save = array(Router::$current_uri, Router::$complete_uri, $_GET); } public function teardown() { list(Router::$current_uri, Router::$complete_uri, $_GET) = $this->save; } public function xss_in_current_url_test() { Router::$current_uri = "foo//bar"; Router::$complete_uri = "foo//bar?foo=bar"; $this->assert_same("foo/<xss>/bar", url::current()); $this->assert_same("foo/<xss>/bar?foo=bar", url::current(true)); } public function xss_in_merged_url_test() { Router::$current_uri = "foo//bar"; Router::$complete_uri = "foo//bar?foo=bar"; $_GET = array("foo" => "bar"); $this->assert_same("foo/<xss>/bar?foo=bar", url::merge(array())); $this->assert_same("foo/<xss>/bar?foo=bar&a=b", url::merge(array("a" => "b"))); } }