angular_rails_csrf 4.1.0 → 4.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/README.md +14 -0
- data/lib/angular_rails_csrf/concern.rb +25 -3
- data/lib/angular_rails_csrf/version.rb +1 -1
- data/test/angular_rails_csrf_test.rb +38 -0
- data/test/dummy/log/test.log +793 -18
- metadata +4 -4
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 4e8a320d5c0af2703ea102297a762789112438a32347be78810f9ed0a38f0944
|
4
|
+
data.tar.gz: 69b97e7968cc7969768432e5b37a73aae82525dc22aa4736aca1ef008f479568
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 064c1ad9b08d278ba698c7e0deebd6a0169aeba2f665c9ada2e67fe08cc704cd7d1d21cb79d31be3bf55d985d951988e87239b67ca03169ea6b6bbaf740423aa
|
7
|
+
data.tar.gz: 9a6126ddfa20f2d162e569a277f539b5b15bceddc5f75f2321f8d2d5771b6b5de53c54a388397b91e7ee94d4a2bb08d812f01b230078f33d5d46884f7f67952a
|
data/README.md
CHANGED
@@ -66,6 +66,20 @@ end
|
|
66
66
|
|
67
67
|
`angular_rails_csrf_secure` defaults to `false`.
|
68
68
|
|
69
|
+
### SameSite
|
70
|
+
|
71
|
+
The SameSite attribute defaults to `:lax`. You can override this in the config:
|
72
|
+
|
73
|
+
```ruby
|
74
|
+
# application.rb
|
75
|
+
class Application < Rails::Application
|
76
|
+
#...
|
77
|
+
config.angular_rails_csrf_same_site = :strict
|
78
|
+
end
|
79
|
+
```
|
80
|
+
|
81
|
+
**NOTE**: When using `config.angular_rails_csrf_same_site = :none`, this gem automatically sets the cookie to `Secure` (`config.angular_rails_csrf_secure = true`) to comply with [the specifications](https://tools.ietf.org/html/draft-west-cookie-incrementalism-00).
|
82
|
+
|
69
83
|
### Exclusions
|
70
84
|
|
71
85
|
Sometimes you will want to skip setting the XSRF token for certain controllers (for example, when using SSE or ActionCable, as discussed [here](https://github.com/jsanders/angular_rails_csrf/issues/7)):
|
@@ -13,13 +13,17 @@ module AngularRailsCsrf
|
|
13
13
|
|
14
14
|
config = Rails.application.config
|
15
15
|
|
16
|
+
same_site = same_site_from config
|
17
|
+
secure = secure_from config
|
18
|
+
|
16
19
|
cookie_options = {
|
17
20
|
value: form_authenticity_token,
|
18
|
-
domain: config
|
21
|
+
domain: domain_from(config),
|
22
|
+
same_site: same_site,
|
23
|
+
secure: same_site.eql?(:none) || secure
|
19
24
|
}
|
20
|
-
cookie_options[:secure] = config.angular_rails_csrf_secure if config.respond_to?(:angular_rails_csrf_secure)
|
21
25
|
|
22
|
-
cookie_name =
|
26
|
+
cookie_name = cookie_name_from config
|
23
27
|
cookies[cookie_name] = cookie_options
|
24
28
|
end
|
25
29
|
|
@@ -31,6 +35,24 @@ module AngularRailsCsrf
|
|
31
35
|
end
|
32
36
|
end
|
33
37
|
|
38
|
+
private
|
39
|
+
|
40
|
+
def same_site_from(config)
|
41
|
+
config.respond_to?(:angular_rails_csrf_same_site) ? config.angular_rails_csrf_same_site : :lax
|
42
|
+
end
|
43
|
+
|
44
|
+
def secure_from(config)
|
45
|
+
config.angular_rails_csrf_secure if config.respond_to?(:angular_rails_csrf_secure)
|
46
|
+
end
|
47
|
+
|
48
|
+
def domain_from(config)
|
49
|
+
config.respond_to?(:angular_rails_csrf_domain) ? config.angular_rails_csrf_domain : nil
|
50
|
+
end
|
51
|
+
|
52
|
+
def cookie_name_from(config)
|
53
|
+
config.respond_to?(:angular_rails_csrf_cookie_name) ? config.angular_rails_csrf_cookie_name : 'XSRF-TOKEN'
|
54
|
+
end
|
55
|
+
|
34
56
|
module ClassMethods
|
35
57
|
def exclude_xsrf_token_cookie
|
36
58
|
class_eval do
|
@@ -73,6 +73,44 @@ class AngularRailsCsrfTest < ActionController::TestCase
|
|
73
73
|
end
|
74
74
|
end
|
75
75
|
|
76
|
+
test 'same_site is set to Lax by default' do
|
77
|
+
get :index
|
78
|
+
assert @response.headers['Set-Cookie'].include?('SameSite=Lax')
|
79
|
+
assert_valid_cookie
|
80
|
+
assert_response :success
|
81
|
+
end
|
82
|
+
|
83
|
+
test 'same_site can be configured' do
|
84
|
+
begin
|
85
|
+
config = Rails.application.config
|
86
|
+
config.define_singleton_method(:angular_rails_csrf_same_site) { :strict }
|
87
|
+
|
88
|
+
get :index
|
89
|
+
assert @response.headers['Set-Cookie'].include?('SameSite=Strict')
|
90
|
+
assert_valid_cookie
|
91
|
+
assert_response :success
|
92
|
+
ensure
|
93
|
+
config.instance_eval('undef :angular_rails_csrf_same_site', __FILE__, __LINE__)
|
94
|
+
end
|
95
|
+
end
|
96
|
+
|
97
|
+
test 'secure is set automatically when same_site is set to none' do
|
98
|
+
begin
|
99
|
+
@request.headers['HTTPS'] = 'on'
|
100
|
+
|
101
|
+
config = Rails.application.config
|
102
|
+
config.define_singleton_method(:angular_rails_csrf_same_site) { :none }
|
103
|
+
|
104
|
+
get :index
|
105
|
+
assert @response.headers['Set-Cookie'].include?('SameSite=None')
|
106
|
+
assert @response.headers['Set-Cookie'].include?('secure')
|
107
|
+
assert_valid_cookie
|
108
|
+
assert_response :success
|
109
|
+
ensure
|
110
|
+
config.instance_eval('undef :angular_rails_csrf_same_site', __FILE__, __LINE__)
|
111
|
+
end
|
112
|
+
end
|
113
|
+
|
76
114
|
private
|
77
115
|
|
78
116
|
# Helpers
|
data/test/dummy/log/test.log
CHANGED
@@ -1,84 +1,859 @@
|
|
1
|
+
--------------------------------------------------------------------------------------------------------
|
2
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
3
|
+
--------------------------------------------------------------------------------------------------------
|
4
|
+
Processing by ApplicationController#index as HTML
|
5
|
+
Completed 200 OK in 0ms
|
6
|
+
-----------------------------------------------------------------------------
|
7
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
8
|
+
-----------------------------------------------------------------------------
|
9
|
+
Processing by ApplicationController#create as HTML
|
10
|
+
Completed 200 OK in 1ms
|
11
|
+
-----------------------------------------------------------------------------------------------------
|
12
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
13
|
+
-----------------------------------------------------------------------------------------------------
|
14
|
+
Processing by ApplicationController#create as HTML
|
15
|
+
Can't verify CSRF token authenticity.
