Hello World '], + ['tag' => ['trim', 'lower_case', 'slug']], + ); + + $this->assertSame('hello-world', $result->get('tag')); + } + + #[Test] + public function testOriginalDataPreserved(): void + { + $engine = new SanitizerServiceProvider()->createEngine(); + + $result = $engine->sanitize( + ['name' => ' test '], + ['name' => ['trim']], + ); + + $this->assertSame(' test ', $result->getOriginalData()['name']); + $this->assertSame('test', $result->getSanitizedData()['name']); + } + + #[Test] + public function testModificationsLog(): void + { + $engine = new SanitizerServiceProvider()->createEngine(); + + $result = $engine->sanitize( + ['name' => ' Walmir '], + ['name' => ['trim', 'upper_case']], + ); + + $mods = $result->modificationsFor('name'); + $this->assertCount(2, $mods); + $this->assertSame('string.trim', $mods[0]->ruleName); + $this->assertSame(' Walmir ', $mods[0]->before); + $this->assertSame('Walmir', $mods[0]->after); + $this->assertSame('string.upper_case', $mods[1]->ruleName); + $this->assertSame('WALMIR', $mods[1]->after); + } + + #[Test] + public function testGetConfigurationReturnsDefault(): void + { + $provider = new SanitizerServiceProvider()->createEngine(); + $config = $provider->getConfiguration(); + $this->assertInstanceOf(SanitizerConfiguration::class, $config); + $this->assertTrue($config->trackModifications); + } + + #[Test] + public function testSanitizeWithDirectRuleInstance(): void + { + // Covers the resolveRule($definition instanceof SanitizationRule) branch. + $engine = new SanitizerServiceProvider()->createEngine(); + + $result = $engine->sanitize( + ['name' => ' hello '], + ['name' => [new TrimRule()]], + ); + + $this->assertSame('hello', $result->get('name')); + } + + #[Test] + public function testSanitizeWithRuleInstanceInArray(): void + { + // Covers the resolveRule([SanitizationRule, params]) branch (array form with a rule instance). + $engine = new SanitizerServiceProvider()->createEngine(); + + $result = $engine->sanitize( + ['name' => ' hello '], + ['name' => [[new TrimRule(), []]]], + ); + + $this->assertSame('hello', $result->get('name')); + } + + #[Test] + public function testResolveValueMissingDotNotationReturnsNull(): void + { + // Covers the null return inside resolveValue when a dot-notation key is missing. + $engine = new SanitizerServiceProvider()->createEngine(); + + $result = $engine->sanitize( + ['user' => ['name' => 'Alice']], + ['user.missing' => ['trim']], + ); + + $this->assertNull($result->get('user.missing')); + } +} diff --git a/tests/Unit/Event/SanitizationEventsTest.php b/tests/Unit/Event/SanitizationEventsTest.php new file mode 100644 index 0000000..61e806a --- /dev/null +++ b/tests/Unit/Event/SanitizationEventsTest.php @@ -0,0 +1,52 @@ +assertSame(['name', 'email'], $event->fields); + $this->assertSame(1.5, $event->timestamp); + } + + #[Test] + public function testSanitizationStartedEventDefaultTimestamp(): void + { + $event = new SanitizationStartedEvent(['name']); + $this->assertSame(0.0, $event->timestamp); + } + + #[Test] + public function testSanitizationCompletedEventStoresResultAndDuration(): void + { + $result = new SanitizationResult(['name' => 'WALMIR'], ['name' => 'walmir']); + $event = new SanitizationCompletedEvent($result, 12.5, 1_000_000.0); + + $this->assertSame($result, $event->result); + $this->assertSame(12.5, $event->durationMs); + $this->assertSame(1_000_000.0, $event->timestamp); + } + + #[Test] + public function testSanitizationCompletedEventDefaultTimestamp(): void + { + $result = new SanitizationResult([], []); + $event = new SanitizationCompletedEvent($result, 0.5); + $this->assertSame(0.0, $event->timestamp); + } +} diff --git a/tests/Unit/Exception/SanitizationExceptionsTest.php b/tests/Unit/Exception/SanitizationExceptionsTest.php new file mode 100644 index 0000000..d015622 --- /dev/null +++ b/tests/Unit/Exception/SanitizationExceptionsTest.php @@ -0,0 +1,53 @@ +assertInstanceOf(InvalidRuleException::class, $e); + $this->assertSame("Sanitization rule alias 'trim' is already registered.", $e->getMessage()); + } + + #[Test] + public function testInvalidRuleExceptionUnknownAlias(): void + { + $e = InvalidRuleException::unknownAlias('unknown'); + + $this->assertInstanceOf(InvalidRuleException::class, $e); + $this->assertSame("Sanitization rule alias 'unknown' is not registered.", $e->getMessage()); + } + + #[Test] + public function testSanitizationExceptionEngineError(): void + { + $e = SanitizationException::engineError('something went wrong'); + + $this->assertInstanceOf(SanitizationException::class, $e); + $this->assertSame('Sanitization engine error: something went wrong', $e->getMessage()); + $this->assertNull($e->getPrevious()); + } + + #[Test] + public function testSanitizationExceptionEngineErrorWithPrevious(): void + { + $previous = new \RuntimeException('root cause'); + $e = SanitizationException::engineError('wrapped', $previous); + + $this->assertSame($previous, $e->getPrevious()); + } +} diff --git a/tests/Unit/Provider/SanitizerServiceProviderTest.php b/tests/Unit/Provider/SanitizerServiceProviderTest.php new file mode 100644 index 0000000..cfe55d3 --- /dev/null +++ b/tests/Unit/Provider/SanitizerServiceProviderTest.php @@ -0,0 +1,61 @@ +createRegistry(); + + $this->assertCount(33, $registry->aliases()); + + foreach (self::EXPECTED_ALIASES as $alias) { + $this->assertTrue($registry->has($alias), "Missing alias: {$alias}"); + } + } + + #[Test] + public function testCreateEngine(): void + { + $engine = new SanitizerServiceProvider()->createEngine(); + $this->assertInstanceOf(SanitizerEngine::class, $engine); + } + + #[Test] + public function testCreateAttributeSanitizer(): void + { + $sanitizer = new SanitizerServiceProvider()->createAttributeSanitizer(); + $this->assertInstanceOf(AttributeSanitizer::class, $sanitizer); + } +} diff --git a/tests/Unit/Rule/Brazilian/BrazilianRulesTest.php b/tests/Unit/Rule/Brazilian/BrazilianRulesTest.php new file mode 100644 index 0000000..73425f9 --- /dev/null +++ b/tests/Unit/Rule/Brazilian/BrazilianRulesTest.php @@ -0,0 +1,115 @@ +withField('test'); + } + + // ── CPF ─────────────────────────────────────────────────────── + + #[Test] + public