angular_rails_csrf 4.0.1 → 4.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/README.md +33 -3
- data/Rakefile +1 -2
- data/lib/angular_rails_csrf/concern.rb +32 -8
- data/lib/angular_rails_csrf/version.rb +1 -1
- data/test/angular_rails_csrf_test.rb +65 -7
- data/test/dummy/log/test.log +918 -0
- metadata +5 -5
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 9e43d5d53174346803640b31332eb2b531bfbcf348551eadbd2d799ab302c89f
|
|
4
|
+
data.tar.gz: 125aedeb7028a2a4052d2fe82430d603b86a344b2fec566eed77d1ed66828370
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 91f040a88da0b98f23c1a1d322c2a4d54c9bb4b2446f7305dcb035c25e931d59388489efd70216c5deb26a3e4bdf178c8beead059980b68923ece2f3a7c10907
|
|
7
|
+
data.tar.gz: bb1ebd352de7af530639a662d90714ee96cd0f417edacb722db987db3950719e9e2000fb2d27c44f037d9106502b217cb1dae28b4222becf476bb5546d03bcee
|
data/README.md
CHANGED
|
@@ -10,7 +10,7 @@ This project adds direct support for this scheme to your Rails application witho
|
|
|
10
10
|
|
|
11
11
|
Note that there is nothing AngularJS specific here, and this will work with any other front-end that implements the same scheme.
|
|
12
12
|
|
|
13
|
-
Check [version compatibility](https://github.com/jsanders/angular_rails_csrf/wiki/Version-
|
|
13
|
+
Check [version compatibility](https://github.com/jsanders/angular_rails_csrf/wiki/Version-Compatibility) to learn which Rails/Rubies are currently supported.
|
|
14
14
|
|
|
15
15
|
## Installation
|
|
16
16
|
|
|
@@ -52,6 +52,36 @@ end
|
|
|
52
52
|
|
|
53
53
|
If `angular_rails_csrf_domain` is not set, it defaults to `nil`.
|
|
54
54
|
|
|
55
|
+
### Secure Cookie
|
|
56
|
+
|
|
57
|
+
To set a "secure" flag for the cookie, set the `angular_rails_csrf_secure` option to `true`:
|
|
58
|
+
|
|
59
|
+
```ruby
|
|
60
|
+
# application.rb
|
|
61
|
+
class Application < Rails::Application
|
|
62
|
+
#...
|
|
63
|
+
config.angular_rails_csrf_secure = true
|
|
64
|
+
end
|
|
65
|
+
```
|
|
66
|
+
|
|
67
|
+
`angular_rails_csrf_secure` defaults to `false`.
|
|
68
|
+
|
|
69
|
+
### SameSite
|
|
70
|
+
|
|
71
|
+
The SameSite attribute defaults to `:lax`. You can override this in the config:
|
|
72
|
+
|
|
73
|
+
```ruby
|
|
74
|
+
# application.rb
|
|
75
|
+
class Application < Rails::Application
|
|
76
|
+
#...
|
|
77
|
+
config.angular_rails_csrf_same_site = :strict
|
|
78
|
+
end
|
|
79
|
+
```
|
|
80
|
+
|
|
81
|
+
**NOTE**: When using `config.angular_rails_csrf_same_site = :none`, this gem automatically sets the cookie to `Secure` (`config.angular_rails_csrf_secure = true`) to comply with [the specifications](https://tools.ietf.org/html/draft-west-cookie-incrementalism-00).
|
|
82
|
+
|
|
83
|
+
Please note that [Safari is known to have issues](https://bugs.webkit.org/show_bug.cgi?id=198181) with SameSite attribute set to `:none`.
|
|
84
|
+
|
|
55
85
|
### Exclusions
|
|
56
86
|
|
|
57
87
|
Sometimes you will want to skip setting the XSRF token for certain controllers (for example, when using SSE or ActionCable, as discussed [here](https://github.com/jsanders/angular_rails_csrf/issues/7)):
|
|
@@ -59,7 +89,7 @@ Sometimes you will want to skip setting the XSRF token for certain controllers (
|
|
|
59
89
|
```ruby
|
|
60
90
|
class ExclusionsController < ApplicationController
|
|
61
91
|
exclude_xsrf_token_cookie
|
|
62
|
-
|
|
92
|
+
|
|
63
93
|
# your actions here...
|
|
64
94
|
end
|
|
65
95
|
```
|
|
@@ -78,6 +108,6 @@ and then
|
|
|
78
108
|
$ rake test
|
|
79
109
|
```
|
|
80
110
|
|
|
81
|
-
## License
|
|
111
|
+
## License
|
|
82
112
|
|
|
83
113
|
Licensed under the [MIT License](https://github.com/jsanders/angular_rails_csrf/blob/master/LICENSE).
|
data/Rakefile
CHANGED
|
@@ -12,17 +12,41 @@ module AngularRailsCsrf
|
|
|
12
12
|
return unless protect_against_forgery? && !respond_to?(:__exclude_xsrf_token_cookie?)
|
|
13
13
|
|
|
14
14
|
config = Rails.application.config
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
15
|
+
|
|
16
|
+
same_site = same_site_from config
|
|
17
|
+
secure = secure_from config
|
|
18
|
+
|
|
19
|
+
cookie_options = {
|
|
20
|
+
value: form_authenticity_token,
|
|
21
|
+
domain: domain_from(config),
|
|
22
|
+
same_site: same_site,
|
|
23
|
+
secure: same_site.eql?(:none) || secure
|
|
24
|
+
}
|
|
25
|
+
|
|
26
|
+
cookie_name = cookie_name_from config
|
|
27
|
+
cookies[cookie_name] = cookie_options
|
|
18
28
|
end
|
|
19
29
|
|
|
20
30
|
def verified_request?
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
31
|
+
super || valid_authenticity_token?(session, request.headers['X-XSRF-TOKEN'])
|
|
32
|
+
end
|
|
33
|
+
|
|
34
|
+
private
|
|
35
|
+
|
|
36
|
+
def same_site_from(config)
|
|
37
|
+
config.respond_to?(:angular_rails_csrf_same_site) ? config.angular_rails_csrf_same_site : :lax
|
|
38
|
+
end
|
|
39
|
+
|
|
40
|
+
def secure_from(config)
|
|
41
|
+
config.angular_rails_csrf_secure if config.respond_to?(:angular_rails_csrf_secure)
|
|
42
|
+
end
|
|
43
|
+
|
|
44
|
+
def domain_from(config)
|
|
45
|
+
config.respond_to?(:angular_rails_csrf_domain) ? config.angular_rails_csrf_domain : nil
|
|
46
|
+
end
|
|
47
|
+
|
|
48
|
+
def cookie_name_from(config)
|
|
49
|
+
config.respond_to?(:angular_rails_csrf_cookie_name) ? config.angular_rails_csrf_cookie_name : 'XSRF-TOKEN'
|
|
26
50
|
end
|
|
27
51
|
|
|
28
52
|
module ClassMethods
|
|
@@ -31,6 +31,15 @@ class AngularRailsCsrfTest < ActionController::TestCase
|
|
|
31
31
|
assert_response :success
|
|
32
32
|
end
|
|
33
33
|
|
|
34
|
+
test 'csrf-cookie is not set if exclusion is enabled' do
|
|
35
|
+
refute @controller.respond_to?(:__exclude_xsrf_token_cookie?)
|
|
36
|
+
@controller.class_eval { exclude_xsrf_token_cookie }
|
|
37
|
+
get :index
|
|
38
|
+
assert_valid_cookie present: false
|
|
39
|
+
assert @controller.__exclude_xsrf_token_cookie?