|
16
|
+
Completed 422 Unprocessable Entity in 1ms
|
17
|
+
-------------------------------------------------------------------------------------
|
18
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
19
|
+
-------------------------------------------------------------------------------------
|
20
|
+
Processing by ApplicationController#create as HTML
|
21
|
+
Can't verify CSRF token authenticity.
|
22
|
+
Completed 422 Unprocessable Entity in 0ms
|
23
|
+
Processing by ApplicationController#index as HTML
|
24
|
+
Completed 200 OK in 0ms
|
25
|
+
Processing by ApplicationController#create as HTML
|
26
|
+
Completed 200 OK in 0ms
|
27
|
+
Processing by ApplicationController#create as HTML
|
28
|
+
WARNING: Can't verify CSRF token authenticity
|
29
|
+
Completed 422 Unprocessable Entity in 0ms
|
30
|
+
Processing by ApplicationController#create as HTML
|
31
|
+
WARNING: Can't verify CSRF token authenticity
|
32
|
+
Completed 422 Unprocessable Entity in 0ms
|
33
|
+
--------------------------------------------------------------------------------------------------------
|
34
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
35
|
+
--------------------------------------------------------------------------------------------------------
|
36
|
+
Processing by ApplicationController#index as HTML
|
37
|
+
Completed 200 OK in 0ms
|
38
|
+
-----------------------------------------------------------------------------
|
39
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
40
|
+
-----------------------------------------------------------------------------
|
41
|
+
Processing by ApplicationController#create as HTML
|
42
|
+
Completed 200 OK in 1ms
|
43
|
+
-----------------------------------------------------------------------------------------------------
|
44
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
45
|
+
-----------------------------------------------------------------------------------------------------
|
46
|
+
Processing by ApplicationController#create as HTML
|
47
|
+
Can't verify CSRF token authenticity.
|
48
|
+
Completed 422 Unprocessable Entity in 0ms
|
49
|
+
-------------------------------------------------------------------------------------
|
50
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
51
|
+
-------------------------------------------------------------------------------------
|
52
|
+
Processing by ApplicationController#create as HTML
|
53
|
+
Can't verify CSRF token authenticity.
|
54
|
+
Completed 422 Unprocessable Entity in 1ms
|
55
|
+
-------------------------------------------------------------------------------------
|
56
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
57
|
+
-------------------------------------------------------------------------------------
|
58
|
+
Processing by ApplicationController#create as HTML
|
59
|
+
Can't verify CSRF token authenticity.
|
60
|
+
Completed 422 Unprocessable Entity in 1ms
|
61
|
+
-----------------------------------------------------------------------------------------------------
|
62
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
63
|
+
-----------------------------------------------------------------------------------------------------
|
64
|
+
Processing by ApplicationController#create as HTML
|
65
|
+
Can't verify CSRF token authenticity.
|
66
|
+
Completed 422 Unprocessable Entity in 0ms
|
67
|
+
-----------------------------------------------------------------------------
|
68
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
69
|
+
-----------------------------------------------------------------------------
|
70
|
+
Processing by ApplicationController#create as HTML
|
71
|
+
Completed 200 OK in 1ms
|
72
|
+
--------------------------------------------------------------------------------------------------------
|
73
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
74
|
+
--------------------------------------------------------------------------------------------------------
|
75
|
+
Processing by ApplicationController#index as HTML
|
76
|
+
Completed 200 OK in 1ms
|
77
|
+
----------------------------------------------------------------------------
|
78
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
79
|
+
----------------------------------------------------------------------------
|
80
|
+
Processing by ExclusionsController#index as HTML
|
81
|
+
Completed 200 OK in 1ms
|
82
|
+
----------------------------------------------------------------------------
|
83
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
84
|
+
----------------------------------------------------------------------------
|
85
|
+
Processing by ExclusionsController#index as HTML
|
86
|
+
Completed 200 OK in 0ms
|
87
|
+
--------------------------------------------------------------------------------------------------------
|
88
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
89
|
+
--------------------------------------------------------------------------------------------------------
|
90
|
+
Processing by ApplicationController#index as HTML
|
91
|
+
Completed 200 OK in 0ms
|
92
|
+
-----------------------------------------------------------------------------------------------------
|
93
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
94
|
+
-----------------------------------------------------------------------------------------------------
|
95
|
+
Processing by ApplicationController#create as HTML
|
96
|
+
Can't verify CSRF token authenticity.
|
97
|
+
Completed 422 Unprocessable Entity in 1ms
|
98
|
+
-------------------------------------------------------------------------------------
|
99
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
100
|
+
-------------------------------------------------------------------------------------
|
101
|
+
Processing by ApplicationController#create as HTML
|
102
|
+
Can't verify CSRF token authenticity.
|
103
|
+
Completed 422 Unprocessable Entity in 0ms
|
104
|
+
-----------------------------------------------------------------------------
|
105
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
106
|
+
-----------------------------------------------------------------------------
|
107
|
+
Processing by ApplicationController#create as HTML
|
108
|
+
Completed 200 OK in 0ms
|
109
|
+
-----------------------------------------------------------------------------------------------------
|
110
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
111
|
+
-----------------------------------------------------------------------------------------------------
|
112
|
+
Processing by ApplicationController#create as HTML
|
113
|
+
Can't verify CSRF token authenticity.
|
114
|
+
Completed 422 Unprocessable Entity in 0ms
|
115
|
+
-----------------------------------------------------------------------------
|
116
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
117
|
+
-----------------------------------------------------------------------------
|
118
|
+
Processing by ApplicationController#create as HTML
|
119
|
+
Completed 200 OK in 1ms
|
120
|
+
-------------------------------------------------------------------------------------
|
121
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
122
|
+
-------------------------------------------------------------------------------------
|
123
|
+
Processing by ApplicationController#create as HTML
|
124
|
+
Can't verify CSRF token authenticity.
