bterkuile/fizzy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Format

Browse Source
This commit is contained in:
Jorge Manrubia
2025-11-28 12:17:21 +01:00
parent efe3070499
commit 2f4a05a39f
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
test/controllers/concerns/request_forgery_protection_test.rb
+6 -6
View File
@@ -33,7 +33,7 @@ class RequestForgeryProtectionTest < ActionDispatch::IntegrationTest
test "fail and report when token doesn't match, regardless of Sec-Fetch-Site" do
assert_report
assert_log(includes: ["CSRF protection check", "sec_fetch_site pass (same-origin)", "token fail"]) do
assert_log(includes: [ "CSRF protection check", "sec_fetch_site pass (same-origin)", "token fail" ]) do
assert_no_difference -> { Board.count } do
post boards_path,
params: { board: { name: "Test Board" }, authenticity_token: "invalid-token" },
@@ -45,8 +45,8 @@ class RequestForgeryProtectionTest < ActionDispatch::IntegrationTest
test "fail and report when Origin doesn't match, regardless of Sec-Fetch-Site" do
assert_report
assert_log(includes: ["CSRF protection check", "sec_fetch_site pass (same-origin)",
"token pass", "origin fail (evil-site.com)"]) do
assert_log(includes: [ "CSRF protection check", "sec_fetch_site pass (same-origin)",
"token pass", "origin fail (evil-site.com)" ]) do
assert_no_difference -> { Board.count } do
post boards_path,
params: { board: { name: "Test Board" }, authenticity_token: csrf_token },
@@ -58,7 +58,7 @@ class RequestForgeryProtectionTest < ActionDispatch::IntegrationTest
test "succeed and report when Sec-Fetch-Site is cross-site and CSRF token matches" do
assert_report
assert_log(includes: ["CSRF protection check", "sec_fetch_site fail (cross-site)", "token pass"]) do
assert_log(includes: [ "CSRF protection check", "sec_fetch_site fail (cross-site)", "token pass" ]) do
assert_difference -> { Board.count }, +1 do
post boards_path,
params: { board: { name: "Test Board" }, authenticity_token: csrf_token },
@@ -70,7 +70,7 @@ class RequestForgeryProtectionTest < ActionDispatch::IntegrationTest
test "succeed and report when Sec-Fetch-Site is none" do
assert_report
assert_log(includes: ["CSRF protection check", "sec_fetch_site fail (none)", "token pass"]) do
assert_log(includes: [ "CSRF protection check", "sec_fetch_site fail (none)", "token pass" ]) do
assert_difference -> { Board.count }, +1 do
post boards_path,
params: { board: { name: "Test Board" }, authenticity_token: csrf_token },
@@ -82,7 +82,7 @@ class RequestForgeryProtectionTest < ActionDispatch::IntegrationTest
test "succeed and report when Sec-Fetch-Site is missing" do
assert_report
assert_log(includes: ["CSRF protection check", "sec_fetch_site fail ()", "token pass"]) do
assert_log(includes: [ "CSRF protection check", "sec_fetch_site fail ()", "token pass" ]) do
assert_difference -> { Board.count }, +1 do
post boards_path, params: { board: { name: "Test Board" }, authenticity_token: csrf_token }
end