// Create an attacker user.
$attacker_user =
$this->
drupalCreateUser([ 'access content',
'create article content',
'edit any article content',
]);
// Log in as the attacker user.
$this->
drupalLogin($attacker_user);
// Perform tests using the newly created users.
$this->
doTestTemporaryFileRemovalExploit($victim_user,
$attacker_user);
} /**
* Tests exploiting the temporary file removal for anonymous users using fid.
*/
public function testTemporaryFileRemovalExploitAnonymous() { // Set up an anonymous victim user.
$victim_user = User::
getAnonymousUser();
// Set up an anonymous attacker user.
$attacker_user = User::
getAnonymousUser();