|
125
|
+
Completed 422 Unprocessable Entity in 1ms
|
126
|
+
--------------------------------------------------------------------------------------------------------
|
127
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
128
|
+
--------------------------------------------------------------------------------------------------------
|
129
|
+
Processing by ApplicationController#index as HTML
|
130
|
+
Completed 200 OK in 1ms
|
131
|
+
----------------------------------------------------------------------------
|
132
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
133
|
+
----------------------------------------------------------------------------
|
134
|
+
Processing by ExclusionsController#index as HTML
|
135
|
+
Completed 200 OK in 0ms
|
136
|
+
----------------------------------------------------------------------------
|
137
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
138
|
+
----------------------------------------------------------------------------
|
139
|
+
Processing by ExclusionsController#index as HTML
|
140
|
+
Completed 200 OK in 1ms
|
141
|
+
-----------------------------------------------------------------------------
|
142
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
143
|
+
-----------------------------------------------------------------------------
|
144
|
+
Processing by ApplicationController#create as HTML
|
145
|
+
Completed 200 OK in 0ms
|
146
|
+
--------------------------------------------------------------------------------------------------------
|
147
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
148
|
+
--------------------------------------------------------------------------------------------------------
|
149
|
+
Processing by ApplicationController#index as HTML
|
150
|
+
Completed 200 OK in 0ms
|
151
|
+
-------------------------------------------------------------------------------------
|
152
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
153
|
+
-------------------------------------------------------------------------------------
|
154
|
+
Processing by ApplicationController#create as HTML
|
155
|
+
Can't verify CSRF token authenticity.
|
156
|
+
Completed 422 Unprocessable Entity in 0ms
|
157
|
+
-----------------------------------------------------------------------------------------------------
|
158
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
159
|
+
-----------------------------------------------------------------------------------------------------
|
160
|
+
Processing by ApplicationController#create as HTML
|
161
|
+
Can't verify CSRF token authenticity.
|
162
|
+
Completed 422 Unprocessable Entity in 0ms
|
163
|
+
----------------------------------------------------------------------------
|
164
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
165
|
+
----------------------------------------------------------------------------
|
166
|
+
Processing by ExclusionsController#index as HTML
|
167
|
+
Completed 200 OK in 0ms
|
168
|
+
--------------------------------------------------------
|
169
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
170
|
+
--------------------------------------------------------
|
171
|
+
Processing by ApplicationController#index as HTML
|
172
|
+
Completed 200 OK in 0ms
|
173
|
+
--------------------------------------------------------------------------------------------------------
|
174
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
175
|
+
--------------------------------------------------------------------------------------------------------
|
176
|
+
Processing by ApplicationController#index as HTML
|
177
|
+
Completed 200 OK in 0ms
|
178
|
+
-----------------------------------------------------------------------------------------------------
|
179
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
180
|
+
-----------------------------------------------------------------------------------------------------
|
181
|
+
Processing by ApplicationController#create as HTML
|
182
|
+
Can't verify CSRF token authenticity.
|
183
|
+
Completed 422 Unprocessable Entity in 1ms
|
184
|
+
-------------------------------------------------------------------------------------
|
185
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
186
|
+
-------------------------------------------------------------------------------------
|
187
|
+
Processing by ApplicationController#create as HTML
|
188
|
+
Can't verify CSRF token authenticity.
|
189
|
+
Completed 422 Unprocessable Entity in 0ms
|
190
|
+
-----------------------------------------------------------------------------
|
191
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
192
|
+
-----------------------------------------------------------------------------
|
193
|
+
Processing by ApplicationController#create as HTML
|
194
|
+
Completed 200 OK in 0ms
|
195
|
+
-------------------------------------------------------------------------------------
|
196
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
197
|
+
-------------------------------------------------------------------------------------
|
198
|
+
Processing by ApplicationController#create as HTML
|
199
|
+
Can't verify CSRF token authenticity.
|
200
|
+
Completed 422 Unprocessable Entity in 1ms
|
201
|
+
-----------------------------------------------------------------------------------------------------
|
202
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
203
|
+
-----------------------------------------------------------------------------------------------------
|
204
|
+
Processing by ApplicationController#create as HTML
|
205
|
+
Can't verify CSRF token authenticity.
|
206
|
+
Completed 422 Unprocessable Entity in 1ms
|
207
|
+
-----------------------------------------------------------------------------
|
208
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
209
|
+
-----------------------------------------------------------------------------
|
210
|
+
Processing by ApplicationController#create as HTML
|
211
|
+
Completed 200 OK in 0ms
|
212
|
+
--------------------------------------------------------------------------------------------------------
|
213
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
214
|
+
--------------------------------------------------------------------------------------------------------
|
215
|
+
Processing by ApplicationController#index as HTML
|
216
|
+
Completed 200 OK in 0ms
|
217
|
+
-----------------------------------------------------------------------------
|
218
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
219
|
+
-----------------------------------------------------------------------------
|
220
|
+
Processing by ApplicationController#create as HTML
|
221
|
+
-----------------------------------------------------------------------------
|
222
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
223
|
+
-----------------------------------------------------------------------------
|
224
|
+
Processing by ApplicationController#create as HTML
|
225
|
+
Completed 200 OK in 1ms
|
226
|
+
-----------------------------------------------------------------------------------------------------
|
227
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
228
|
+
-----------------------------------------------------------------------------------------------------
|
229
|
+
Processing by ApplicationController#create as HTML
|
230
|
+
Can't verify CSRF token authenticity.
|
231
|
+
Completed 422 Unprocessable Entity in 1ms
|
232
|
+
-------------------------------------------------------------------------------------
|
233
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
234
|
+
-------------------------------------------------------------------------------------
|
235
|
+
Processing by ApplicationController#create as HTML
|
236
|
+
Can't verify CSRF token authenticity.