function testFormatCpfFromDigits(): void + { + $this->assertSame('529.982.247-25', new FormatCpfRule()->sanitize('52998224725', $this->ctx())); + } + + #[Test] + public function testFormatCpfFromFormatted(): void + { + $this->assertSame('529.982.247-25', new FormatCpfRule()->sanitize('529.982.247-25', $this->ctx())); + } + + #[Test] + public function testFormatCpfInvalidLength(): void + { + $this->assertSame('1234', new FormatCpfRule()->sanitize('1234', $this->ctx())); + } + + // ── CNPJ ────────────────────────────────────────────────────── + + #[Test] + public function testFormatCnpjFromDigits(): void + { + $this->assertSame('11.222.333/0001-81', new FormatCnpjRule()->sanitize('11222333000181', $this->ctx())); + } + + #[Test] + public function testFormatCnpjFromFormatted(): void + { + $this->assertSame('11.222.333/0001-81', new FormatCnpjRule()->sanitize('11.222.333/0001-81', $this->ctx())); + } + + #[Test] + public function testFormatCnpjInvalidLength(): void + { + $this->assertSame('123', new FormatCnpjRule()->sanitize('123', $this->ctx())); + } + + // ── CEP ─────────────────────────────────────────────────────── + + #[Test] + public function testFormatCepFromDigits(): void + { + $this->assertSame('63100-000', new FormatCepRule()->sanitize('63100000', $this->ctx())); + } + + #[Test] + public function testFormatCepFromFormatted(): void + { + $this->assertSame('63100-000', new FormatCepRule()->sanitize('63100-000', $this->ctx())); + } + + #[Test] + public function testFormatCepInvalidLength(): void + { + $this->assertSame('123', new FormatCepRule()->sanitize('123', $this->ctx())); + } + + // ── Non-string passthrough ──────────────────────────────────── + + #[Test] + public function testFormatRulesHandleNonString(): void + { + $ctx = $this->ctx(); + $this->assertSame(42, new FormatCpfRule()->sanitize(42, $ctx)); + $this->assertSame(null, new FormatCnpjRule()->sanitize(null, $ctx)); + $this->assertSame([], new FormatCepRule()->sanitize([], $ctx)); + } + + // ── Rule names (constant values — one assertSame per method) ── + + #[Test] + public function testFormatCpfRuleName(): void + { + $this->assertSame('brazilian.format_cpf', new FormatCpfRule()->getName()); + } + + #[Test] + public function testFormatCnpjRuleName(): void + { + $this->assertSame('brazilian.format_cnpj', new FormatCnpjRule()->getName()); + } + + #[Test] + public function testFormatCepRuleName(): void + { + $this->assertSame('brazilian.format_cep', new FormatCepRule()->getName()); + } +} diff --git a/tests/Unit/Rule/Date/DateRulesTest.php b/tests/Unit/Rule/Date/DateRulesTest.php new file mode 100644 index 0000000..3cfe709 --- /dev/null +++ b/tests/Unit/Rule/Date/DateRulesTest.php @@ -0,0 +1,76 @@ +withField('test')->withParameters($params); + } + + #[Test] + public function testNormalizeDateBrToIso(): void + { + $result = new NormalizeDateRule()->sanitize('28/02/2025', $this->ctx(['from' => 'd/m/Y', 'to' => 'Y-m-d'])); + $this->assertSame('2025-02-28', $result); + } + + #[Test] + public function testNormalizeDateInvalidReturnsOriginal(): void + { + $this->assertSame('invalid', new NormalizeDateRule()->sanitize('invalid', $this->ctx())); + } + + #[Test] + public function testNormalizeDateEmptyReturnsOriginal(): void + { + $this->assertSame('', new NormalizeDateRule()->sanitize('', $this->ctx())); + } + + #[Test] + public function testTimestampToDate(): void + { + $result = new TimestampToDateRule()->sanitize(1740700800, $this->ctx(['format' => 'Y-m-d', 'timezone' => 'UTC'])); + $this->assertSame('2025-02-28', $result); + } + + #[Test] + public function testTimestampToDateNonNumeric(): void + { + $this->assertSame('abc', new TimestampToDateRule()->sanitize('abc', $this->ctx())); + } + + #[Test] + public function testTimestampToDateInvalidTimezoneReturnOriginal(): void + { + // An invalid timezone string triggers the catch branch which returns the original value. + $result = new TimestampToDateRule()->sanitize(1740700800, $this->ctx(['format' => 'Y-m-d', 'timezone' => 'Invalid/Zone'])); + $this->assertSame(1740700800, $result); + } + + // ── Rule names (constant values — one assertSame per method) ── + + #[Test] + public function testNormalizeDateRuleName(): void + { + $this->assertSame('date.normalize', new NormalizeDateRule()->getName()); + } + + #[Test] + public function testTimestampToDateRuleName(): void + { + $this->assertSame('date.timestamp_to_date', new TimestampToDateRule()->getName()); + } +} diff --git a/tests/Unit/Rule/Filter/FilterRulesTest.php b/tests/Unit/Rule/Filter/FilterRulesTest.php new file mode 100644 index 0000000..223cb4f --- /dev/null +++ b/tests/Unit/Rule/Filter/FilterRulesTest.php @@ -0,0 +1,100 @@ +withField('test')->withParameters($params); + } + + #[Test] + public function testDigitsOnly(): void + { + $this->assertSame('12345678901', new DigitsOnlyRule()->sanitize('123.456.789-01', $this->ctx())); + } + + #[Test] + public function testAlphaOnly(): void + { + $this->assertSame('SãoPaulo', new AlphaOnlyRule()->sanitize('São Paulo 123!', $this->ctx())); + } + + #[Test] + public function testAlphanumericOnly(): void + { + $this->assertSame('São123', new AlphanumericOnlyRule()->sanitize('São-123!', $this->ctx())); + } + + #[Test] + public function testEmailFilter(): void + { + $this->assertSame('user@test.com', new EmailFilterRule()->sanitize(' User@Test.COM ', $this->ctx())); + } + + #[Test] + public function testDigitsOnlyNonString(): void + { + $this->assertSame(42, new DigitsOnlyRule()->sanitize(42, $this->ctx())); + } + + #[Test] + public function testAlphaOnlyNonString(): void + { + $this->assertSame(42, new AlphaOnlyRule()->sanitize(42, $this->ctx())); + } + + #[Test] + public function testAlphanumericOnlyNonString(): void + { + $this->assertSame(42, new AlphanumericOnlyRule()->sanitize(42, $this->ctx())); + } + + #[Test] + public function testEmailFilterNonString(): void + { + $this->assertSame(42, new EmailFilterRule()->sanitize(42, $this->ctx())); + } + + // ── Rule names (constant values — one assertSame per method) ── + + #[Test] + public function testDigitsOnlyRuleName(): void + { + $this->assertSame('filter.digits_only', new