assertSame('', makeFieldLinks(['title' => 'Test'], 'genre', 'movies')); } public function test_returns_empty_string_when_field_empty(): void { $this->assertSame('', makeFieldLinks(['genre' => ''], 'genre', 'movies')); } public function test_builds_links_for_comma_separated_values(): void { $result = makeFieldLinks(['genre' => 'Action, Drama'], 'genre', 'movies'); $this->assertStringContainsString('?genre=Action', $result); $this->assertStringContainsString('>Action', $result); $this->assertStringContainsString('?genre=Drama', $result); $this->assertStringContainsString('>Drama', $result); } public function test_escapes_html_in_link_text_and_title(): void { $malicious = '">'; $result = makeFieldLinks(['actors' => $malicious], 'actors', 'movies'); $this->assertStringNotContainsString('