|
237
|
+
Completed 422 Unprocessable Entity in 0ms
|
238
|
+
--------------------------------------------------------
|
239
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
240
|
+
--------------------------------------------------------
|
241
|
+
Processing by ApplicationController#index as HTML
|
242
|
+
Completed 200 OK in 0ms
|
243
|
+
--------------------------------------------------------------------------------------------------------
|
244
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
245
|
+
--------------------------------------------------------------------------------------------------------
|
246
|
+
Processing by ApplicationController#index as HTML
|
247
|
+
Completed 200 OK in 0ms
|
248
|
+
----------------------------------------------------------------------------
|
249
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
250
|
+
----------------------------------------------------------------------------
|
251
|
+
Processing by ExclusionsController#index as HTML
|
252
|
+
Completed 200 OK in 0ms
|
253
|
+
----------------------------------------------------------------------------
|
254
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
255
|
+
----------------------------------------------------------------------------
|
256
|
+
Processing by ExclusionsController#index as HTML
|
257
|
+
Completed 200 OK in 0ms
|
258
|
+
-----------------------------------------------------------------------------------------------------
|
259
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
260
|
+
-----------------------------------------------------------------------------------------------------
|
261
|
+
Processing by ApplicationController#create as HTML
|
262
|
+
Can't verify CSRF token authenticity.
|
263
|
+
Completed 422 Unprocessable Entity in 1ms
|
264
|
+
-----------------------------------------------------------------------------
|
265
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
266
|
+
-----------------------------------------------------------------------------
|
267
|
+
Processing by ApplicationController#create as HTML
|
268
|
+
Completed 200 OK in 1ms
|
269
|
+
-------------------------------------------------------------------------------------
|
270
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
271
|
+
-------------------------------------------------------------------------------------
|
272
|
+
Processing by ApplicationController#create as HTML
|
273
|
+
Can't verify CSRF token authenticity.
|
274
|
+
Completed 422 Unprocessable Entity in 1ms
|
275
|
+
--------------------------------------------------------
|
276
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
277
|
+
--------------------------------------------------------
|
278
|
+
Processing by ApplicationController#index as HTML
|
279
|
+
Completed 200 OK in 1ms
|
280
|
+
--------------------------------------------------------------------------------------------------------
|
281
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
282
|
+
--------------------------------------------------------------------------------------------------------
|
283
|
+
Processing by ApplicationController#index as HTML
|
284
|
+
Completed 200 OK in 1ms
|
285
|
+
----------------------------------------------------------------------------
|
286
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
287
|
+
----------------------------------------------------------------------------
|
288
|
+
Processing by ExclusionsController#index as HTML
|
289
|
+
Completed 200 OK in 1ms
|
290
|
+
--------------------------------------------------------
|
291
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
292
|
+
--------------------------------------------------------
|
293
|
+
Processing by ApplicationController#index as HTML
|
294
|
+
Completed 200 OK in 0ms
|
295
|
+
-------------------------------------------------------------------------------------
|
296
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
297
|
+
-------------------------------------------------------------------------------------
|
298
|
+
Processing by ApplicationController#create as HTML
|
299
|
+
Can't verify CSRF token authenticity.
|
300
|
+
Completed 422 Unprocessable Entity in 1ms
|
301
|
+
-----------------------------------------------------------------------------
|
302
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
303
|
+
-----------------------------------------------------------------------------
|
304
|
+
Processing by ApplicationController#create as HTML
|
305
|
+
Completed 200 OK in 0ms
|
306
|
+
--------------------------------------------------------------------------------------------------------
|
307
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
308
|
+
--------------------------------------------------------------------------------------------------------
|
309
|
+
Processing by ApplicationController#index as HTML
|
310
|
+
Completed 200 OK in 0ms
|
311
|
+
-----------------------------------------------------------------------------------------------------
|
312
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
313
|
+
-----------------------------------------------------------------------------------------------------
|
314
|
+
Processing by ApplicationController#create as HTML
|
315
|
+
Can't verify CSRF token authenticity.
|
316
|
+
Completed 422 Unprocessable Entity in 0ms
|
317
|
+
----------------------------------------------------------------------------
|
318
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
319
|
+
----------------------------------------------------------------------------
|
320
|
+
Processing by ExclusionsController#index as HTML
|
321
|
+
Completed 200 OK in 0ms
|
322
|
+
-------------------------------------------------------------------------------------
|
323
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
324
|
+
-------------------------------------------------------------------------------------
|
325
|
+
Processing by ApplicationController#create as HTML
|
326
|
+
Can't verify CSRF token authenticity.
|
327
|
+
Completed 422 Unprocessable Entity in 1ms
|
328
|
+
--------------------------------------------------------------------------------------------------------
|
329
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
330
|
+
--------------------------------------------------------------------------------------------------------
|
331
|
+
Processing by ApplicationController#index as HTML
|
332
|
+
Completed 200 OK in 1ms
|
333
|
+
-----------------------------------------------------------------------------------------------------
|
334
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
335
|
+
-----------------------------------------------------------------------------------------------------
|
336
|
+
Processing by ApplicationController#create as HTML
|
337
|
+
Can't verify CSRF token authenticity.
|
338
|
+
Completed 422 Unprocessable Entity in 0ms
|
339
|
+
--------------------------------------------------------
|
340
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
341
|
+
--------------------------------------------------------
|
342
|
+
Processing by ApplicationController#index as HTML
|
343
|
+
Completed 200 OK in 0ms
|
344
|
+
--------------------------------------------------------
|
345
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
346
|
+
--------------------------------------------------------
|
347
|
+
Processing by ApplicationController#index as HTML
|
348
|
+
Completed 200 OK in 1ms
|
349
|
+
--------------------------------------------------------------------------------------------------------
|
350
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
351
|
+
--------------------------------------------------------------------------------------------------------
|
352
|
+
Processing by ApplicationController#index as HTML
|
353
|
+
Completed 200 OK in 0ms
|
354
|
+
-----------------------------------------------------------------------------
|
355
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
356
|
+
-----------------------------------------------------------------------------
|
357
|
+
Processing by ApplicationController#create as HTML
|
358
|
+
Completed 200 OK in 0ms
|
359
|
+
-------------------------------------------------------------------------------------
|
360
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
361
|
+
-------------------------------------------------------------------------------------
|
362
|
+
Processing by ApplicationController#create as HTML
|
363
|
+
Can't verify CSRF token authenticity.
|
364
|
+
Completed 422 Unprocessable Entity in 1ms
|
365
|
+
-----------------------------------------------------------------------------------------------------
|
366
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
367
|
+
-----------------------------------------------------------------------------------------------------
|
368
|
+
Processing by ApplicationController#create as HTML
|
369
|
+
Can't verify CSRF token authenticity.
