angular_rails_csrf 4.1.0 → 4.2.0

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: cb986857041fa113b693338d3cc6522f6c1326ac305b766b87be1def7486a181
4
- data.tar.gz: e654cf89758e0c5ff1ea4cea3f3cf72f192020fedbf0e1d7e8d330981df5c275
3
+ metadata.gz: 4e8a320d5c0af2703ea102297a762789112438a32347be78810f9ed0a38f0944
4
+ data.tar.gz: 69b97e7968cc7969768432e5b37a73aae82525dc22aa4736aca1ef008f479568
5
5
  SHA512:
6
- metadata.gz: 23f590d6e1529e5e87a771a19db9d111fde87c860394875eb03c1e7af5b25c9ad21a4b508d8951cb2bd6f0fa18899b6297ba6281acdfc42a54d354147027412f
7
- data.tar.gz: e724f90adc748adedbc58514d466f911ce840d47863d4287e27b74cb1d04a17dfe9599ad547366d0b98dfa8d5f57f31422c329434fa4728d456b4077106e9b64
6
+ metadata.gz: 064c1ad9b08d278ba698c7e0deebd6a0169aeba2f665c9ada2e67fe08cc704cd7d1d21cb79d31be3bf55d985d951988e87239b67ca03169ea6b6bbaf740423aa
7
+ data.tar.gz: 9a6126ddfa20f2d162e569a277f539b5b15bceddc5f75f2321f8d2d5771b6b5de53c54a388397b91e7ee94d4a2bb08d812f01b230078f33d5d46884f7f67952a
data/README.md CHANGED
@@ -66,6 +66,20 @@ end
66
66
 
67
67
  `angular_rails_csrf_secure` defaults to `false`.
68
68
 
69
+ ### SameSite
70
+
71
+ The SameSite attribute defaults to `:lax`. You can override this in the config:
72
+
73
+ ```ruby
74
+ # application.rb
75
+ class Application < Rails::Application
76
+ #...
77
+ config.angular_rails_csrf_same_site = :strict
78
+ end
79
+ ```
80
+
81
+ **NOTE**: When using `config.angular_rails_csrf_same_site = :none`, this gem automatically sets the cookie to `Secure` (`config.angular_rails_csrf_secure = true`) to comply with [the specifications](https://tools.ietf.org/html/draft-west-cookie-incrementalism-00).
82
+
69
83
  ### Exclusions
70
84
 
71
85
  Sometimes you will want to skip setting the XSRF token for certain controllers (for example, when using SSE or ActionCable, as discussed [here](https://github.com/jsanders/angular_rails_csrf/issues/7)):
@@ -13,13 +13,17 @@ module AngularRailsCsrf
13
13
 
14
14
  config = Rails.application.config
15
15
 
16
+ same_site = same_site_from config
17
+ secure = secure_from config
18
+
16
19
  cookie_options = {
17
20
  value: form_authenticity_token,
18
- domain: config.respond_to?(:angular_rails_csrf_domain) ? config.angular_rails_csrf_domain : nil
21
+ domain: domain_from(config),
22
+ same_site: same_site,
23
+ secure: same_site.eql?(:none) || secure
19
24
  }
20
- cookie_options[:secure] = config.angular_rails_csrf_secure if config.respond_to?(:angular_rails_csrf_secure)
21
25
 
22
- cookie_name = config.respond_to?(:angular_rails_csrf_cookie_name) ? config.angular_rails_csrf_cookie_name : 'XSRF-TOKEN'
26
+ cookie_name = cookie_name_from config
23
27
  cookies[cookie_name] = cookie_options
24
28
  end
25
29
 