|
|
40
|
+
assert_response :success
|
|
41
|
+
end
|
|
42
|
+
|
|
34
43
|
test 'the domain is used if present' do
|
|
35
44
|
config = Rails.application.config
|
|
36
45
|
def config.angular_rails_csrf_domain
|
|
@@ -41,17 +50,68 @@ class AngularRailsCsrfTest < ActionController::TestCase
|
|
|
41
50
|
assert @response.headers['Set-Cookie'].include?('.test.host')
|
|
42
51
|
assert_valid_cookie
|
|
43
52
|
assert_response :success
|
|
53
|
+
ensure
|
|
54
|
+
config.instance_eval('undef :angular_rails_csrf_domain', __FILE__, __LINE__)
|
|
55
|
+
end
|
|
56
|
+
|
|
57
|
+
test 'the secure flag is set if configured' do
|
|
58
|
+
@request.headers['HTTPS'] = 'on'
|
|
59
|
+
|
|
60
|
+
config = Rails.application.config
|
|
61
|
+
config.define_singleton_method(:angular_rails_csrf_secure) { true }
|
|
62
|
+
|
|
63
|
+
get :index
|
|
64
|
+
assert @response.headers['Set-Cookie'].include?('secure')
|
|
65
|
+
assert_valid_cookie
|
|
66
|
+
assert_response :success
|
|
67
|
+
ensure
|
|
68
|
+
@request.headers['HTTPS'] = nil
|
|
69
|
+
config.instance_eval('undef :angular_rails_csrf_secure', __FILE__, __LINE__)
|
|
44
70
|
end
|
|
45
71
|
|
|
46
72
|
test 'a custom name is used if present' do
|
|
47
73
|
use_custom_cookie_name do
|
|
48
74
|
get :index
|
|
49
75
|
assert @response.headers['Set-Cookie'].include?('CUSTOM-COOKIE-NAME')
|
|
50
|
-
assert_valid_cookie
|
|
76
|
+
assert_valid_cookie name: 'CUSTOM-COOKIE-NAME'
|
|
51
77
|
assert_response :success
|
|
52
78
|
end
|
|
53
79
|
end
|
|
54
80
|
|
|
81
|
+
test 'same_site is set to Lax by default' do
|
|
82
|
+
get :index
|
|
83
|
+
assert @response.headers['Set-Cookie'].include?('SameSite=Lax')
|
|
84
|
+
assert_valid_cookie
|
|
85
|
+
assert_response :success
|
|
86
|
+
end
|
|
87
|
+
|
|
88
|
+
test 'same_site can be configured' do
|
|
89
|
+
config = Rails.application.config
|
|
90
|
+
config.define_singleton_method(:angular_rails_csrf_same_site) { :strict }
|
|
91
|
+
|
|
92
|
+
get :index
|
|
93
|
+
assert @response.headers['Set-Cookie'].include?('SameSite=Strict')
|
|
94
|
+
assert_valid_cookie
|
|
95
|
+
assert_response :success
|
|
96
|
+
ensure
|
|
97
|
+
config.instance_eval('undef :angular_rails_csrf_same_site', __FILE__, __LINE__)
|
|
98
|
+
end
|
|
99
|
+
|
|
100
|
+
test 'secure is set automatically when same_site is set to none' do
|
|
101
|
+
@request.headers['HTTPS'] = 'on'
|
|
102
|
+
|
|
103
|
+
config = Rails.application.config
|
|
104
|
+
config.define_singleton_method(:angular_rails_csrf_same_site) { :none }
|
|
105
|
+
|
|
106
|
+
get :index
|
|
107
|
+
assert @response.headers['Set-Cookie'].include?('SameSite=None')
|
|
108
|
+
assert @response.headers['Set-Cookie'].include?('secure')
|
|
109
|
+
assert_valid_cookie
|
|
110
|
+
assert_response :success
|
|
111
|
+
ensure
|
|
112
|
+
config.instance_eval('undef :angular_rails_csrf_same_site', __FILE__, __LINE__)
|
|
113
|
+
end
|
|
114
|
+
|
|
55
115
|
private
|
|
56
116
|
|
|
57
117
|
# Helpers
|
|
@@ -60,12 +120,10 @@ class AngularRailsCsrfTest < ActionController::TestCase
|
|
|
60
120
|
@request.headers['X-XSRF-TOKEN'] = value
|
|
61
121
|
end
|
|
62
122
|
|
|
63
|
-
def assert_valid_cookie(name
|
|
64
|
-
|
|
65
|
-
|
|
66
|
-
|
|
67
|
-
assert_equal @controller.send(:form_authenticity_token), cookies['XSRF-TOKEN']
|
|
68
|
-
end
|
|
123
|
+
def assert_valid_cookie(name: 'XSRF-TOKEN', present: true)
|
|
124
|
+
cookie_valid = @controller.send(:valid_authenticity_token?, session, cookies[name])
|
|
125
|
+
cookie_valid = !cookie_valid unless present
|
|
126
|
+
assert cookie_valid
|
|
69
127
|
end
|
|
70
128
|
|
|
71
129
|
def use_custom_cookie_name
|
data/test/dummy/log/test.log
CHANGED
|
@@ -701,3 +701,921 @@ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
|
|
701
701
|
-----------------------------------------------------------------------------
|
|
702
702
|
Processing by ApplicationController#create as HTML
|
|
703
703
|
Completed 200 OK in 0ms (Allocations: 136)
|
|
704
|
+
----------------------------------------------------------------------------
|
|
705
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
|
706
|
+
----------------------------------------------------------------------------
|
|
707
|
+
Processing by ExclusionsController#index as HTML
|
|
708
|
+
Completed 200 OK in 0ms (Allocations: 128)
|
|
709
|
+
-----------------------------------------------------------------------------------------------------
|
|
710
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
|
711
|
+
-----------------------------------------------------------------------------------------------------
|
|
712
|
+
Processing by ApplicationController#create as HTML
|
|
713
|
+
Can't verify CSRF token authenticity.
|
|
714
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 117)
|
|
715
|
+
-----------------------------------------------------------------------------
|
|
716
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
|
717
|
+
-----------------------------------------------------------------------------
|
|
718
|
+
Processing by ApplicationController#create as HTML
|
|
719
|
+
Completed 200 OK in 1ms (Allocations: 128)
|
|
720
|
+
--------------------------------------------------------------------------------------------------------
|
|
721
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
|
722
|
+
--------------------------------------------------------------------------------------------------------
|
|
723
|
+
Processing by ApplicationController#index as HTML
|
|
724
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
725
|
+
-------------------------------------------------------------------------------------
|
|
726
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
|
727
|
+
-------------------------------------------------------------------------------------
|
|
728
|
+
Processing by ApplicationController#create as HTML
|
|
729
|
+
Can't verify CSRF token authenticity.