|
370
|
+
Completed 422 Unprocessable Entity in 0ms
|
371
|
+
----------------------------------------------------------------------------
|
372
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
373
|
+
----------------------------------------------------------------------------
|
374
|
+
Processing by ExclusionsController#index as HTML
|
375
|
+
Completed 200 OK in 0ms
|
376
|
+
----------------------------------------------------------------------------
|
377
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
378
|
+
----------------------------------------------------------------------------
|
379
|
+
Processing by ExclusionsController#index as HTML
|
380
|
+
Completed 200 OK in 0ms
|
381
|
+
--------------------------------------------------------------------------------------------------------
|
382
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
383
|
+
--------------------------------------------------------------------------------------------------------
|
384
|
+
Processing by ApplicationController#index as HTML
|
385
|
+
Completed 200 OK in 0ms
|
386
|
+
-----------------------------------------------------------------------------------------------------
|
387
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
388
|
+
-----------------------------------------------------------------------------------------------------
|
389
|
+
Processing by ApplicationController#create as HTML
|
390
|
+
Can't verify CSRF token authenticity.
|
391
|
+
Completed 422 Unprocessable Entity in 0ms
|
392
|
+
-------------------------------------------------------------------------------------
|
393
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
394
|
+
-------------------------------------------------------------------------------------
|
395
|
+
Processing by ApplicationController#create as HTML
|
396
|
+
Can't verify CSRF token authenticity.
|
397
|
+
Completed 422 Unprocessable Entity in 0ms
|
398
|
+
--------------------------------------------------------
|
399
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
400
|
+
--------------------------------------------------------
|
401
|
+
Processing by ApplicationController#index as HTML
|
402
|
+
Completed 200 OK in 0ms
|
403
|
+
-----------------------------------------------------------------------------
|
404
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
405
|
+
-----------------------------------------------------------------------------
|
406
|
+
Processing by ApplicationController#create as HTML
|
407
|
+
Completed 200 OK in 0ms
|
408
|
+
-------------------------------------------------------------------------------------
|
409
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
410
|
+
-------------------------------------------------------------------------------------
|
411
|
+
Processing by ApplicationController#create as HTML
|
412
|
+
Can't verify CSRF token authenticity.
|
413
|
+
Completed 422 Unprocessable Entity in 0ms
|
414
|
+
--------------------------------------------------------
|
415
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
416
|
+
--------------------------------------------------------
|
417
|
+
Processing by ApplicationController#index as HTML
|
418
|
+
Completed 200 OK in 0ms
|
419
|
+
-----------------------------------------------------------------------------------------------------
|
420
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
421
|
+
-----------------------------------------------------------------------------------------------------
|
422
|
+
Processing by ApplicationController#create as HTML
|
423
|
+
Can't verify CSRF token authenticity.
|
424
|
+
Completed 422 Unprocessable Entity in 0ms
|
425
|
+
-----------------------------------------------------------
|
426
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
427
|
+
-----------------------------------------------------------
|
428
|
+
Processing by ApplicationController#index as HTML
|
429
|
+
Completed 200 OK in 1ms
|
430
|
+
-----------------------------------------------------------------------------
|
431
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
432
|
+
-----------------------------------------------------------------------------
|
433
|
+
Processing by ApplicationController#create as HTML
|
434
|
+
Completed 200 OK in 0ms
|
435
|
+
--------------------------------------------------------------------------------------------------------
|
436
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
437
|
+
--------------------------------------------------------------------------------------------------------
|
438
|
+
Processing by ApplicationController#index as HTML
|
439
|
+
Completed 200 OK in 0ms
|
440
|
+
----------------------------------------------------------------------------
|
441
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
442
|
+
----------------------------------------------------------------------------
|
443
|
+
Processing by ExclusionsController#index as HTML
|
444
|
+
Completed 200 OK in 0ms
|
445
|
+
--------------------------------------------------------------------------------------------------------
|
446
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
447
|
+
--------------------------------------------------------------------------------------------------------
|
448
|
+
Processing by ApplicationController#index as HTML
|
449
|
+
Completed 200 OK in 0ms
|
450
|
+
-----------------------------------------------------------------------------------------------------
|
451
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
452
|
+
-----------------------------------------------------------------------------------------------------
|
453
|
+
Processing by ApplicationController#create as HTML
|
454
|
+
Can't verify CSRF token authenticity.
|
455
|
+
Completed 422 Unprocessable Entity in 0ms
|
456
|
+
-----------------------------------------------------------------------------
|
457
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
458
|
+
-----------------------------------------------------------------------------
|
459
|
+
Processing by ApplicationController#create as HTML
|
460
|
+
Completed 200 OK in 0ms
|
461
|
+
-----------------------------------------------------------
|
462
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
463
|
+
-----------------------------------------------------------
|
464
|
+
Processing by ApplicationController#index as HTML
|
465
|
+
Completed 200 OK in 0ms
|
466
|
+
--------------------------------------------------------
|
467
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
468
|
+
--------------------------------------------------------
|
469
|
+
Processing by ApplicationController#index as HTML
|
470
|
+
Completed 200 OK in 0ms
|
471
|
+
-------------------------------------------------------------------------------------
|
472
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
473
|
+
-------------------------------------------------------------------------------------
|
474
|
+
Processing by ApplicationController#create as HTML
|
475
|
+
Can't verify CSRF token authenticity.
|
476
|
+
Completed 422 Unprocessable Entity in 0ms
|
477
|
+
----------------------------------------------------------------------------
|
478
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
479
|
+
----------------------------------------------------------------------------
|
480
|
+
Processing by ExclusionsController#index as HTML
|
481
|
+
Completed 200 OK in 0ms
|
482
|
+
--------------------------------------------------------------------------------------------------------
|
483
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
484
|
+
--------------------------------------------------------------------------------------------------------
|
485
|
+
Processing by ApplicationController#index as HTML
|
486
|
+
Completed 200 OK in 0ms
|
487
|
+
-----------------------------------------------------------------------------------------------------
|
488
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
489
|
+
-----------------------------------------------------------------------------------------------------
|
490
|
+
Processing by ApplicationController#create as HTML
|
491
|
+
Can't verify CSRF token authenticity.
|
492
|
+
Completed 422 Unprocessable Entity in 0ms
|
493
|
+
--------------------------------------------------------
|
494
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
495
|
+
--------------------------------------------------------
|
496
|
+
Processing by ApplicationController#index as HTML
|
497
|
+
Completed 200 OK in 0ms
|
498
|
+
-------------------------------------------------------------------------------------
|
499
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
500
|
+
-------------------------------------------------------------------------------------
|
501
|
+
Processing by ApplicationController#create as HTML
|
502
|
+
Can't verify CSRF token authenticity.