DigitsOnlyRule()->getName()); + } + + #[Test] + public function testAlphaOnlyRuleName(): void + { + $this->assertSame('filter.alpha_only', new AlphaOnlyRule()->getName()); + } + + #[Test] + public function testAlphanumericOnlyRuleName(): void + { + $this->assertSame('filter.alphanumeric_only', new AlphanumericOnlyRule()->getName()); + } + + #[Test] + public function testEmailFilterRuleName(): void + { + $this->assertSame('filter.email', new EmailFilterRule()->getName()); + } +} diff --git a/tests/Unit/Rule/Html/HtmlRulesTest.php b/tests/Unit/Rule/Html/HtmlRulesTest.php new file mode 100644 index 0000000..a76baa0 --- /dev/null +++ b/tests/Unit/Rule/Html/HtmlRulesTest.php @@ -0,0 +1,148 @@ +withField('test')->withParameters($params); + } + + #[Test] + public function testStripTags(): void + { + $this->assertSame('hello', new StripTagsRule()->sanitize('hello', $this->ctx())); + } + + #[Test] + public function testStripTagsWithAllowed(): void + { + $this->assertSame('hellox', new StripTagsRule()->sanitize('hello', $this->ctx(['allowed' => '']))); + } + + #[Test] + public function testHtmlEncode(): void + { + $this->assertSame('<script>', new HtmlEncodeRule()->sanitize(' ', $this->ctx())); + } + + #[Test] + public function testUrlEncode(): void + { + $this->assertSame('hello+world', new UrlEncodeRule()->sanitize('hello world', $this->ctx())); + } + + #[Test] + public function testUrlEncodeRaw(): void + { + $this->assertSame('hello%20world', new UrlEncodeRule()->sanitize('hello world', $this->ctx(['raw' => true]))); + } + + // ── Non-string passthrough ──────────────────────────────────── + + #[Test] + public function testStripTagsNonString(): void + { + $this->assertSame(42, new StripTagsRule()->sanitize(42, $this->ctx())); + } + + #[Test] + public function testHtmlEncodeNonString(): void + { + $this->assertSame(42, new HtmlEncodeRule()->sanitize(42, $this->ctx())); + } + + #[Test] + public function testHtmlEncodeDoubleEncodeFalse(): void + { + $result = new HtmlEncodeRule()->sanitize('&', $this->ctx(['double_encode' => false])); + $this->assertSame('&', $result); + } + + #[Test] + public function testHtmlDecodeNonString(): void + { + $this->assertSame(42, new HtmlDecodeRule()->sanitize(42, $this->ctx())); + } + + #[Test] + public function testHtmlPurifyNonString(): void + { + $this->assertSame(42, new HtmlPurifyRule()->sanitize(42, $this->ctx())); + } + + #[Test] + public function testUrlEncodeNonString(): void + { + $this->assertSame(42, new UrlEncodeRule()->sanitize(42, $this->ctx())); + } + + // ── Rule names (constant values — one assertSame per method) ── + + #[Test] + public function testStripTagsRuleName(): void + { + $this->assertSame('html.strip_tags', new StripTagsRule()->getName()); + } + + #[Test] + public function testHtmlEncodeRuleName(): void + { + $this->assertSame('html.encode', new HtmlEncodeRule()->getName()); + } + + #[Test] + public function testHtmlDecodeRuleName(): void + { + $this->assertSame('html.decode', new HtmlDecodeRule()->getName()); + } + + #[Test] + public function testHtmlPurifyRuleName(): void + { + $this->assertSame('html.purify', new HtmlPurifyRule()->getName()); + } + + #[Test] + public function testUrlEncodeRuleName(): void + { + $this->assertSame('html.url_encode', new UrlEncodeRule()->getName()); + } +} diff --git a/tests/Unit/Rule/Numeric/NumericRulesTest.php b/tests/Unit/Rule/Numeric/NumericRulesTest.php new file mode 100644 index 0000000..d637ca0 --- /dev/null +++ b/tests/Unit/Rule/Numeric/NumericRulesTest.php @@ -0,0 +1,101 @@ +withField('test')->withParameters($params); + } + + #[Test] + public function testToInt(): void + { + $this->assertSame(42, new ToIntRule()->sanitize('42', $this->ctx())); + $this->assertSame(42, new ToIntRule()->sanitize(42, $this->ctx())); + $this->assertSame('abc', new ToIntRule()->sanitize('abc', $this->ctx())); + } + + #[Test] + public function testToFloat(): void + { + $this->assertSame(3.14, new ToFloatRule()->sanitize('3.14', $this->ctx())); + $this->assertSame(3.14, new ToFloatRule()->sanitize(3.14, $this->ctx())); + $this->assertSame('abc', new ToFloatRule()->sanitize('abc', $this->ctx())); + } + + #[Test] + public function testClamp(): void + { + $this->assertSame(5, new ClampRule()->sanitize(3, $this->ctx(['min' => 5, 'max' => 10]))); + $this->assertSame(7, new ClampRule()->sanitize(7, $this->ctx(['min' => 5, 'max' => 10]))); + $this->assertSame(10, new ClampRule()->sanitize(15, $this->ctx(['min' => 5, 'max' => 10]))); + $this->assertSame('abc', new ClampRule()->sanitize('abc', $this->ctx(['min' => 0]))); + } + + #[Test] + public function testRound(): void + { + $this->assertSame(3.14, new RoundRule()->sanitize(3.14159, $this->ctx(['precision' => 2]))); + } + + #[Test] + public function testRoundCeil(): void + { + $this->assertSame(3.15, new RoundRule()->sanitize(3.141, $this->ctx(['precision' => 2, 'mode' => 'ceil']))); + } + + #[Test] + public function testRoundFloor(): void + { + $this->assertSame(3.14, new RoundRule()->sanitize(3.149, $this->ctx(['precision' => 2, 'mode' => 'floor']))); + } + + #[Test] + public function testRoundNonNumeric(): void + { + $this->assertSame('abc', new RoundRule()->sanitize('abc', $this->ctx())); + } + + // ── Rule names (constant values — one assertSame per method) ── + + #[Test] + public function testToIntRuleName(): void + { + $this->assertSame('numeric.to_int', new ToIntRule()->getName()); + } + + #[Test] + public function testToFloatRuleName(): void + { + $this->assertSame('numeric.to_float', new ToFloatRule()->getName()); + } + + #[Test] + public function testClampRuleName(): void + { + $this->assertSame('numeric.clamp', new ClampRule()->getName()); + } + + #[Test] + public function testRoundRuleName(): void + { + $this->assertSame('numeric.round', new RoundRule()->getName()); + } +} diff --git a/tests/Unit/Rule/String/StringRulesTest.php b/tests/Unit/Rule/String/StringRulesTest.php new file mode 100644 index 0000000..303f566 --- /dev/null +++ b/tests/Unit/Rule/String/StringRulesTest.php @@ -0,0 +1,361 @@ +withField('test')->withParameters($params); + } + + // ── Trim ────────────────────────────────────────────────────── + + #[Test] + public function testTrimDefault(): void + { + $this->assertSame('hello', new TrimRule()->sanitize(' hello ', $this->ctx())); + } + + #[Test] + public function testTrimCustomCharacters(): void + { + $this->assertSame('hello', new TrimRule()->sanitize('xxhelloxx', $this->ctx(['characters' => 'x']))); + } + + #[Test] + public function testTrimNonString(): void + { + $this->assertSame(42, new TrimRule()->sanitize(42, $this->ctx())); + } + + // ── LowerCase ───────────────────────────────────────────────── + + #[Test] + public function testLowerCase(): void + { + $this->assertSame('hello world', new LowerCaseRule()->sanitize('Hello WORLD', $this->ctx())); + } + + #[Test] + public function testLowerCaseUnicode(): void + { + $this->assertSame('são paulo', new LowerCaseRule()->sanitize('SÃO PAULO', $this->ctx())); + } + + // ── UpperCase ───────────────────────────────────────────────── + + #[Test] + public function testUpperCase(): void + { + $this->assertSame('HELLO WORLD', new UpperCaseRule()->sanitize('Hello World', $this->ctx())); + } + + // ── Capitalize ──────────────────────────────────────────────── + + #[Test] + public function testCapitalize(): void + { + $this->assertSame('Hello World', new CapitalizeRule()->sanitize('hello world', $this->ctx())); + } + + #[Test] + public function testCapitalizeUnicode(): void + { + $this->assertSame('São Paulo', new CapitalizeRule()->sanitize('são paulo', $this->ctx())); + } + + // ── Slug ────────────────────────────────────────────────────── + + #[Test] + public function testSlug(): void + { + $this->assertSame('hello-world', new SlugRule()->sanitize('Hello World!', $this->ctx())); + } + + #[Test] + public function testSlugAccented(): void + { + $this->assertSame('sao-paulo-brasil', new SlugRule()->sanitize('São Paulo, Brasil!', $this->ctx())); + } + + #[Test] + public function testSlugCustomSeparator(): void + { + $this->assertSame('hello_world', new SlugRule()->sanitize('Hello World', $this->ctx(['separator' => '_']))); + } + + // ── Truncate ────────────────────────────────────────────────── + + #[Test] + public function testTruncate(): void + { + $this->assertSame('Hello...', new TruncateRule()->sanitize('Hello World', $this->ctx(['max' => 8]))); + } + + #[Test] + public function testTruncateNoTruncationNeeded(): void + { + $this->assertSame('Hi', new TruncateRule()->sanitize('Hi', $this->ctx(['max' => 10]))); + } + + #[Test] + public function testTruncateCustomSuffix(): void + { + $this->assertSame('Hell…', new TruncateRule()->sanitize('Hello World', $this->ctx(['max' => 5, 'suffix' => '…']))); + } + + // ── NormalizeWhitespace ─────────────────────────────────────── + + #[Test] + public function testNormalizeWhitespace(): void + { + $this->assertSame('hello world', new NormalizeWhitespaceRule()->sanitize(" hello \t world ", $this->ctx())); + } + + // ── NormalizeLineEndings ────────────────────────────────────── + + #[Test] + public function testNormalizeLineEndings(): void + { + $this->assertSame("a\nb\nc", new NormalizeLineEndingsRule()->sanitize("a\r\nb\rc", $this->ctx())); + } + + // ── Pad ─────────────────────────────────────────────────────── + + #[Test] + public function testPadRight(): void + { + $this->assertSame('hi ', new PadRule()->sanitize('hi', $this->ctx(['length' => 5]))); + } + + #[Test] + public function testPadLeft(): void + { + $this->assertSame('007', new PadRule()->sanitize('7', $this->ctx(['length' => 3, 'pad' => '0', 'side' => 'left']))); + } + + // ── Replace ─────────────────────────────────────────────────── + + #[Test] + public function testReplace(): void + { + $this->assertSame('Hi World', new ReplaceRule()->sanitize('Hello World', $this->ctx(['search' => 'Hello', 'replace' => 'Hi']))); + } + + #[Test] + public function testReplaceEmptySearch(): void + { + $this->assertSame('Hello', new ReplaceRule()->sanitize('Hello', $this->ctx())); + } + + // ── RegexReplace ────────────────────────────────────────────── + + #[Test] + public function testRegexReplace(): void + { + $result = new RegexReplaceRule()->sanitize('abc123def', $this->ctx(['pattern' => '/\d+/', 'replacement' => '#'])); + $this->assertSame('abc#def', $result); + } + + #[Test] + public function testRegexReplaceEmptyPattern(): void + { + $this->assertSame('test', new RegexReplaceRule()->sanitize('test', $this->ctx())); + } + + // ── StripNonPrintable ───────────────────────────────────────── + + #[Test] + public function testStripNonPrintable(): void + { + $this->assertSame("hello\nworld", new StripNonPrintableRule()->sanitize("hel\x00lo\nwor\x07ld", $this->ctx())); + } + + #[Test] + public function testStripNonPrintablePreservesTabsAndCR(): void + { + $this->assertSame("a\tb\r\nc", new StripNonPrintableRule()->sanitize("a\tb\r\nc", $this->ctx())); + } + + #[Test] + public function testStripNonPrintableNonString(): void + { + $this->assertSame(99, new StripNonPrintableRule()->sanitize(99, $this->ctx())); + } + + // ── Non-string passthrough (each rule must guard !is_string) ── + + #[Test] + public function testLowerCaseNonString(): void + { + $this->assertSame(42, new LowerCaseRule()->sanitize(42, $this->ctx())); + } + + #[Test] + public function testUpperCaseNonString(): void + { + $this->assertSame(42, new UpperCaseRule()->sanitize(42, $this->ctx())); + } + + #[Test] + public function testCapitalizeNonString(): void + { + $this->assertSame(42, new CapitalizeRule()->sanitize(42, $this->ctx())); + } + + #[Test] + public function testSlugNonString(): void + { + $this->assertSame(42, new SlugRule()->sanitize(42, $this->ctx())); + } + + #[Test] + public function testNormalizeWhitespaceNonString(): void + { + $this->assertSame(42, new NormalizeWhitespaceRule()->sanitize(42, $this->ctx())); + } + + #[Test] + public function testNormalizeLineEndingsNonString(): void + { + $this->assertSame(42, new NormalizeLineEndingsRule()->sanitize(42, $this->ctx())); + } + + #[Test] + public function testRegexReplaceNonString(): void + { + $this->assertSame(42, new RegexReplaceRule()->sanitize(42, $this->ctx())); + } + + #[Test] + public function testReplaceNonString(): void + { + $this->assertSame(42, new ReplaceRule()->sanitize(42, $this->ctx())); + } + + #[Test] + public function