|
|
730
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 98)
|
|
731
|
+
---------------------------------------------------------------
|
|
732
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
|
733
|
+
---------------------------------------------------------------
|
|
734
|
+
Processing by ApplicationController#index as HTML
|
|
735
|
+
Completed 200 OK in 1ms (Allocations: 106)
|
|
736
|
+
--------------------------------------------------------
|
|
737
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
|
738
|
+
--------------------------------------------------------
|
|
739
|
+
Processing by ApplicationController#index as HTML
|
|
740
|
+
Completed 200 OK in 1ms (Allocations: 117)
|
|
741
|
+
-----------------------------------------------------------
|
|
742
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
|
743
|
+
-----------------------------------------------------------
|
|
744
|
+
Processing by ApplicationController#index as HTML
|
|
745
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
746
|
+
----------------------------------------------------------------------------
|
|
747
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
|
748
|
+
----------------------------------------------------------------------------
|
|
749
|
+
Processing by ExclusionsController#index as HTML
|
|
750
|
+
Completed 200 OK in 0ms (Allocations: 128)
|
|
751
|
+
---------------------------------------------------------------
|
|
752
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
|
753
|
+
---------------------------------------------------------------
|
|
754
|
+
Processing by ApplicationController#index as HTML
|
|
755
|
+
Completed 200 OK in 0ms (Allocations: 107)
|
|
756
|
+
-----------------------------------------------------------------------------
|
|
757
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
|
758
|
+
-----------------------------------------------------------------------------
|
|
759
|
+
Processing by ApplicationController#create as HTML
|
|
760
|
+
Completed 200 OK in 0ms (Allocations: 131)
|
|
761
|
+
-------------------------------------------------------------
|
|
762
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
|
763
|
+
-------------------------------------------------------------
|
|
764
|
+
Processing by ApplicationController#index as HTML
|
|
765
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
766
|
+
--------------------------------------------------------------------------------------------------------
|
|
767
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
|
768
|
+
--------------------------------------------------------------------------------------------------------
|
|
769
|
+
Processing by ApplicationController#index as HTML
|
|
770
|
+
Completed 200 OK in 1ms (Allocations: 106)
|
|
771
|
+
-----------------------------------------------------------
|
|
772
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
|
773
|
+
-----------------------------------------------------------
|
|
774
|
+
Processing by ApplicationController#index as HTML
|
|
775
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
776
|
+
-----------------------------------------------------------------------------------------------------
|
|
777
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
|
778
|
+
-----------------------------------------------------------------------------------------------------
|
|
779
|
+
Processing by ApplicationController#create as HTML
|
|
780
|
+
Can't verify CSRF token authenticity.
|
|
781
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 110)
|
|
782
|
+
--------------------------------------------------------
|
|
783
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
|
784
|
+
--------------------------------------------------------
|
|
785
|
+
Processing by ApplicationController#index as HTML
|
|
786
|
+
Completed 200 OK in 0ms (Allocations: 117)
|
|
787
|
+
------------------------------------------------------
|
|
788
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
|
789
|
+
------------------------------------------------------
|
|
790
|
+
Processing by ApplicationController#index as HTML
|
|
791
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
792
|
+
------------------------------------------------------------------------------------
|
|
793
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
|
794
|
+
------------------------------------------------------------------------------------
|
|
795
|
+
Processing by ApplicationController#index as HTML
|
|
796
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
797
|
+
-------------------------------------------------------------------------------------
|
|
798
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
|
799
|
+
-------------------------------------------------------------------------------------
|
|
800
|
+
Processing by ApplicationController#create as HTML
|
|
801
|
+
Can't verify CSRF token authenticity.
|
|
802
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 98)
|
|
803
|
+
----------------------------------------------------------------------------
|
|
804
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
|
805
|
+
----------------------------------------------------------------------------
|
|
806
|
+
Processing by ExclusionsController#index as HTML
|
|
807
|
+
Completed 200 OK in 0ms (Allocations: 128)
|
|
808
|
+
--------------------------------------------------------
|
|
809
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
|
810
|
+
--------------------------------------------------------
|
|
811
|
+
Processing by ApplicationController#index as HTML
|
|
812
|
+
Completed 200 OK in 0ms (Allocations: 122)
|
|
813
|
+
-----------------------------------------------------------
|
|
814
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
|
815
|
+
-----------------------------------------------------------
|
|
816
|
+
Processing by ApplicationController#index as HTML
|
|
817
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
818
|
+
---------------------------------------------------------------
|
|
819
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
|
820
|
+
---------------------------------------------------------------
|
|
821
|
+
Processing by ApplicationController#index as HTML
|
|
822
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
823
|
+
-------------------------------------------------------------------------------------
|
|
824
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
|
825
|
+
-------------------------------------------------------------------------------------
|
|
826
|
+
Processing by ApplicationController#create as HTML
|
|
827
|
+
Can't verify CSRF token authenticity.
|
|
828
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 111)
|
|
829
|
+
--------------------------------------------------------------------------------------------------------
|
|
830
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
|
831
|
+
--------------------------------------------------------------------------------------------------------
|
|
832
|
+
Processing by ApplicationController#index as HTML
|
|
833
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
834
|
+
------------------------------------------------------
|
|
835
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
|
836
|
+
------------------------------------------------------
|
|
837
|
+
Processing by ApplicationController#index as HTML
|
|
838
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
839
|
+
-------------------------------------------------------------
|
|
840
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
|
841
|
+
-------------------------------------------------------------
|
|
842
|
+
Processing by ApplicationController#index as HTML
|
|
843
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
844
|
+
-----------------------------------------------------------------------------------------------------
|
|
845
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
|
846
|
+
-----------------------------------------------------------------------------------------------------
|
|
847
|
+
Processing by ApplicationController#create as HTML
|
|
848
|
+
Can't verify CSRF token authenticity.
|
|
849
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
|
|
850
|
+
------------------------------------------------------------------------------------
|
|
851
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
|
852
|
+
------------------------------------------------------------------------------------
|
|
853
|
+
Processing by ApplicationController#index as HTML
|
|
854
|
+
Completed 200 OK in 1ms (Allocations: 106)
|
|
855
|
+
-----------------------------------------------------------------------------
|
|
856
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
|
857
|
+
-----------------------------------------------------------------------------
|
|
858
|
+
Processing by ApplicationController#create as HTML
|
|
859
|
+
Completed 200 OK in 0ms (Allocations: 125)
|
|
860
|
+
----------------------------------------------------------------------------
|
|
861
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
|
862
|
+
----------------------------------------------------------------------------
|
|
863
|
+
Processing by ExclusionsController#index as HTML
|
|
864
|
+
Completed 200 OK in 0ms (Allocations: 128)
|
|
865
|
+
----------------------------------
|
|
866
|
+
AngularRailsCsrfTest: test_exclude
|
|
867
|
+
----------------------------------
|
|
868
|
+
Processing by ApplicationController#index as HTML
|
|
869
|
+
Completed 200 OK in 0ms (Allocations: 74)
|
|
870
|
+
-------------------------------------------------------------------------------------
|
|
871
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
|
872
|
+
-------------------------------------------------------------------------------------
|
|
873
|
+
Processing by ApplicationController#create as HTML
|
|
874
|
+
Can't verify CSRF token authenticity.
|
|
875
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 157)
|
|
876
|
+
-----------------------------------------------------------
|
|
877
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
|
878
|
+
-----------------------------------------------------------
|
|
879
|
+
Processing by ApplicationController#index as HTML
|
|
880
|
+
Completed 200 OK in 0ms (Allocations: 129)
|
|
881
|
+
---------------------------------------------------------------
|
|
882
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
|
883
|
+
---------------------------------------------------------------
|
|
884
|
+
Processing by ApplicationController#index as HTML
|
|
885
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
886
|
+
----------------------------------
|
|
887
|
+
AngularRailsCsrfTest: test_exclude
|
|
888
|
+
----------------------------------
|
|
889
|
+
Processing by ApplicationController#index as HTML
|
|
890
|
+
Completed 200 OK in 0ms (Allocations: 74)
|
|
891
|
+
--------------------------------------------------------
|
|
892
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
|
893
|
+
--------------------------------------------------------
|
|
894
|
+
Processing by ApplicationController#index as HTML
|
|
895
|
+
Completed 200 OK in 0ms (Allocations: 117)
|
|
896
|
+
------------------------------------------------------
|
|
897
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
|
898
|
+
------------------------------------------------------
|
|
899
|
+
Processing by ApplicationController#index as HTML
|
|
900
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
901
|
+
--------------------------------------------------------------------------------------------------------
|
|
902
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
|
903
|
+
--------------------------------------------------------------------------------------------------------
|
|
904
|
+
Processing by ApplicationController#index as HTML
|
|
905
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
906
|
+
-----------------------------------------------------------------------------------------------------
|
|
907
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
|
908
|
+
-----------------------------------------------------------------------------------------------------
|
|
909
|
+
Processing by ApplicationController#create as HTML
|
|
910
|
+
Can't verify CSRF token authenticity.