@@ -31,6 +35,24 @@ module AngularRailsCsrf
31
35
  end
32
36
  end
33
37
 
38
+ private
39
+
40
+ def same_site_from(config)
41
+ config.respond_to?(:angular_rails_csrf_same_site) ? config.angular_rails_csrf_same_site : :lax
42
+ end
43
+
44
+ def secure_from(config)
45
+ config.angular_rails_csrf_secure if config.respond_to?(:angular_rails_csrf_secure)
46
+ end
47
+
48
+ def domain_from(config)
49
+ config.respond_to?(:angular_rails_csrf_domain) ? config.angular_rails_csrf_domain : nil
50
+ end
51
+
52
+ def cookie_name_from(config)
53
+ config.respond_to?(:angular_rails_csrf_cookie_name) ? config.angular_rails_csrf_cookie_name : 'XSRF-TOKEN'
54
+ end
55
+
34
56
  module ClassMethods
35
57
  def exclude_xsrf_token_cookie
36
58
  class_eval do
@@ -1,5 +1,5 @@
1
1
  # frozen_string_literal: true
2
2
 
3
3
  module AngularRailsCsrf
4
- VERSION = '4.1.0'
4
+ VERSION = '4.2.0'
5
5
  end
@@ -73,6 +73,44 @@ class AngularRailsCsrfTest < ActionController::TestCase
73
73
  end
74
74
  end
75
75
 
76
+ test 'same_site is set to Lax by default' do
77
+ get :index
78
+ assert @response.headers['Set-Cookie'].include?('SameSite=Lax')
79
+ assert_valid_cookie
80
+ assert_response :success
81
+ end
82
+
83
+ test 'same_site can be configured' do
84
+ begin
85
+ config = Rails.application.config
86
+ config.define_singleton_method(:angular_rails_csrf_same_site) { :strict }
87
+
88
+ get :index
89
+ assert @response.headers['Set-Cookie'].include?('SameSite=Strict')
90
+ assert_valid_cookie
91
+ assert_response :success
92
+ ensure
93
+ config.instance_eval('undef :angular_rails_csrf_same_site', __FILE__, __LINE__)
94
+ end
95
+ end
96
+
97
+ test 'secure is set automatically when same_site is set to none' do
98
+ begin
99
+ @request.headers['HTTPS'] = 'on'
100
+
101
+ config = Rails.application.config
102
+ config.define_singleton_method(:angular_rails_csrf_same_site) { :none }
103
+
104
+ get :index
105
+ assert @response.headers['Set-Cookie'].include?('SameSite=None')
106
+ assert @response.headers['Set-Cookie'].include?('secure')
107
+ assert_valid_cookie
108
+ assert_response :success
109
+ ensure
110
+ config.instance_eval('undef :angular_rails_csrf_same_site', __FILE__, __LINE__)
111
+ end
112
+ end
113
+
76
114
  private
77
115
 
