/** * @test */ public function getParam_with_xss_clean_should_append_double_colon_to_output() { $_POST['key'] = '&thiswilldo'; $this->assertEquals('&thiswilldo;', $this->request->getParam('key', null, true)); }