testTruncateNonString(): void + { + $this->assertSame(42, new TruncateRule()->sanitize(42, $this->ctx())); + } + + // ── PadRule 'both' side ─────────────────────────────────────── + + #[Test] + public function testPadBoth(): void + { + $this->assertSame('-hi--', new PadRule()->sanitize('hi', $this->ctx(['length' => 5, 'pad' => '-', 'side' => 'both']))); + } + + #[Test] + public function testPadNonString(): void + { + $this->assertSame(42, new PadRule()->sanitize(42, $this->ctx())); + } + + // ── Rule names (constant values — one assertSame per method) ── + + #[Test] + public function testTrimRuleName(): void + { + $this->assertSame('string.trim', new TrimRule()->getName()); + } + + #[Test] + public function testLowerCaseRuleName(): void + { + $this->assertSame('string.lower_case', new LowerCaseRule()->getName()); + } + + #[Test] + public function testUpperCaseRuleName(): void + { + $this->assertSame('string.upper_case', new UpperCaseRule()->getName()); + } + + #[Test] + public function testCapitalizeRuleName(): void + { + $this->assertSame('string.capitalize', new CapitalizeRule()->getName()); + } + + #[Test] + public function testSlugRuleName(): void + { + $this->assertSame('string.slug', new SlugRule()->getName()); + } + + #[Test] + public function testTruncateRuleName(): void + { + $this->assertSame('string.truncate', new TruncateRule()->getName()); + } + + #[Test] + public function testNormalizeWhitespaceRuleName(): void + { + $this->assertSame('string.normalize_whitespace', new NormalizeWhitespaceRule()->getName()); + } + + #[Test] + public function testNormalizeLineEndingsRuleName(): void + { + $this->assertSame('string.normalize_line_endings', new NormalizeLineEndingsRule()->getName()); + } + + #[Test] + public function testPadRuleName(): void + { + $this->assertSame('string.pad', new PadRule()->getName()); + } + + #[Test] + public function testReplaceRuleName(): void + { + $this->assertSame('string.replace', new ReplaceRule()->getName()); + } + + #[Test] + public function testRegexReplaceRuleName(): void + { + $this->assertSame('string.regex_replace', new RegexReplaceRule()->getName()); + } + + #[Test] + public function testStripNonPrintableRuleName(): void + { + $this->assertSame('string.strip_non_printable', new StripNonPrintableRule()->getName()); + } +} diff --git a/tests/Unit/Rule/Type/TypeRulesTest.php b/tests/Unit/Rule/Type/TypeRulesTest.php new file mode 100644 index 0000000..30a5321 --- /dev/null +++ b/tests/Unit/Rule/Type/TypeRulesTest.php @@ -0,0 +1,99 @@ +withField('test')->withParameters($params); + } + + #[Test] + public function testToBool(): void + { + $rule = new ToBoolRule(); + $this->assertTrue($rule->sanitize('true', $this->ctx())); + $this->assertTrue($rule->sanitize('yes', $this->ctx())); + $this->assertTrue($rule->sanitize('1', $this->ctx())); + $this->assertTrue($rule->sanitize('on', $this->ctx())); + $this->assertFalse($rule->sanitize('false', $this->ctx())); + $this->assertFalse($rule->sanitize('no', $this->ctx())); + $this->assertFalse($rule->sanitize('0', $this->ctx())); + $this->assertFalse($rule->sanitize('off', $this->ctx())); + $this->assertFalse($rule->sanitize('', $this->ctx())); + $this->assertSame('maybe', $rule->sanitize('maybe', $this->ctx())); + $this->assertTrue($rule->sanitize(true, $this->ctx())); + } + + #[Test] + public function testToBoolNumericValue(): void + { + $rule = new ToBoolRule(); + $this->assertTrue($rule->sanitize(1, $this->ctx())); + $this->assertFalse($rule->sanitize(0, $this->ctx())); + } + + #[Test] + public function testToBoolNonBoolNonStringNonNumericPassthrough(): void + { + // Covers the final `return $value` branch (line 34) when value is none of bool/string/numeric. + $rule = new ToBoolRule(); + $arr = ['key' => 'value']; + $this->assertSame($arr, $rule->sanitize($arr, $this->ctx())); + } + + #[Test] + public function testToString(): void + { + $rule = new ToStringRule(); + $this->assertSame('42', $rule->sanitize(42, $this->ctx())); + $this->assertSame('3.14', $rule->sanitize(3.14, $this->ctx())); + $this->assertSame('1', $rule->sanitize(true, $this->ctx())); + $this->assertSame('hello', $rule->sanitize('hello', $this->ctx())); + $this->assertSame([1], $rule->sanitize([1], $this->ctx())); // non-scalar passthrough + } + + #[Test] + public function testToArray(): void + { + $rule = new ToArrayRule(); + $this->assertSame([1, 2], $rule->sanitize([1, 2], $this->ctx())); + $this->assertSame(['hello'], $rule->sanitize('hello', $this->ctx())); + $this->assertSame([42], $rule->sanitize(42, $this->ctx())); + $this->assertSame([], $rule->sanitize(null, $this->ctx())); + } + + // ── Rule names (constant values — one assertSame per method) ── + + #[Test] + public function testToBoolRuleName(): void + { + $this->assertSame('type.to_bool', new ToBoolRule()->getName()); + } + + #[Test] + public function testToStringRuleName(): void + { + $this->assertSame('type.to_string', new ToStringRule()->getName()); + } + + #[Test] + public function testToArrayRuleName(): void + { + $this->assertSame('type.to_array', new ToArrayRule()->getName()); + } +} diff --git a/tests/UserProfile.php b/tests/UserProfile.php deleted file mode 100644 index e16a27b..0000000 --- a/tests/UserProfile.php +++ /dev/null @@ -1,342 +0,0 @@ - 'Name was trimmed', - 'html_purifier' => 'HTML was purified in name', - 'xss_sanitizer' => 'XSS attempt was removed from name', - 'html_special_chars' => 'Special characters were escaped in name', - ] - )] - private string $name = ''; - - /** - * User's email address - normalized and trimmed. - */ - #[Sanitize( - processors: ['trim', 'normalize_line_breaks', 'email_sanitizer'], - messages: [ - 'trim' => 'Email was trimmed', - 'normalize_line_breaks' => 'Line breaks in email were normalized', - 'email_sanitizer' => 'Email format was validated and sanitized', - ] - )] - private string $email = ''; - - /** - * User's age - stripped of HTML tags and trimmed. - */ - #[Sanitize( - processors: ['trim', 'strip_tags', 'numeric_sanitizer'], - messages: [ - 'trim' => 'Age was trimmed', - 'strip_tags' => 'HTML tags were removed from age', - 'numeric_sanitizer' => 'Age was validated as numeric', - ] - )] - private string $age = ''; - - /** - * User's biography - sanitized for HTML and markdown content. - */ - #[Sanitize( - processors: ['trim', 'html_purifier', 'markdown'], - messages: [ - 'trim' => 'Bio was trimmed', - 'html_purifier' => 'HTML was purified in bio', - 'markdown' => 'Markdown in bio was processed', - ] - )] - private string $bio = ''; - - /** - * Phone number - normalized and formatted. - */ - #[Sanitize( - processors: ['trim', 'phone_sanitizer'], - messages: [ - 'trim' => 'Phone number was trimmed', - 'phone_sanitizer' => 'Phone number was formatted', - ] - )] - private string $phone = ''; - - /** - * Website URL - validated and sanitized. - */ - #[Sanitize( - processors: ['trim', 'url_sanitizer'], - messages: [ - 'trim' => 'Website URL was trimmed', - 'url_sanitizer' => 'URL was validated and sanitized', - ] - )] - private string $website = ''; - - /** - * Social media handle - alphanumeric sanitization. - */ - #[Sanitize( - processors: ['trim', 'alphanumeric_sanitizer'], - messages: [ - 'trim' => 'Social media handle was trimmed', - 'alphanumeric_sanitizer' => 'Handle was sanitized to alphanumeric', - ] - )] - private string $socialHandle = ''; - - /** - * User's address - sanitized for special characters and line breaks. - */ - #[Sanitize( - processors: ['trim', 'normalize_line_breaks', 'html_special_chars'], - messages: [ - 'trim' => 'Address was trimmed', - 'normalize_line_breaks' => 'Address line breaks were normalized', - 'html_special_chars' => 'Special characters in address were escaped', - ] - )] - private string $address = ''; - - /** - * Constructor initializes default values. - */ - public function __construct() - { - $this->name = ''; - $this->email = ''; - $this->age = ''; - $this->bio = ''; - $this->phone = ''; - $this->website = ''; - $this->socialHandle = ''; - $this->address = ''; - } - - /** - * Get user's name. - */ - public function getName(): string - { - return $this->name; - } - - /** - * Set user's name. - */ - public function setName(string $name): self - { - $this->name = $name; - - return $this; - } - - /** - * Get user's email. - */ - public function getEmail(): string - { - return $this->email; - } - - /** - * Set user's email. - */ - public function setEmail(string $email): self - { - $this->email = $email; - - return $this; - } - - /** - * Get user's age. - */ - public function getAge(): string - { - return $this->age; - } - - /** - * Set user's age. - */ - public function setAge(string $age): self - { - $this->age = $age; - - return $this; - } - - /** - * Get user's biography. - */ - public function getBio(): string - { - return $this->bio; - } - - /** - * Set user's biography. - */ - public function setBio(string $bio): self - { - $this->bio = $bio; - - return $this; - } - - /** - * Get user's phone number. - */ - public function getPhone(): string - { - return $this->phone; - } - - /** - * Set user's phone number. - */ - public function setPhone(string $phone): self - { - $this->phone = $phone; - - return $this; - } - - /** - * Get user's website. - */ - public function getWebsite(): string - { - return $this->website; - } - - /** - * Set user's website. - */ - public function setWebsite(string $website): self - { - $this->website = $website; - - return $this; - } - - /** - * Get user's social media handle. - */ - public function getSocialHandle(): string - { - return $this->socialHandle; - } - - /** - * Set user's social media handle. - */ - public function setSocialHandle(string $socialHandle): self - { - $this->socialHandle = $socialHandle; - - return $this; - } - - /** - * Get user's address. - */ - public function getAddress(): string - { - return $this->address; - } - - /** - * Set user's address. - */ - public function setAddress(string $address): self - { - $this->address = $address; - - return $this; - } - - /** - * Convert user profile to array. - */ - public function toArray(): array - { - return [ - 'name' => $this->name, - 'email' => $this->email, - 'age' => $this->age, - 'bio' => $this->bio, - 'phone' => $this->phone, - 'website' => $this->website, - 'socialHandle' => $this->socialHandle, - 'address' => $this->address, - ]; - } - - /** - * Create UserProfile from array. - */ - public static function fromArray(array $data): self - { - $profile = new self(); - - if (isset($data['name'])) { - $profile->setName($data['name']); - } - if (isset($data['email'])) { - $profile->setEmail($data['email']); - } - if (isset($data['age'])) { - $profile->setAge($data['age']); - } - if (isset($data['bio'])) { - $profile->setBio($data['bio']); - } - if (isset($data['phone'])) { - $profile->setPhone($data['phone']); - } - if (isset($data['website'])) { - $profile->setWebsite($data['website']); - } - if (isset($data['socialHandle'])) { - $profile->setSocialHandle($data['socialHandle']); - } - if (isset($data['address'])) { - $profile->setAddress($data['address']); - } - - return $profile; - } - - /** - * Create string representation of UserProfile. - */ - public function __toString(): string - { - return sprintf( - "UserProfile(name='%s', email='%s', age='%s')", - $this->name, - $this->email, - $this->age - ); - } -} diff --git a/tests/application.php b/tests/application.php deleted file mode 100644 index 1caaba8..0000000 --- a/tests/application.php +++ /dev/null @@ -1,416 +0,0 @@ - [ - 'allowedTags' => [], - 'allowedAttributes' => [], - ], - 'xss_sanitizer', - ] - )] - private string $fullName = ''; - - #[Sanitize( - processors: [ - 'trim', - 'email_sanitizer' => [ - 'removeMailtoPrefix' => true, - 'typoReplacements' => [ - '@gmail.con' => '@gmail.com', - '@yaho.com' => '@yahoo.com', - ], - ], - ] - )] - private string $email = ''; - - #[Sanitize( - processors: [ - 'trim', - 'phone_sanitizer' => [ - 'applyFormat' => true, - 'format' => '(##) #####-####', - 'placeholder' => '#', - ], - ] - )] - private string $phone = ''; - - #[Sanitize( - processors: [ - 'trim', - 'html_purifier' => [ - 'allowedTags' => ['h2', 'p', 'ul', 'li', 'a'], - 'allowedAttributes' => ['href' => ['a']], - ], - ] - )] - private string $professionalSummary = ''; - - #[Sanitize( - processors: [ - 'trim', - 'numeric_sanitizer' => [ - 'allowDecimal' => false, - 