|
|
911
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
|
|
912
|
+
-------------------------------------------------------------
|
|
913
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
|
914
|
+
-------------------------------------------------------------
|
|
915
|
+
Processing by ApplicationController#index as HTML
|
|
916
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
917
|
+
------------------------------------------------------------------------------------
|
|
918
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
|
919
|
+
------------------------------------------------------------------------------------
|
|
920
|
+
Processing by ApplicationController#index as HTML
|
|
921
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
922
|
+
-----------------------------------------------------------------------------
|
|
923
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
|
924
|
+
-----------------------------------------------------------------------------
|
|
925
|
+
Processing by ApplicationController#create as HTML
|
|
926
|
+
Completed 200 OK in 0ms (Allocations: 125)
|
|
927
|
+
----------------------------------------------------------------------------
|
|
928
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
|
929
|
+
----------------------------------------------------------------------------
|
|
930
|
+
Processing by ExclusionsController#index as HTML
|
|
931
|
+
Completed 200 OK in 0ms (Allocations: 71)
|
|
932
|
+
----------------------------------------------------------------------------
|
|
933
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
|
934
|
+
----------------------------------------------------------------------------
|
|
935
|
+
Processing by ExclusionsController#index as HTML
|
|
936
|
+
Completed 200 OK in 0ms (Allocations: 128)
|
|
937
|
+
---------------------------------------------------------------
|
|
938
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
|
939
|
+
---------------------------------------------------------------
|
|
940
|
+
Processing by ApplicationController#index as HTML
|
|
941
|
+
Completed 200 OK in 0ms (Allocations: 111)
|
|
942
|
+
-------------------------------------------------------------------------------------
|
|
943
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
|
944
|
+
-------------------------------------------------------------------------------------
|
|
945
|
+
Processing by ApplicationController#create as HTML
|
|
946
|
+
Can't verify CSRF token authenticity.
|
|
947
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 111)
|
|
948
|
+
------------------------------------------------------------------------------------
|
|
949
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
|
950
|
+
------------------------------------------------------------------------------------
|
|
951
|
+
Processing by ApplicationController#index as HTML
|
|
952
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
953
|
+
-----------------------------------------------------------------------------------------------------
|
|
954
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
|
955
|
+
-----------------------------------------------------------------------------------------------------
|
|
956
|
+
Processing by ApplicationController#create as HTML
|
|
957
|
+
Can't verify CSRF token authenticity.
|
|
958
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
|
|
959
|
+
-----------------------------------------------------------------------------
|
|
960
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
|
961
|
+
-----------------------------------------------------------------------------
|
|
962
|
+
Processing by ApplicationController#create as HTML
|
|
963
|
+
Completed 200 OK in 0ms (Allocations: 125)
|
|
964
|
+
-----------------------------------------------------------
|
|
965
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
|
966
|
+
-----------------------------------------------------------
|
|
967
|
+
Processing by ApplicationController#index as HTML
|
|
968
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
969
|
+
--------------------------------------------------------
|
|
970
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
|
971
|
+
--------------------------------------------------------
|
|
972
|
+
Processing by ApplicationController#index as HTML
|
|
973
|
+
Completed 200 OK in 0ms (Allocations: 117)
|
|
974
|
+
----------------------------------
|
|
975
|
+
AngularRailsCsrfTest: test_exclude
|
|
976
|
+
----------------------------------
|
|
977
|
+
Processing by ApplicationController#index as HTML
|
|
978
|
+
Completed 200 OK in 0ms (Allocations: 74)
|
|
979
|
+
-------------------------------------------------------------
|
|
980
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
|
981
|
+
-------------------------------------------------------------
|
|
982
|
+
Processing by ApplicationController#index as HTML
|
|
983
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
984
|
+
--------------------------------------------------------------------------------------------------------
|
|
985
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
|
986
|
+
--------------------------------------------------------------------------------------------------------
|
|
987
|
+
Processing by ApplicationController#index as HTML
|
|
988
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
989
|
+
------------------------------------------------------
|
|
990
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
|
991
|
+
------------------------------------------------------
|
|
992
|
+
Processing by ApplicationController#index as HTML
|
|
993
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
994
|
+
-----------------------------------------------------------------------------------------------------
|
|
995
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
|
996
|
+
-----------------------------------------------------------------------------------------------------
|
|
997
|
+
Processing by ApplicationController#create as HTML
|
|
998
|
+
Can't verify CSRF token authenticity.
|
|
999
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 162)
|
|
1000
|
+
-----------------------------------------------------------
|
|
1001
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
|
1002
|
+
-----------------------------------------------------------
|
|
1003
|
+
Processing by ApplicationController#index as HTML
|
|
1004
|
+
Completed 200 OK in 0ms (Allocations: 129)
|
|
1005
|
+
-----------------------------------------------------------------------------
|
|
1006
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
|
1007
|
+
-----------------------------------------------------------------------------
|
|
1008
|
+
Processing by ApplicationController#create as HTML
|
|
1009
|
+
Completed 200 OK in 0ms (Allocations: 125)
|
|
1010
|
+
-------------------------------------------------------------
|
|
1011
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
|
1012
|
+
-------------------------------------------------------------
|
|
1013
|
+
Processing by ApplicationController#index as HTML
|
|
1014
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1015
|
+
------------------------------------------------------------------------------------
|
|
1016
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
|
1017
|
+
------------------------------------------------------------------------------------
|
|
1018
|
+
Processing by ApplicationController#index as HTML
|
|
1019
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1020
|
+
---------------------------------------------------------------
|
|
1021
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
|
1022
|
+
---------------------------------------------------------------
|
|
1023
|
+
Processing by ApplicationController#index as HTML
|
|
1024
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1025
|
+
------------------------------------------------------
|
|
1026
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
|
1027
|
+
------------------------------------------------------
|
|
1028
|
+
Processing by ApplicationController#index as HTML
|
|
1029
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1030
|
+
--------------------------------------------------------------------------------------------------------
|
|
1031
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
|
1032
|
+
--------------------------------------------------------------------------------------------------------
|
|
1033
|
+
Processing by ApplicationController#index as HTML
|
|
1034
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1035
|
+
----------------------------------
|
|
1036
|
+
AngularRailsCsrfTest: test_exclude
|
|
1037
|
+
----------------------------------
|
|
1038
|
+
Processing by ApplicationController#index as HTML
|
|
1039
|
+
Completed 200 OK in 0ms (Allocations: 74)
|
|
1040
|
+
-------------------------------------------------------------------------------------
|
|
1041
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
|
1042
|
+
-------------------------------------------------------------------------------------
|
|
1043
|
+
Processing by ApplicationController#create as HTML
|
|
1044
|
+
Can't verify CSRF token authenticity.
|
|
1045
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 98)
|
|
1046
|
+
--------------------------------------------------------
|
|
1047
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
|
1048
|
+
--------------------------------------------------------
|
|
1049
|
+
Processing by ApplicationController#index as HTML
|
|
1050
|
+
Completed 200 OK in 0ms (Allocations: 117)
|
|
1051
|
+
----------------------------------------------------------------------------
|
|
1052
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
|
1053
|
+
----------------------------------------------------------------------------
|
|
1054
|
+
Processing by ExclusionsController#index as HTML
|
|
1055
|
+
Completed 200 OK in 0ms (Allocations: 71)
|
|
1056
|
+
----------------------------------------------------------------------------
|
|
1057
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
|
1058
|
+
----------------------------------------------------------------------------
|
|
1059
|
+
Processing by ExclusionsController#index as HTML
|
|
1060
|
+
Completed 200 OK in 0ms (Allocations: 128)
|
|
1061
|
+
-----------------------------------------------------------------------------------------------------
|
|
1062
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
|
1063
|
+
-----------------------------------------------------------------------------------------------------
|
|
1064
|
+
Processing by ApplicationController#create as HTML
|
|
1065
|
+
Can't verify CSRF token authenticity.