|
503
|
+
Completed 422 Unprocessable Entity in 0ms
|
504
|
+
-----------------------------------------------------------------------------
|
505
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
506
|
+
-----------------------------------------------------------------------------
|
507
|
+
Processing by ApplicationController#create as HTML
|
508
|
+
Completed 200 OK in 0ms
|
509
|
+
-----------------------------------------------------------
|
510
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
511
|
+
-----------------------------------------------------------
|
512
|
+
Processing by ApplicationController#index as HTML
|
513
|
+
Completed 200 OK in 0ms
|
514
|
+
----------------------------------------------------------------------------
|
515
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
516
|
+
----------------------------------------------------------------------------
|
517
|
+
Processing by ExclusionsController#index as HTML
|
518
|
+
Completed 200 OK in 0ms
|
1
519
|
----------------------------------------------------------------------------
|
2
520
|
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
3
521
|
----------------------------------------------------------------------------
|
4
522
|
Processing by ExclusionsController#index as HTML
|
5
523
|
Completed 200 OK in 0ms (Allocations: 128)
|
524
|
+
-------------------------------------------------------------------------------------
|
525
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
526
|
+
-------------------------------------------------------------------------------------
|
527
|
+
Processing by ApplicationController#create as HTML
|
528
|
+
Can't verify CSRF token authenticity.
|
529
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 118)
|
6
530
|
--------------------------------------------------------
|
7
531
|
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
8
532
|
--------------------------------------------------------
|
9
533
|
Processing by ApplicationController#index as HTML
|
10
|
-
Completed 200 OK in 0ms (Allocations:
|
11
|
-
|
12
|
-
AngularRailsCsrfTest:
|
13
|
-
|
534
|
+
Completed 200 OK in 0ms (Allocations: 119)
|
535
|
+
--------------------------------------------------------------------------------------------------------
|
536
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
537
|
+
--------------------------------------------------------------------------------------------------------
|
14
538
|
Processing by ApplicationController#index as HTML
|
15
|
-
Completed 200 OK in 0ms (Allocations:
|
539
|
+
Completed 200 OK in 0ms (Allocations: 116)
|
540
|
+
-----------------------------------------------------------------------------------------------------
|
541
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
542
|
+
-----------------------------------------------------------------------------------------------------
|
543
|
+
Processing by ApplicationController#create as HTML
|
544
|
+
Can't verify CSRF token authenticity.
|
545
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 109)
|
546
|
+
-----------------------------------------------------------------------------
|
547
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
548
|
+
-----------------------------------------------------------------------------
|
549
|
+
Processing by ApplicationController#create as HTML
|
550
|
+
Completed 200 OK in 0ms (Allocations: 136)
|
551
|
+
-----------------------------------------------------------
|
552
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
553
|
+
-----------------------------------------------------------
|
554
|
+
Processing by ApplicationController#index as HTML
|
555
|
+
Completed 200 OK in 0ms (Allocations: 116)
|
556
|
+
----------------------------------------------------------------------------
|
557
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
558
|
+
----------------------------------------------------------------------------
|
559
|
+
Processing by ExclusionsController#index as HTML
|
560
|
+
Completed 200 OK in 0ms (Allocations: 128)
|
561
|
+
--------------------------------------------------------------------------------------------------------
|
562
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
563
|
+
--------------------------------------------------------------------------------------------------------
|
564
|
+
Processing by ApplicationController#index as HTML
|
565
|
+
Completed 200 OK in 0ms (Allocations: 110)
|
566
|
+
-----------------------------------------------------------------------------
|
567
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
568
|
+
-----------------------------------------------------------------------------
|
569
|
+
Processing by ApplicationController#create as HTML
|
570
|
+
Completed 200 OK in 0ms (Allocations: 135)
|
571
|
+
--------------------------------------------------------
|
572
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
573
|
+
--------------------------------------------------------
|
574
|
+
Processing by ApplicationController#index as HTML
|
575
|
+
Completed 200 OK in 0ms (Allocations: 120)
|
16
576
|
-------------------------------------------------------------------------------------
|
17
577
|
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
18
578
|
-------------------------------------------------------------------------------------
|
19
579
|
Processing by ApplicationController#create as HTML
|
20
580
|
Can't verify CSRF token authenticity.
|
21
|
-
Completed 422 Unprocessable Entity in
|
581
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 106)
|
582
|
+
-----------------------------------------------------------
|
583
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
584
|
+
-----------------------------------------------------------
|
585
|
+
Processing by ApplicationController#index as HTML
|
586
|
+
Completed 200 OK in 0ms (Allocations: 118)
|
587
|
+
-----------------------------------------------------------------------------------------------------
|
588
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
589
|
+
-----------------------------------------------------------------------------------------------------
|
590
|
+
Processing by ApplicationController#create as HTML
|
591
|
+
Can't verify CSRF token authenticity.
|
592
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 104)
|
22
593
|
--------------------------------------------------------------------------------------------------------
|
23
594
|
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
24
595
|
--------------------------------------------------------------------------------------------------------
|
25
596
|
Processing by ApplicationController#index as HTML
|
26
|
-
Completed 200 OK in 0ms (Allocations:
|
597
|
+
Completed 200 OK in 0ms (Allocations: 172)
|
598
|
+
--------------------------------------------------------
|
599
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
600
|
+
--------------------------------------------------------
|
601
|
+
Processing by ApplicationController#index as HTML
|
602
|
+
Completed 200 OK in 0ms (Allocations: 119)
|
27
603
|
-----------------------------------------------------------
|
28
604
|
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
29
605
|
-----------------------------------------------------------
|
30
606
|
Processing by ApplicationController#index as HTML
|
31
|
-
Completed 200 OK in 0ms (Allocations:
|
607
|
+
Completed 200 OK in 0ms (Allocations: 117)
|
32
608
|
-----------------------------------------------------------------------------------------------------
|
33
609
|
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
34
610
|
-----------------------------------------------------------------------------------------------------
|
35
611
|
Processing by ApplicationController#create as HTML
|
36
612
|
Can't verify CSRF token authenticity.
|
37
|
-
Completed 422 Unprocessable Entity in 0ms (Allocations:
|
613
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 116)
|
38
614
|
-----------------------------------------------------------------------------
|
39
615
|
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
40
616
|
-----------------------------------------------------------------------------
|
41
617
|
Processing by ApplicationController#create as HTML
|
42
|
-
Completed 200 OK in 0ms (Allocations:
|
618
|
+
Completed 200 OK in 0ms (Allocations: 136)
|
619
|
+
-------------------------------------------------------------------------------------
|
620
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
621
|
+
-------------------------------------------------------------------------------------
|
622
|
+
Processing by ApplicationController#create as HTML
|
623
|
+
Can't verify CSRF token authenticity.
