public function testUpdateWithNastyRequestShouldThrowErrors() { $this->request->set('children', array('DROP DATABASE http://xkcd.com/327/')); $this->dao->expectNever('updateChildren'); $this->expectFeedback('error', '*'); $this->expectRedirectTo($this->redirect_url); $controller = new Tracker_Hierarchy_Controller($this->request, $this->hierarchical_tracker, $this->factory, $this->dao); $controller->update(); }