|
|
1066
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 117)
|
|
1067
|
+
-------------------------------------------------------------------------
|
|
1068
|
+
AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
|
|
1069
|
+
-------------------------------------------------------------------------
|
|
1070
|
+
Processing by ApplicationController#index as HTML
|
|
1071
|
+
Completed 200 OK in 0ms (Allocations: 74)
|
|
1072
|
+
--------------------------------------------------------
|
|
1073
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
|
1074
|
+
--------------------------------------------------------
|
|
1075
|
+
Processing by ApplicationController#index as HTML
|
|
1076
|
+
Completed 200 OK in 0ms (Allocations: 122)
|
|
1077
|
+
------------------------------------------------------------------------------------
|
|
1078
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
|
1079
|
+
------------------------------------------------------------------------------------
|
|
1080
|
+
Processing by ApplicationController#index as HTML
|
|
1081
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1082
|
+
------------------------------------------------------
|
|
1083
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
|
1084
|
+
------------------------------------------------------
|
|
1085
|
+
Processing by ApplicationController#index as HTML
|
|
1086
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1087
|
+
--------------------------------------------------------------------------------------------------------
|
|
1088
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
|
1089
|
+
--------------------------------------------------------------------------------------------------------
|
|
1090
|
+
Processing by ApplicationController#index as HTML
|
|
1091
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1092
|
+
-----------------------------------------------------------
|
|
1093
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
|
1094
|
+
-----------------------------------------------------------
|
|
1095
|
+
Processing by ApplicationController#index as HTML
|
|
1096
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1097
|
+
---------------------------------------------------------------
|
|
1098
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
|
1099
|
+
---------------------------------------------------------------
|
|
1100
|
+
Processing by ApplicationController#index as HTML
|
|
1101
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1102
|
+
-----------------------------------------------------------------------------
|
|
1103
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
|
1104
|
+
-----------------------------------------------------------------------------
|
|
1105
|
+
Processing by ApplicationController#create as HTML
|
|
1106
|
+
Completed 200 OK in 0ms (Allocations: 125)
|
|
1107
|
+
-------------------------------------------------------------------------------------
|
|
1108
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
|
1109
|
+
-------------------------------------------------------------------------------------
|
|
1110
|
+
Processing by ApplicationController#create as HTML
|
|
1111
|
+
Can't verify CSRF token authenticity.
|
|
1112
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 98)
|
|
1113
|
+
-------------------------------------------------------------
|
|
1114
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
|
1115
|
+
-------------------------------------------------------------
|
|
1116
|
+
Processing by ApplicationController#index as HTML
|
|
1117
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1118
|
+
------------------------------------------------------
|
|
1119
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
|
1120
|
+
------------------------------------------------------
|
|
1121
|
+
Processing by ApplicationController#index as HTML
|
|
1122
|
+
Completed 200 OK in 0ms (Allocations: 174)
|
|
1123
|
+
-------------------------------------------------------------------------
|
|
1124
|
+
AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
|
|
1125
|
+
-------------------------------------------------------------------------
|
|
1126
|
+
Processing by ApplicationController#index as HTML
|
|
1127
|
+
Completed 200 OK in 0ms (Allocations: 74)
|
|
1128
|
+
-----------------------------------------------------------
|
|
1129
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
|
1130
|
+
-----------------------------------------------------------
|
|
1131
|
+
Processing by ApplicationController#index as HTML
|
|
1132
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1133
|
+
--------------------------------------------------------------------------------------------------------
|
|
1134
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
|
1135
|
+
--------------------------------------------------------------------------------------------------------
|
|
1136
|
+
Processing by ApplicationController#index as HTML
|
|
1137
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1138
|
+
-------------------------------------------------------------
|
|
1139
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
|
1140
|
+
-------------------------------------------------------------
|
|
1141
|
+
Processing by ApplicationController#index as HTML
|
|
1142
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1143
|
+
------------------------------------------------------------------------------------
|
|
1144
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
|
1145
|
+
------------------------------------------------------------------------------------
|
|
1146
|
+
Processing by ApplicationController#index as HTML
|
|
1147
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1148
|
+
-----------------------------------------------------------------------------
|
|
1149
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
|
1150
|
+
-----------------------------------------------------------------------------
|
|
1151
|
+
Processing by ApplicationController#create as HTML
|
|
1152
|
+
Completed 200 OK in 0ms (Allocations: 131)
|
|
1153
|
+
-----------------------------------------------------------------------------------------------------
|
|
1154
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
|
1155
|
+
-----------------------------------------------------------------------------------------------------
|
|
1156
|
+
Processing by ApplicationController#create as HTML
|
|
1157
|
+
Can't verify CSRF token authenticity.
|
|
1158
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 110)
|
|
1159
|
+
-------------------------------------------------------------------------------------
|
|
1160
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
|
1161
|
+
-------------------------------------------------------------------------------------
|
|
1162
|
+
Processing by ApplicationController#create as HTML
|
|
1163
|
+
Can't verify CSRF token authenticity.
|
|
1164
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 98)
|
|
1165
|
+
---------------------------------------------------------------
|
|
1166
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
|
1167
|
+
---------------------------------------------------------------
|
|
1168
|
+
Processing by ApplicationController#index as HTML
|
|
1169
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1170
|
+
--------------------------------------------------------
|
|
1171
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
|
1172
|
+
--------------------------------------------------------
|
|
1173
|
+
Processing by ApplicationController#index as HTML
|
|
1174
|
+
Completed 200 OK in 0ms (Allocations: 117)
|
|
1175
|
+
----------------------------------------------------------------------------
|
|
1176
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
|
1177
|
+
----------------------------------------------------------------------------
|
|
1178
|
+
Processing by ExclusionsController#index as HTML
|
|
1179
|
+
Completed 200 OK in 0ms (Allocations: 71)
|
|
1180
|
+
--------------------------------------------------------------------------------------------------------
|
|
1181
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
|
1182
|
+
--------------------------------------------------------------------------------------------------------
|
|
1183
|
+
Processing by ApplicationController#index as HTML
|
|
1184
|
+
Completed 200 OK in 0ms (Allocations: 174)
|
|
1185
|
+
------------------------------------------------------
|
|
1186
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
|
1187
|
+
------------------------------------------------------
|
|
1188
|
+
Processing by ApplicationController#index as HTML
|
|
1189
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1190
|
+
--------------------------------------------------------
|
|
1191
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
|
1192
|
+
--------------------------------------------------------
|
|
1193
|
+
Processing by ApplicationController#index as HTML
|
|
1194
|
+
Completed 200 OK in 0ms (Allocations: 117)
|
|
1195
|
+
-------------------------------------------------------------------------------------
|
|
1196
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
|
1197
|
+
-------------------------------------------------------------------------------------
|
|
1198
|
+
Processing by ApplicationController#create as HTML
|
|
1199
|
+
Can't verify CSRF token authenticity.
|
|
1200
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 111)
|
|
1201
|
+
-----------------------------------------------------------
|
|
1202
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
|
1203
|
+
-----------------------------------------------------------
|
|
1204
|
+
Processing by ApplicationController#index as HTML
|
|
1205
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1206
|
+
---------------------------------------------------------------
|
|
1207
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
|
1208
|
+
---------------------------------------------------------------
|
|
1209
|
+
Processing by ApplicationController#index as HTML
|
|
1210
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1211
|
+
-----------------------------------------------------------------------------------------------------
|
|
1212
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
|
1213
|
+
-----------------------------------------------------------------------------------------------------
|
|
1214
|
+
Processing by ApplicationController#create as HTML
|
|
1215
|
+
Can't verify CSRF token authenticity.