|
624
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 98)
|
625
|
+
----------------------------------------------------------------------------
|
626
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
627
|
+
----------------------------------------------------------------------------
|
628
|
+
Processing by ExclusionsController#index as HTML
|
629
|
+
Completed 200 OK in 0ms (Allocations: 71)
|
630
|
+
--------------------------------------------------------
|
631
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
632
|
+
--------------------------------------------------------
|
633
|
+
Processing by ApplicationController#index as HTML
|
634
|
+
Completed 200 OK in 0ms (Allocations: 183)
|
635
|
+
-------------------------------------------------------------------------------------
|
636
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
637
|
+
-------------------------------------------------------------------------------------
|
638
|
+
Processing by ApplicationController#create as HTML
|
639
|
+
Can't verify CSRF token authenticity.
|
640
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 111)
|
641
|
+
-----------------------------------------------------------------------------
|
642
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
643
|
+
-----------------------------------------------------------------------------
|
644
|
+
Processing by ApplicationController#create as HTML
|
645
|
+
Completed 200 OK in 0ms (Allocations: 136)
|
43
646
|
-----------------------------------------------------------------------------------------------------
|
44
647
|
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
45
648
|
-----------------------------------------------------------------------------------------------------
|
46
649
|
Processing by ApplicationController#create as HTML
|
47
650
|
Can't verify CSRF token authenticity.
|
48
|
-
Completed 422 Unprocessable Entity in 0ms (Allocations:
|
651
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
|
49
652
|
--------------------------------------------------------------------------------------------------------
|
50
653
|
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
51
654
|
--------------------------------------------------------------------------------------------------------
|
52
655
|
Processing by ApplicationController#index as HTML
|
53
|
-
Completed 200 OK in 0ms (Allocations:
|
54
|
-
|
55
|
-
AngularRailsCsrfTest:
|
56
|
-
|
656
|
+
Completed 200 OK in 0ms (Allocations: 117)
|
657
|
+
-----------------------------------------------------------
|
658
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
659
|
+
-----------------------------------------------------------
|
57
660
|
Processing by ApplicationController#index as HTML
|
58
|
-
Completed 200 OK in 0ms (Allocations:
|
661
|
+
Completed 200 OK in 0ms (Allocations: 117)
|
662
|
+
----------------------------------------------------------------------------
|
663
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
664
|
+
----------------------------------------------------------------------------
|
665
|
+
Processing by ExclusionsController#index as HTML
|
666
|
+
Completed 200 OK in 0ms (Allocations: 71)
|
667
|
+
----------------------------------------------------------------------------
|
668
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
669
|
+
----------------------------------------------------------------------------
|
670
|
+
Processing by ExclusionsController#index as HTML
|
671
|
+
Completed 200 OK in 0ms (Allocations: 128)
|
672
|
+
-----------------------------------------------------------
|
673
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
674
|
+
-----------------------------------------------------------
|
675
|
+
Processing by ApplicationController#index as HTML
|
676
|
+
Completed 200 OK in 0ms (Allocations: 109)
|
677
|
+
--------------------------------------------------------
|
678
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
679
|
+
--------------------------------------------------------
|
680
|
+
Processing by ApplicationController#index as HTML
|
681
|
+
Completed 200 OK in 0ms (Allocations: 119)
|
682
|
+
-------------------------------------------------------------------------------------
|
683
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
684
|
+
-------------------------------------------------------------------------------------
|
685
|
+
Processing by ApplicationController#create as HTML
|
686
|
+
Can't verify CSRF token authenticity.
|
687
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 111)
|
688
|
+
--------------------------------------------------------------------------------------------------------
|
689
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
690
|
+
--------------------------------------------------------------------------------------------------------
|
691
|
+
Processing by ApplicationController#index as HTML
|
692
|
+
Completed 200 OK in 0ms (Allocations: 117)
|
693
|
+
-----------------------------------------------------------------------------------------------------
|
694
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
695
|
+
-----------------------------------------------------------------------------------------------------
|
696
|
+
Processing by ApplicationController#create as HTML
|
697
|
+
Can't verify CSRF token authenticity.
|
698
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
|
59
699
|
-----------------------------------------------------------------------------
|
60
700
|
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
61
701
|
-----------------------------------------------------------------------------
|
62
702
|
Processing by ApplicationController#create as HTML
|
63
|
-
Completed 200 OK in 0ms (Allocations:
|
703
|
+
Completed 200 OK in 0ms (Allocations: 136)
|
704
|
+
----------------------------------------------------------------------------
|
705
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
706
|
+
----------------------------------------------------------------------------
|
707
|
+
Processing by ExclusionsController#index as HTML
|
708
|
+
Completed 200 OK in 0ms (Allocations: 128)
|
709
|
+
-----------------------------------------------------------------------------------------------------
|
710
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
711
|
+
-----------------------------------------------------------------------------------------------------
|
712
|
+
Processing by ApplicationController#create as HTML
|
713
|
+
Can't verify CSRF token authenticity.
|
714
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 117)
|
715
|
+
-----------------------------------------------------------------------------
|
716
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
717
|
+
-----------------------------------------------------------------------------
|
718
|
+
Processing by ApplicationController#create as HTML
|
719
|
+
Completed 200 OK in 1ms (Allocations: 128)
|
720
|
+
--------------------------------------------------------------------------------------------------------
|
721
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
722
|
+
--------------------------------------------------------------------------------------------------------
|
723
|
+
Processing by ApplicationController#index as HTML
|
724
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
64
725
|
-------------------------------------------------------------------------------------
|
65
726
|
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
66
727
|
-------------------------------------------------------------------------------------
|
67
728
|
Processing by ApplicationController#create as HTML
|
68
729
|
Can't verify CSRF token authenticity.
