x
{% endapply %}{% endautoescape %}", ])); $twig->addExtension(new CssInlinerExtension()); $output = $twig->render('index'); $this->assertStringNotContainsString('', $output); $this->assertStringNotContainsString('
', $output); $this->assertMatchesRegularExpression('{\\\\u003[Cc]p\\\\u003[Ee]x\\\\u003[Cc]\\\\/p\\\\u003[Ee]}', $output); } public function testInlineCssPreEscapesUnsafeInput(): void { $twig = new Environment(new ArrayLoader([ 'index' => '{{ payload|inline_css }}', ])); $twig->addExtension(new CssInlinerExtension()); $output = $twig->render('index', ['payload' => '']); $this->assertStringNotContainsString('