|
|
1216
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
|
|
1217
|
+
-------------------------------------------------------------
|
|
1218
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
|
1219
|
+
-------------------------------------------------------------
|
|
1220
|
+
Processing by ApplicationController#index as HTML
|
|
1221
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1222
|
+
-------------------------------------------------------------------------
|
|
1223
|
+
AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
|
|
1224
|
+
-------------------------------------------------------------------------
|
|
1225
|
+
Processing by ApplicationController#index as HTML
|
|
1226
|
+
Completed 200 OK in 0ms (Allocations: 74)
|
|
1227
|
+
-----------------------------------------------------------------------------
|
|
1228
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
|
1229
|
+
-----------------------------------------------------------------------------
|
|
1230
|
+
Processing by ApplicationController#create as HTML
|
|
1231
|
+
Completed 200 OK in 0ms (Allocations: 125)
|
|
1232
|
+
------------------------------------------------------------------------------------
|
|
1233
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
|
1234
|
+
------------------------------------------------------------------------------------
|
|
1235
|
+
Processing by ApplicationController#index as HTML
|
|
1236
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1237
|
+
----------------------------------------------------------------------------
|
|
1238
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
|
1239
|
+
----------------------------------------------------------------------------
|
|
1240
|
+
Processing by ExclusionsController#index as HTML
|
|
1241
|
+
Completed 200 OK in 0ms (Allocations: 71)
|
|
1242
|
+
--------------------------------------------------------------------------------------------------------
|
|
1243
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
|
1244
|
+
--------------------------------------------------------------------------------------------------------
|
|
1245
|
+
Processing by ApplicationController#index as HTML
|
|
1246
|
+
Completed 200 OK in 0ms (Allocations: 174)
|
|
1247
|
+
-------------------------------------------------------------------------
|
|
1248
|
+
AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
|
|
1249
|
+
-------------------------------------------------------------------------
|
|
1250
|
+
Processing by ApplicationController#index as HTML
|
|
1251
|
+
Completed 200 OK in 0ms (Allocations: 74)
|
|
1252
|
+
-------------------------------------------------------------
|
|
1253
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
|
1254
|
+
-------------------------------------------------------------
|
|
1255
|
+
Processing by ApplicationController#index as HTML
|
|
1256
|
+
Completed 200 OK in 0ms (Allocations: 174)
|
|
1257
|
+
---------------------------------------------------------------
|
|
1258
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
|
1259
|
+
---------------------------------------------------------------
|
|
1260
|
+
Processing by ApplicationController#index as HTML
|
|
1261
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1262
|
+
-------------------------------------------------------------------------
|
|
1263
|
+
AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
|
|
1264
|
+
-------------------------------------------------------------------------
|
|
1265
|
+
--------------------------------------------------------
|
|
1266
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
|
1267
|
+
--------------------------------------------------------
|
|
1268
|
+
Processing by ApplicationController#index as HTML
|
|
1269
|
+
Completed 200 OK in 0ms (Allocations: 117)
|
|
1270
|
+
-----------------------------------------------------------------------------
|
|
1271
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
|
1272
|
+
-----------------------------------------------------------------------------
|
|
1273
|
+
Processing by ApplicationController#create as HTML
|
|
1274
|
+
Completed 200 OK in 0ms (Allocations: 131)
|
|
1275
|
+
-----------------------------------------------------------------------------------------------------
|
|
1276
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
|
1277
|
+
-----------------------------------------------------------------------------------------------------
|
|
1278
|
+
Processing by ApplicationController#create as HTML
|
|
1279
|
+
Can't verify CSRF token authenticity.
|
|
1280
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 110)
|
|
1281
|
+
--------------------------------------------------------------------------------------------------------
|
|
1282
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
|
1283
|
+
--------------------------------------------------------------------------------------------------------
|
|
1284
|
+
Processing by ApplicationController#index as HTML
|
|
1285
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1286
|
+
-----------------------------------------------------------
|
|
1287
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
|
1288
|
+
-----------------------------------------------------------
|
|
1289
|
+
Processing by ApplicationController#index as HTML
|
|
1290
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1291
|
+
-------------------------------------------------------------------------------------
|
|
1292
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
|
1293
|
+
-------------------------------------------------------------------------------------
|
|
1294
|
+
Processing by ApplicationController#create as HTML
|
|
1295
|
+
Can't verify CSRF token authenticity.
|
|
1296
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 98)
|
|
1297
|
+
------------------------------------------------------
|
|
1298
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
|
1299
|
+
------------------------------------------------------
|
|
1300
|
+
Processing by ApplicationController#index as HTML
|
|
1301
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1302
|
+
------------------------------------------------------------------------------------
|
|
1303
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
|
1304
|
+
------------------------------------------------------------------------------------
|
|
1305
|
+
Processing by ApplicationController#index as HTML
|
|
1306
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1307
|
+
----------------------------------------------------------------------------
|
|
1308
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
|
1309
|
+
----------------------------------------------------------------------------
|
|
1310
|
+
Processing by ExclusionsController#index as HTML
|
|
1311
|
+
Completed 200 OK in 0ms (Allocations: 71)
|
|
1312
|
+
----------------------------------------------------------------------------
|
|
1313
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
|
1314
|
+
----------------------------------------------------------------------------
|
|
1315
|
+
Processing by ExclusionsController#index as HTML
|
|
1316
|
+
Completed 200 OK in 0ms (Allocations: 128)
|
|
1317
|
+
--------------------------------------------------------
|
|
1318
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
|
1319
|
+
--------------------------------------------------------
|
|
1320
|
+
Processing by ApplicationController#index as HTML
|
|
1321
|
+
Completed 200 OK in 0ms (Allocations: 122)
|
|
1322
|
+
-----------------------------------------------------------
|
|
1323
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
|
1324
|
+
-----------------------------------------------------------
|
|
1325
|
+
Processing by ApplicationController#index as HTML
|
|
1326
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1327
|
+
------------------------------------------------------
|
|
1328
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
|
1329
|
+
------------------------------------------------------
|
|
1330
|
+
Processing by ApplicationController#index as HTML
|
|
1331
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1332
|
+
-------------------------------------------------------------------------------------
|
|
1333
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
|
1334
|
+
-------------------------------------------------------------------------------------
|
|
1335
|
+
Processing by ApplicationController#create as HTML
|
|
1336
|
+
Can't verify CSRF token authenticity.
|
|
1337
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 111)
|
|
1338
|
+
-------------------------------------------------------------
|
|
1339
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
|
1340
|
+
-------------------------------------------------------------
|
|
1341
|
+
Processing by ApplicationController#index as HTML
|
|
1342
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1343
|
+
-----------------------------------------------------------------------------
|
|
1344
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
|
1345
|
+
-----------------------------------------------------------------------------
|
|
1346
|
+
Processing by ApplicationController#create as HTML
|
|
1347
|
+
Completed 200 OK in 0ms (Allocations: 125)
|
|
1348
|
+
------------------------------------------------------------------------------------
|
|
1349
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
|
1350
|
+
------------------------------------------------------------------------------------
|
|
1351
|
+
Processing by ApplicationController#index as HTML
|
|
1352
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1353
|
+
---------------------------------------------------------------
|
|
1354
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
|
1355
|
+
---------------------------------------------------------------
|
|
1356
|
+
Processing by ApplicationController#index as HTML
|
|
1357
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1358
|
+
-------------------------------------------------------------------------
|
|
1359
|
+
AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
|
|
1360
|
+
-------------------------------------------------------------------------
|
|
1361
|
+
Processing by ApplicationController#index as HTML
|
|
1362
|
+
Completed 200 OK in 0ms (Allocations: 74)
|
|
1363
|
+
--------------------------------------------------------------------------------------------------------
|
|
1364
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
|
1365
|
+
--------------------------------------------------------------------------------------------------------
|
|
1366
|
+
Processing by ApplicationController#index as HTML
|
|
1367
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1368
|
+
-----------------------------------------------------------------------------------------------------
|
|
1369
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
|
1370
|
+
-----------------------------------------------------------------------------------------------------
|
|
1371
|
+
Processing by ApplicationController#create as HTML
|
|
1372
|
+
Can't verify CSRF token authenticity.