|
69
730
|
Completed 422 Unprocessable Entity in 0ms (Allocations: 98)
|
731
|
+
---------------------------------------------------------------
|
732
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
733
|
+
---------------------------------------------------------------
|
734
|
+
Processing by ApplicationController#index as HTML
|
735
|
+
Completed 200 OK in 1ms (Allocations: 106)
|
736
|
+
--------------------------------------------------------
|
737
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
738
|
+
--------------------------------------------------------
|
739
|
+
Processing by ApplicationController#index as HTML
|
740
|
+
Completed 200 OK in 1ms (Allocations: 117)
|
741
|
+
-----------------------------------------------------------
|
742
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
743
|
+
-----------------------------------------------------------
|
744
|
+
Processing by ApplicationController#index as HTML
|
745
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
746
|
+
----------------------------------------------------------------------------
|
747
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
748
|
+
----------------------------------------------------------------------------
|
749
|
+
Processing by ExclusionsController#index as HTML
|
750
|
+
Completed 200 OK in 0ms (Allocations: 128)
|
751
|
+
---------------------------------------------------------------
|
752
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
753
|
+
---------------------------------------------------------------
|
754
|
+
Processing by ApplicationController#index as HTML
|
755
|
+
Completed 200 OK in 0ms (Allocations: 107)
|
756
|
+
-----------------------------------------------------------------------------
|
757
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
758
|
+
-----------------------------------------------------------------------------
|
759
|
+
Processing by ApplicationController#create as HTML
|
760
|
+
Completed 200 OK in 0ms (Allocations: 131)
|
761
|
+
-------------------------------------------------------------
|
762
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
763
|
+
-------------------------------------------------------------
|
764
|
+
Processing by ApplicationController#index as HTML
|
765
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
766
|
+
--------------------------------------------------------------------------------------------------------
|
767
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
768
|
+
--------------------------------------------------------------------------------------------------------
|
769
|
+
Processing by ApplicationController#index as HTML
|
770
|
+
Completed 200 OK in 1ms (Allocations: 106)
|
70
771
|
-----------------------------------------------------------
|
71
772
|
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
72
773
|
-----------------------------------------------------------
|
73
774
|
Processing by ApplicationController#index as HTML
|
74
775
|
Completed 200 OK in 0ms (Allocations: 106)
|
776
|
+
-----------------------------------------------------------------------------------------------------
|
777
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
778
|
+
-----------------------------------------------------------------------------------------------------
|
779
|
+
Processing by ApplicationController#create as HTML
|
780
|
+
Can't verify CSRF token authenticity.
|
781
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 110)
|
75
782
|
--------------------------------------------------------
|
76
783
|
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
77
784
|
--------------------------------------------------------
|
78
785
|
Processing by ApplicationController#index as HTML
|
79
786
|
Completed 200 OK in 0ms (Allocations: 117)
|
787
|
+
------------------------------------------------------
|
788
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
789
|
+
------------------------------------------------------
|
790
|
+
Processing by ApplicationController#index as HTML
|
791
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
792
|
+
------------------------------------------------------------------------------------
|
793
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
794
|
+
------------------------------------------------------------------------------------
|
795
|
+
Processing by ApplicationController#index as HTML
|
796
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
797
|
+
-------------------------------------------------------------------------------------
|
798
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
799
|
+
-------------------------------------------------------------------------------------
|
800
|
+
Processing by ApplicationController#create as HTML
|
801
|
+
Can't verify CSRF token authenticity.
|
802
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 98)
|
80
803
|
----------------------------------------------------------------------------
|
81
804
|
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
82
805
|
----------------------------------------------------------------------------
|
83
806
|
Processing by ExclusionsController#index as HTML
|
84
|
-
Completed 200 OK in 0ms (Allocations:
|
807
|
+
Completed 200 OK in 0ms (Allocations: 128)
|
808
|
+
--------------------------------------------------------
|
809
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
810
|
+
--------------------------------------------------------
|
811
|
+
Processing by ApplicationController#index as HTML
|
812
|
+
Completed 200 OK in 0ms (Allocations: 122)
|
813
|
+
-----------------------------------------------------------
|
814
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
815
|
+
-----------------------------------------------------------
|
816
|
+
Processing by ApplicationController#index as HTML
|
817
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
818
|
+
---------------------------------------------------------------
|
819
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
820
|
+
---------------------------------------------------------------
|
821
|
+
Processing by ApplicationController#index as HTML
|
822
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
823
|
+
-------------------------------------------------------------------------------------
|
824
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
825
|
+
-------------------------------------------------------------------------------------
|
826
|
+
Processing by ApplicationController#create as HTML
|
827
|
+
Can't verify CSRF token authenticity.
|
828
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 111)
|
829
|
+
--------------------------------------------------------------------------------------------------------
|
830
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
831
|
+
--------------------------------------------------------------------------------------------------------
|
832
|
+
Processing by ApplicationController#index as HTML
|
833
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
834
|
+
------------------------------------------------------
|
835
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
836
|
+
------------------------------------------------------
|
837
|
+
Processing by ApplicationController#index as HTML
|
838
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
839
|
+
-------------------------------------------------------------
|
840
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
841
|
+
-------------------------------------------------------------
|
842
|
+
Processing by ApplicationController#index as HTML
|
843
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
844
|
+
-----------------------------------------------------------------------------------------------------
|
845
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
846
|
+
-----------------------------------------------------------------------------------------------------
|
847
|
+
Processing by ApplicationController#create as HTML
|
848
|
+
Can't verify CSRF token authenticity.
|
849
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
|
850
|
+
------------------------------------------------------------------------------------
|
851
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
852
|
+
------------------------------------------------------------------------------------
|
853
|
+
Processing by ApplicationController#index as HTML
|
854
|
+
Completed 200 OK in 1ms (Allocations: 106)
|
855
|
+
-----------------------------------------------------------------------------
|
856
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
857
|
+
-----------------------------------------------------------------------------
|
858
|
+
Processing by ApplicationController#create as HTML
|
859
|
+
Completed 200 OK in 0ms (Allocations: 125)
|
metadata
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: angular_rails_csrf
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 4.
|
4
|
+
version: 4.2.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- James Sanders
|
@@ -9,7 +9,7 @@ authors:
|
|
9
9
|
autorequire:
|
10
10
|
bindir: bin
|
11
11
|
cert_chain: []
|
12
|
-
date: 2020-
|
12
|
+
date: 2020-03-31 00:00:00.000000000 Z
|
13
13
|
dependencies:
|
14
14
|
- !ruby/object:Gem::Dependency
|
15
15
|
name: rake
|
@@ -45,14 +45,14 @@ dependencies:
|
|
45
45
|
requirements:
|
46
46
|
- - '='
|
47
47
|
- !ruby/object:Gem::Version
|
48
|
-
version: 6.0.2.
|
48
|
+
version: 6.0.2.2
|
49
49
|
type: :development
|
50
50
|
prerelease: false
|
51
51
|
version_requirements: !ruby/object:Gem::Requirement
|
52
52
|
requirements:
|
53
53
|
- - '='
|
54
54
|
- !ruby/object:Gem::Version
|
55
|
-
version: 6.0.2.
|
55
|
+
version: 6.0.2.2
|
56
56
|
- !ruby/object:Gem::Dependency
|
57
57
|
name: railties
|
58
58
|
requirement: !ruby/object:Gem::Requirement
|