'allowNegative' => false, - ], - ] - )] - private string $yearsOfExperience = ''; - - #[Sanitize( - processors: [ - 'trim', - 'url_sanitizer' => [ - 'enforceProtocol' => true, - 'defaultProtocol' => 'https://', - 'removeTrailingSlash' => true, - ], - ] - )] - private string $portfolioUrl = ''; - - #[Sanitize( - processors: [ - 'trim', - 'alphanumeric_sanitizer' => [ - 'allowUnderscore' => true, - 'allowDash' => true, - 'preserveCase' => false, - ], - ] - )] - private string $githubHandle = ''; - - #[Sanitize( - processors: [ - 'trim', - 'alphanumeric_sanitizer' => [ - 'allowUnderscore' => true, - 'allowDash' => false, - 'preserveCase' => false, - ], - ] - )] - private string $linkedinHandle = ''; - - #[Sanitize( - processors: [ - 'trim', - 'filename_sanitizer' => [ - 'replacement' => '-', - 'preserveExtension' => true, - 'allowedChars' => ['a-z', 'A-Z', '0-9', '-', '_', ' '], - ], - ] - )] - private string $resumeFileName = ''; - - #[Sanitize( - processors: [ - 'trim', - 'json_sanitizer', - ] - )] - private string $projectsJson = ''; - - #[Sanitize( - processors: [ - 'trim', - 'sql_injection' => [ - 'escapeMap' => [ - "'" => "\\'", - '"' => '\\"', - ], - ], - ] - )] - private string $searchQuery = ''; - - #[Sanitize( - processors: [ - 'trim', - 'strip_tags' => [ - 'allowedTags' => ['p', 'br'], - 'keepSafeAttributes' => true, - ], - ] - )] - private string $plainTextContent = ''; - - // Getters and Setters - public function getFullName(): string - { - return $this->fullName; - } - - public function setFullName(string $value): self - { - $this->fullName = $value; - - return $this; - } - - public function getEmail(): string - { - return $this->email; - } - - public function setEmail(string $value): self - { - $this->email = $value; - - return $this; - } - - public function getPhone(): string - { - return $this->phone; - } - - public function setPhone(string $value): self - { - $this->phone = $value; - - return $this; - } - - public function getProfessionalSummary(): string - { - return $this->professionalSummary; - } - - public function setProfessionalSummary(string $value): self - { - $this->professionalSummary = $value; - - return $this; - } - - public function getYearsOfExperience(): string - { - return $this->yearsOfExperience; - } - - public function setYearsOfExperience(string $value): self - { - $this->yearsOfExperience = $value; - - return $this; - } - - public function getPortfolioUrl(): string - { - return $this->portfolioUrl; - } - - public function setPortfolioUrl(string $value): self - { - $this->portfolioUrl = $value; - - return $this; - } - - public function getGithubHandle(): string - { - return $this->githubHandle; - } - - public function setGithubHandle(string $value): self - { - $this->githubHandle = $value; - - return $this; - } - - public function getLinkedinHandle(): string - { - return $this->linkedinHandle; - } - - public function setLinkedinHandle(string $value): self - { - $this->linkedinHandle = $value; - - return $this; - } - - public function getResumeFileName(): string - { - return $this->resumeFileName; - } - - public function setResumeFileName(string $value): self - { - $this->resumeFileName = $value; - - return $this; - } - - public function getProjectsJson(): string - { - return $this->projectsJson; - } - - public function setProjectsJson(string $value): self - { - $this->projectsJson = $value; - - return $this; - } - - public function getSearchQuery(): string - { - return $this->searchQuery; - } - - public function setSearchQuery(string $value): self - { - $this->searchQuery = $value; - - return $this; - } - - public function getPlainTextContent(): string - { - return $this->plainTextContent; - } - - public function setPlainTextContent(string $value): self - { - $this->plainTextContent = $value; - - return $this; - } -} - -// Create and configure the registry -$registry = new ProcessorRegistry(); - -// Register all required processors -$registry->register('sanitizer', 'trim', new TrimSanitizer()); -$registry->register('sanitizer', 'html_special_chars', new HtmlSpecialCharsSanitizer()); -$registry->register('sanitizer', 'normalize_line_breaks', new NormalizeLineBreaksSanitizer()); -$registry->register('sanitizer', 'html_purifier', new HtmlPurifierSanitizer()); -$registry->register('sanitizer', 'markdown', new MarkdownSanitizer()); -$registry->register('sanitizer', 'numeric_sanitizer', new NumericSanitizer()); -$registry->register('sanitizer', 'email_sanitizer', new EmailSanitizer()); -$registry->register('sanitizer', 'phone_sanitizer', new PhoneSanitizer()); -$registry->register('sanitizer', 'url_sanitizer', new UrlSanitizer()); -$registry->register('sanitizer', 'alphanumeric_sanitizer', new AlphanumericSanitizer()); -$registry->register('sanitizer', 'filename_sanitizer', new FilenameSanitizer()); -$registry->register('sanitizer', 'json_sanitizer', new JsonSanitizer()); -$registry->register('sanitizer', 'xss_sanitizer', new XssSanitizer()); -$registry->register('sanitizer', 'sql_injection', new SqlInjectionSanitizer()); -$registry->register('sanitizer', 'strip_tags', new StripTagsSanitizer()); - -// Create the sanitizer -$sanitizer = new Sanitizer($registry); - -// Create an application with potentially dangerous data -$application = new JobApplication(); -$application - ->setFullName(" Walmir Silva ") - ->setEmail(" walmir.silva@gmail.con \n") - ->setPhone('11987654321') - ->setProfessionalSummary(" -Professional Summary
- -I am a senior developer with experience in:
- --
-
- PHP Development -
- Database Design -
- System Architecture -
Visit my website: My Portfolio
-") - ->setYearsOfExperience('10') - ->setPortfolioUrl('example.com/portfolio') - ->setGithubHandle('@walmir-silva') - ->setLinkedinHandle('Walmir-Silva') - ->setResumeFileName('Walmir Silva Resume (2024).pdf') - ->setProjectsJson('{ - "projects": [ - { - "name": "E-commerce Platform", - "role": "Lead Developer", - "duration": "2 years" - } - ] - }') - ->setProjectsJson('{ - "projects": [ - { - "name": "E-commerce Platform", - "role": "Lead Developer", - "duration": "2 years" - } - ] - }') - ->setSearchQuery("SELECT * FROM users'; DROP TABLE users; --") - ->setPlainTextContent('Este é um texto com algumas tags HTML que precisam ser tratadas