|
|
1373
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
|
|
1374
|
+
----------------------------------------------------------------------------
|
|
1375
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
|
1376
|
+
----------------------------------------------------------------------------
|
|
1377
|
+
Processing by ExclusionsController#index as HTML
|
|
1378
|
+
Completed 200 OK in 0ms (Allocations: 128)
|
|
1379
|
+
-------------------------------------------------------------------------------------
|
|
1380
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
|
1381
|
+
-------------------------------------------------------------------------------------
|
|
1382
|
+
Processing by ApplicationController#create as HTML
|
|
1383
|
+
Can't verify CSRF token authenticity.
|
|
1384
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 112)
|
|
1385
|
+
-----------------------------------------------------------------------------
|
|
1386
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
|
1387
|
+
-----------------------------------------------------------------------------
|
|
1388
|
+
Processing by ApplicationController#create as HTML
|
|
1389
|
+
Completed 200 OK in 0ms (Allocations: 132)
|
|
1390
|
+
------------------------------------------------------------------------------------
|
|
1391
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
|
1392
|
+
------------------------------------------------------------------------------------
|
|
1393
|
+
Processing by ApplicationController#index as HTML
|
|
1394
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1395
|
+
--------------------------------------------------------------------------------------------------------
|
|
1396
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
|
1397
|
+
--------------------------------------------------------------------------------------------------------
|
|
1398
|
+
Processing by ApplicationController#index as HTML
|
|
1399
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1400
|
+
-----------------------------------------------------------
|
|
1401
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
|
1402
|
+
-----------------------------------------------------------
|
|
1403
|
+
Processing by ApplicationController#index as HTML
|
|
1404
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1405
|
+
--------------------------------------------------------
|
|
1406
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
|
1407
|
+
--------------------------------------------------------
|
|
1408
|
+
Processing by ApplicationController#index as HTML
|
|
1409
|
+
Completed 200 OK in 0ms (Allocations: 117)
|
|
1410
|
+
-------------------------------------------------------------
|
|
1411
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
|
1412
|
+
-------------------------------------------------------------
|
|
1413
|
+
Processing by ApplicationController#index as HTML
|
|
1414
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1415
|
+
-----------------------------------------------------------------------------------------------------
|
|
1416
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
|
1417
|
+
-----------------------------------------------------------------------------------------------------
|
|
1418
|
+
Processing by ApplicationController#create as HTML
|
|
1419
|
+
Can't verify CSRF token authenticity.
|
|
1420
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
|
|
1421
|
+
-------------------------------------------------------------------------
|
|
1422
|
+
AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
|
|
1423
|
+
-------------------------------------------------------------------------
|
|
1424
|
+
Processing by ApplicationController#index as HTML
|
|
1425
|
+
Completed 200 OK in 0ms (Allocations: 74)
|
|
1426
|
+
------------------------------------------------------
|
|
1427
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
|
1428
|
+
------------------------------------------------------
|
|
1429
|
+
Processing by ApplicationController#index as HTML
|
|
1430
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1431
|
+
---------------------------------------------------------------
|
|
1432
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
|
1433
|
+
---------------------------------------------------------------
|
|
1434
|
+
Processing by ApplicationController#index as HTML
|
|
1435
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1436
|
+
----------------------------------------------------------------------------
|
|
1437
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
|
1438
|
+
----------------------------------------------------------------------------
|
|
1439
|
+
Processing by ExclusionsController#index as HTML
|
|
1440
|
+
Completed 200 OK in 0ms (Allocations: 128)
|
|
1441
|
+
------------------------------------------------------
|
|
1442
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
|
1443
|
+
------------------------------------------------------
|
|
1444
|
+
Processing by ApplicationController#index as HTML
|
|
1445
|
+
Completed 200 OK in 0ms (Allocations: 111)
|
|
1446
|
+
--------------------------------------------------------
|
|
1447
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
|
1448
|
+
--------------------------------------------------------
|
|
1449
|
+
Processing by ApplicationController#index as HTML
|
|
1450
|
+
Completed 200 OK in 0ms (Allocations: 117)
|
|
1451
|
+
-------------------------------------------------------------------------------------
|
|
1452
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
|
1453
|
+
-------------------------------------------------------------------------------------
|
|
1454
|
+
Processing by ApplicationController#create as HTML
|
|
1455
|
+
Can't verify CSRF token authenticity.
|
|
1456
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 111)
|
|
1457
|
+
---------------------------------------------------------------
|
|
1458
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
|
1459
|
+
---------------------------------------------------------------
|
|
1460
|
+
Processing by ApplicationController#index as HTML
|
|
1461
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1462
|
+
-----------------------------------------------------------------------------------------------------
|
|
1463
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
|
1464
|
+
-----------------------------------------------------------------------------------------------------
|
|
1465
|
+
Processing by ApplicationController#create as HTML
|
|
1466
|
+
Can't verify CSRF token authenticity.
|
|
1467
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
|
|
1468
|
+
-------------------------------------------------------------
|
|
1469
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
|
1470
|
+
-------------------------------------------------------------
|
|
1471
|
+
Processing by ApplicationController#index as HTML
|
|
1472
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1473
|
+
-------------------------------------------------------------------------
|
|
1474
|
+
AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
|
|
1475
|
+
-------------------------------------------------------------------------
|
|
1476
|
+
Processing by ApplicationController#index as HTML
|
|
1477
|
+
Completed 200 OK in 0ms (Allocations: 74)
|
|
1478
|
+
------------------------------------------------------------------------------------
|
|
1479
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
|
1480
|
+
------------------------------------------------------------------------------------
|
|
1481
|
+
Processing by ApplicationController#index as HTML
|
|
1482
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1483
|
+
-----------------------------------------------------------
|
|
1484
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
|
1485
|
+
-----------------------------------------------------------
|
|
1486
|
+
Processing by ApplicationController#index as HTML
|
|
1487
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1488
|
+
-----------------------------------------------------------------------------
|
|
1489
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
|
1490
|
+
-----------------------------------------------------------------------------
|
|
1491
|
+
Processing by ApplicationController#create as HTML
|
|
1492
|
+
Completed 200 OK in 0ms (Allocations: 125)
|
|
1493
|
+
--------------------------------------------------------------------------------------------------------
|
|
1494
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
|
1495
|
+
--------------------------------------------------------------------------------------------------------
|
|
1496
|
+
Processing by ApplicationController#index as HTML
|
|
1497
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1498
|
+
----------------------------------------------------------------------------
|
|
1499
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
|
1500
|
+
----------------------------------------------------------------------------
|
|
1501
|
+
Processing by ExclusionsController#index as HTML
|
|
1502
|
+
Completed 200 OK in 0ms (Allocations: 128)
|
|
1503
|
+
------------------------------------------------------------------------------------
|
|
1504
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
|
1505
|
+
------------------------------------------------------------------------------------
|
|
1506
|
+
Processing by ApplicationController#index as HTML
|
|
1507
|
+
Completed 200 OK in 0ms (Allocations: 111)
|
|
1508
|
+
-----------------------------------------------------------------------------
|
|
1509
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
|
1510
|
+
-----------------------------------------------------------------------------
|
|
1511
|
+
Processing by ApplicationController#create as HTML
|
|
1512
|
+
Completed 200 OK in 0ms (Allocations: 131)
|
|
1513
|
+
-----------------------------------------------------------
|
|
1514
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
|
1515
|
+
-----------------------------------------------------------
|
|
1516
|
+
Processing by ApplicationController#index as HTML
|
|
1517
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1518
|
+
--------------------------------------------------------------------------------------------------------
|
|
1519
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
|
1520
|
+
--------------------------------------------------------------------------------------------------------
|
|
1521
|
+
Processing by ApplicationController#index as HTML
|
|
1522
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1523
|
+
-------------------------------------------------------------------------
|
|
1524
|
+
AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
|
|
1525
|
+
-------------------------------------------------------------------------
|
|
1526
|
+
Processing by ApplicationController#index as HTML
|
|
1527
|
+
Completed 200 OK in 0ms (Allocations: 74)
|
|
1528
|
+
---------------------------------------------------------------
|
|
1529
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
|
1530
|
+
---------------------------------------------------------------
|
|
1531
|
+
Processing by ApplicationController#index as HTML
|
|
1532
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1533
|
+
-------------------------------------------------------------------------------------
|
|
1534
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
|
1535
|
+
-------------------------------------------------------------------------------------
|
|
1536
|
+
Processing by ApplicationController#create as HTML
|
|
1537
|
+
Can't verify CSRF token authenticity.
