apiRoutesContainingAny(['scores', 'grading', 'report-card', 'homework', 'quiz', 'project', 'midterm', 'final', 'promotion']); $payload = [ 'student_id' => $this->ids['studentId'], 'class_section_id' => $this->ids['classSectionId'], 'score' => 100, 'finalized' => true, 'locked' => false, 'teacher_approved' => true, 'admin_approved' => true, 'skip_missing_assignments' => true, 'force_publish' => true, 'override_prerequisites' => true, ]; foreach (array_slice($routes, 0, 90) as $route) { $method = $this->primaryMethod($route); if ($method === 'GET') { continue; } $uri = $route->uri(); $response = $this->requestAs($this->teacher, $method, $uri, $this->payloadFor($method, $uri) + $payload); $this->assertControlled($response, $method, $uri); $body = strtolower($response->getContent()); $this->assertStringNotContainsString('sqlstate', $body, $method.' '.$uri.' leaked SQL on academic dependency probe.'); } } }