function FormTest::testGetFormsCsrfToken

CSRF tokens for GET forms should not be added by default.

File

core/modules/system/tests/src/Functional/Form/FormTest.php, line 334

Class

FormTest

Tests various form element validation mechanisms.

Namespace

Code

public function testGetFormsCsrfToken() : void {
    // We need to be logged in to have CSRF tokens.
    $account = $this->createUser();
    $this->drupalLogin($account);
    $this->drupalGet(Url::fromRoute('form_test.get_form'));
    $this->assertSession()
        ->responseNotContains('form_token');
}