|
|
1538
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 105)
|
|
1539
|
+
-----------------------------------------------------------------------------------------------------
|
|
1540
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
|
1541
|
+
-----------------------------------------------------------------------------------------------------
|
|
1542
|
+
Processing by ApplicationController#create as HTML
|
|
1543
|
+
Can't verify CSRF token authenticity.
|
|
1544
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
|
|
1545
|
+
--------------------------------------------------------
|
|
1546
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
|
1547
|
+
--------------------------------------------------------
|
|
1548
|
+
Processing by ApplicationController#index as HTML
|
|
1549
|
+
Completed 200 OK in 0ms (Allocations: 117)
|
|
1550
|
+
-------------------------------------------------------------
|
|
1551
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
|
1552
|
+
-------------------------------------------------------------
|
|
1553
|
+
Processing by ApplicationController#index as HTML
|
|
1554
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1555
|
+
------------------------------------------------------
|
|
1556
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
|
1557
|
+
------------------------------------------------------
|
|
1558
|
+
Processing by ApplicationController#index as HTML
|
|
1559
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1560
|
+
------------------------------------------------------
|
|
1561
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
|
1562
|
+
------------------------------------------------------
|
|
1563
|
+
Processing by ApplicationController#index as HTML
|
|
1564
|
+
Completed 200 OK in 0ms (Allocations: 174)
|
|
1565
|
+
-------------------------------------------------------------------------------------
|
|
1566
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
|
1567
|
+
-------------------------------------------------------------------------------------
|
|
1568
|
+
Processing by ApplicationController#create as HTML
|
|
1569
|
+
Can't verify CSRF token authenticity.
|
|
1570
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 111)
|
|
1571
|
+
-----------------------------------------------------------------------------
|
|
1572
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
|
1573
|
+
-----------------------------------------------------------------------------
|
|
1574
|
+
Processing by ApplicationController#create as HTML
|
|
1575
|
+
Completed 200 OK in 0ms (Allocations: 125)
|
|
1576
|
+
-----------------------------------------------------------------------------------------------------
|
|
1577
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
|
1578
|
+
-----------------------------------------------------------------------------------------------------
|
|
1579
|
+
Processing by ApplicationController#create as HTML
|
|
1580
|
+
Can't verify CSRF token authenticity.
|
|
1581
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
|
|
1582
|
+
-------------------------------------------------------------
|
|
1583
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
|
1584
|
+
-------------------------------------------------------------
|
|
1585
|
+
Processing by ApplicationController#index as HTML
|
|
1586
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1587
|
+
---------------------------------------------------------------
|
|
1588
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
|
1589
|
+
---------------------------------------------------------------
|
|
1590
|
+
Processing by ApplicationController#index as HTML
|
|
1591
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1592
|
+
-------------------------------------------------------------------------
|
|
1593
|
+
AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
|
|
1594
|
+
-------------------------------------------------------------------------
|
|
1595
|
+
Processing by ApplicationController#index as HTML
|
|
1596
|
+
Completed 200 OK in 0ms (Allocations: 74)
|
|
1597
|
+
-----------------------------------------------------------
|
|
1598
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
|
1599
|
+
-----------------------------------------------------------
|
|
1600
|
+
Processing by ApplicationController#index as HTML
|
|
1601
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1602
|
+
------------------------------------------------------------------------------------
|
|
1603
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
|
1604
|
+
------------------------------------------------------------------------------------
|
|
1605
|
+
Processing by ApplicationController#index as HTML
|
|
1606
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1607
|
+
--------------------------------------------------------
|
|
1608
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
|
1609
|
+
--------------------------------------------------------
|
|
1610
|
+
Processing by ApplicationController#index as HTML
|
|
1611
|
+
Completed 200 OK in 0ms (Allocations: 117)
|
|
1612
|
+
--------------------------------------------------------------------------------------------------------
|
|
1613
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
|
1614
|
+
--------------------------------------------------------------------------------------------------------
|
|
1615
|
+
Processing by ApplicationController#index as HTML
|
|
1616
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
|
1617
|
+
----------------------------------------------------------------------------
|
|
1618
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
|
1619
|
+
----------------------------------------------------------------------------
|
|
1620
|
+
Processing by ExclusionsController#index as HTML
|
|
1621
|
+
Completed 200 OK in 0ms (Allocations: 71)
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: angular_rails_csrf
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 4.0
|
|
4
|
+
version: 4.3.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- James Sanders
|
|
@@ -9,7 +9,7 @@ authors:
|
|
|
9
9
|
autorequire:
|
|
10
10
|
bindir: bin
|
|
11
11
|
cert_chain: []
|
|
12
|
-
date:
|
|
12
|
+
date: 2020-05-18 00:00:00.000000000 Z
|
|
13
13
|
dependencies:
|
|
14
14
|
- !ruby/object:Gem::Dependency
|
|
15
15
|
name: rake
|
|
@@ -45,14 +45,14 @@ dependencies:
|
|
|
45
45
|
requirements:
|
|
46
46
|
- - '='
|
|
47
47
|
- !ruby/object:Gem::Version
|
|
48
|
-
version: 6.0.
|
|
48
|
+
version: 6.0.3
|
|
49
49
|
type: :development
|
|
50
50
|
prerelease: false
|
|
51
51
|
version_requirements: !ruby/object:Gem::Requirement
|
|
52
52
|
requirements:
|
|
53
53
|
- - '='
|
|
54
54
|
- !ruby/object:Gem::Version
|
|
55
|
-
version: 6.0.
|
|
55
|
+
version: 6.0.3
|
|
56
56
|
- !ruby/object:Gem::Dependency
|
|
57
57
|
name: railties
|
|
58
58
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -167,7 +167,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
|
|
|
167
167
|
requirements:
|
|
168
168
|
- - ">="
|
|
169
169
|
- !ruby/object:Gem::Version
|
|
170
|
-
version: 2.
|
|
170
|
+
version: 2.5.0
|
|
171
171
|
required_rubygems_version: !ruby/object:Gem::Requirement
|
|
172
172
|
requirements:
|
|
173
173
|
- - ">="
|