'); - -// Function to display the results - -function displayResults(JobApplication $application, array $result): void -{ - echo "Job Application Sanitization Results:\n"; - echo "=====================================\n\n"; - - echo "Sanitized Values:\n"; - echo "----------------\n"; - - // Display all sanitized values with clear formatting - echo sprintf("Full Name: %s\n", $application->getFullName()); - echo sprintf("Email: %s\n", $application->getEmail()); - echo sprintf("Phone: %s\n", $application->getPhone()); - echo sprintf("Years of Experience: %s\n", $application->getYearsOfExperience()); - echo sprintf("Portfolio URL: %s\n", $application->getPortfolioUrl()); - echo sprintf("GitHub Handle: %s\n", $application->getGithubHandle()); - echo sprintf("LinkedIn Handle: %s\n", $application->getLinkedinHandle()); - echo sprintf("Resume Filename: %s\n", $application->getResumeFileName()); - // Adicionar os novos campos aqui - echo sprintf("Search Query: %s\n", $application->getSearchQuery()); - echo sprintf("Plain Text Content: %s\n", $application->getPlainTextContent()); - - echo "\nProfessional Summary:\n"; - echo "-------------------\n"; - echo $application->getProfessionalSummary() . "\n\n"; - - echo "Projects JSON:\n"; - echo "-------------\n"; - echo $application->getProjectsJson() . "\n"; -} - -// Sanitize the application and display results -$result = $sanitizer->sanitize($application); -displayResults($application, $result->toArray()); diff --git a/tests/post.php b/tests/post.php deleted file mode 100644 index 68480ff..0000000 --- a/tests/post.php +++ /dev/null @@ -1,184 +0,0 @@ - 'Title was trimmed', - 'html_special_chars' => 'Special characters in title were escaped', - 'xss_sanitizer' => 'XSS attempt was removed from title', - ] - )] - private string $title = ''; - - #[Sanitize( - processors: ['trim', 'normalize_line_breaks'], - messages: [ - 'trim' => 'Slug was trimmed', - 'normalize_line_breaks' => 'Line breaks in slug were normalized', - ] - )] - private string $slug = ''; - - #[Sanitize( - processors: ['trim', 'markdown', 'html_purifier'], - messages: [ - 'trim' => 'Content was trimmed', - 'markdown' => 'Markdown in content was processed', - 'html_purifier' => 'HTML in content was purified', - ] - )] - private string $content = ''; - - #[Sanitize( - processors: ['trim', 'strip_tags', 'html_special_chars'], - messages: [ - 'trim' => 'Author name was trimmed', - 'strip_tags' => 'HTML tags were removed from author name', - 'html_special_chars' => 'Special characters in author name were escaped', - ] - )] - private string $authorName = ''; - - // Getters and setters... - - public function getTitle(): string - { - return $this->title; - } - - public function setTitle(string $title): void - { - $this->title = $title; - } - - public function getSlug(): string - { - return $this->slug; - } - - public function setSlug(string $slug): void - { - $this->slug = $slug; - } - - public function getContent(): string - { - return $this->content; - } - - public function setContent(string $content): void - { - $this->content = $content; - } - - public function getAuthorName(): string - { - return $this->authorName; - } - - public function setAuthorName(string $authorName): void - { - $this->authorName = $authorName; - } -} - -// Set up the sanitizer -$registry = new ProcessorRegistry(); -$registry->register('sanitizer', 'trim', new TrimSanitizer()); -$registry->register('sanitizer', 'html_special_chars', new HtmlSpecialCharsSanitizer()); -$registry->register('sanitizer', 'normalize_line_breaks', new NormalizeLineBreaksSanitizer()); -$registry->register('sanitizer', 'strip_tags', new StripTagsSanitizer()); -$registry->register('sanitizer', 'markdown', new MarkdownSanitizer()); -$registry->register('sanitizer', 'xss_sanitizer', new XssSanitizer()); - -// Configure HTML Purifier with specific settings for blog content -$htmlPurifier = new HtmlPurifierSanitizer(); -$htmlPurifier->configure([ - 'allowedTags' => ['p', 'br', 'strong', 'em', 'u', 'ol', 'ul', 'li', 'a', 'img', 'h2', 'h3', 'blockquote'], - 'allowedAttributes' => ['href' => ['a'], 'src' => ['img'], 'alt' => ['img']], -]); -$registry->register('sanitizer', 'html_purifier', $htmlPurifier); - -$sanitizer = new Sanitizer($registry); - -// Simulating form submission with potentially unsafe data -$blogPost = new BlogPost(); -$blogPost->setTitle(" Exploring KaririCode: A Modern PHP Framework "); -$blogPost->setSlug(" exploring-kariricode-a-modern-php-framework \r\n"); -$blogPost->setContent(" -# Introduction - -KaririCode is a **powerful** and _flexible_ PHP framework designed for modern web development. - - - -## Key Features - -1. Robust sanitization -2. Efficient routing -3. Powerful ORM - -Check out our [official website](https://kariricode.org) for more information! - -![](\"harmful.jpg\")
-");
-
-$blogPost->setAuthorName("John Doe ");
-
-// Function to display original and sanitized values
-function displayBlogPost(BlogPost $post, Sanitizer $sanitizer)
-{
- echo "Original Blog Post:\n";
- echo "Title: \"{$post->getTitle()}\"\n";
- echo "Slug: \"{$post->getSlug()}\"\n";
- echo "Content: \"{$post->getContent()}\"\n";
- echo "Author: \"{$post->getAuthorName()}\"\n\n";
-
- $result = $sanitizer->sanitize($post);
-
- echo "Sanitized Blog Post:\n";
- echo "Title: \"{$result['object']->getTitle()}\"\n";
- echo "Slug: \"{$result['object']->getSlug()}\"\n";
- echo "Content: \"{$result['object']->getContent()}\"\n";
- echo "Author: \"{$result['object']->getAuthorName()}\"\n\n";
-
- if (!empty($result['sanitizedValues'])) {
- echo "Sanitization Details:\n";
- foreach ($result['sanitizedValues'] as $property => $data) {
- echo ucfirst($property) . ":\n";
- foreach ($data['messages'] as $processorName => $message) {
- echo " - [$processorName] $message\n";
- }
- }
- }
-
- if (!empty($result['errors'])) {
- echo "\nErrors:\n";
- foreach ($result['errors'] as $property => $errors) {
- echo ucfirst($property) . ":\n";
- foreach ($errors as $error) {
- echo " - $error\n";
- }
- }
- }
-}
-
-// Display and sanitize the blog post
-displayBlogPost($blogPost, $sanitizer);