78
116
  # Helpers
@@ -1,84 +1,859 @@
1
+ --------------------------------------------------------------------------------------------------------
2
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
3
+ --------------------------------------------------------------------------------------------------------
4
+ Processing by ApplicationController#index as HTML
5
+ Completed 200 OK in 0ms
6
+ -----------------------------------------------------------------------------
7
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
8
+ -----------------------------------------------------------------------------
9
+ Processing by ApplicationController#create as HTML
10
+ Completed 200 OK in 1ms
11
+ -----------------------------------------------------------------------------------------------------
12
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
13
+ -----------------------------------------------------------------------------------------------------
14
+ Processing by ApplicationController#create as HTML
15
+ Can't verify CSRF token authenticity.
16
+ Completed 422 Unprocessable Entity in 1ms
17
+ -------------------------------------------------------------------------------------
18
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
19
+ -------------------------------------------------------------------------------------
20
+ Processing by ApplicationController#create as HTML
21
+ Can't verify CSRF token authenticity.
22
+ Completed 422 Unprocessable Entity in 0ms
23
+ Processing by ApplicationController#index as HTML
24
+ Completed 200 OK in 0ms
25
+ Processing by ApplicationController#create as HTML
26
+ Completed 200 OK in 0ms
27
+ Processing by ApplicationController#create as HTML
28
+ WARNING: Can't verify CSRF token authenticity
29
+ Completed 422 Unprocessable Entity in 0ms
30
+ Processing by ApplicationController#create as HTML
31
+ WARNING: Can't verify CSRF token authenticity
32
+ Completed 422 Unprocessable Entity in 0ms
33
+ --------------------------------------------------------------------------------------------------------
34
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
35
+ --------------------------------------------------------------------------------------------------------
36
+ Processing by ApplicationController#index as HTML
37
+ Completed 200 OK in 0ms
38
+ -----------------------------------------------------------------------------
39
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
40
+ -----------------------------------------------------------------------------
41
+ Processing by ApplicationController#create as HTML
42
+ Completed 200 OK in 1ms
43
+ -----------------------------------------------------------------------------------------------------
44
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
45
+ -----------------------------------------------------------------------------------------------------
46
+ Processing by ApplicationController#create as HTML
47
+ Can't verify CSRF token authenticity.
48
+ Completed 422 Unprocessable Entity in 0ms
49
+ -------------------------------------------------------------------------------------
50
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
51
+ -------------------------------------------------------------------------------------
52
+ Processing by ApplicationController#create as HTML
53
+ Can't verify CSRF token authenticity.
54
+ Completed 422 Unprocessable Entity in 1ms
55
+ -------------------------------------------------------------------------------------
56
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
57
+ -------------------------------------------------------------------------------------
58
+ Processing by ApplicationController#create as HTML
59
+ Can't verify CSRF token authenticity.
60
+ Completed 422 Unprocessable Entity in 1ms
61
+ -----------------------------------------------------------------------------------------------------
62
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
63
+ -----------------------------------------------------------------------------------------------------
64
+ Processing by ApplicationController#create as HTML
65
+ Can't verify CSRF token authenticity.
66
+ Completed 422 Unprocessable Entity in 0ms
67
+ -----------------------------------------------------------------------------
68
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
69
+ -----------------------------------------------------------------------------
70
+ Processing by ApplicationController#create as HTML
71
+ Completed 200 OK in 1ms
72
+ --------------------------------------------------------------------------------------------------------
73
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
74
+ --------------------------------------------------------------------------------------------------------
75
+ Processing by ApplicationController#index as HTML
76
+ Completed 200 OK in 1ms
77
+ ----------------------------------------------------------------------------
78
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
79
+ ----------------------------------------------------------------------------
80
+ Processing by ExclusionsController#index as HTML
81
+ Completed 200 OK in 1ms
82
+ ----------------------------------------------------------------------------
83
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
84
+ ----------------------------------------------------------------------------
85
+ Processing by ExclusionsController#index as HTML
86
+ Completed 200 OK in 0ms
87
+ --------------------------------------------------------------------------------------------------------
88
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
89
+ --------------------------------------------------------------------------------------------------------
90
+ Processing by ApplicationController#index as HTML
91
+ Completed 200 OK in 0ms
92
+ -----------------------------------------------------------------------------------------------------
93
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
94
+ -----------------------------------------------------------------------------------------------------
95
+ Processing by ApplicationController#create as HTML
96
+ Can't verify CSRF token authenticity.
97
+ Completed 422 Unprocessable Entity in 1ms
98
+ -------------------------------------------------------------------------------------
99
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
100
+ -------------------------------------------------------------------------------------
101
+ Processing by ApplicationController#create as HTML
102
+ Can't verify CSRF token authenticity.
103
+ Completed 422 Unprocessable Entity in 0ms
104
+ -----------------------------------------------------------------------------
105
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
106
+ -----------------------------------------------------------------------------
107
+ Processing by ApplicationController#create as HTML
108
+ Completed 200 OK in 0ms
109
+ -----------------------------------------------------------------------------------------------------
110
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
111
+ -----------------------------------------------------------------------------------------------------
112
+ Processing by ApplicationController#create as HTML
113
+ Can't verify CSRF token authenticity.
114
+ Completed 422 Unprocessable Entity in 0ms
115
+ -----------------------------------------------------------------------------
116
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
117
+ -----------------------------------------------------------------------------
118
+ Processing by ApplicationController#create as HTML
119
+ Completed 200 OK in 1ms
120
+ -------------------------------------------------------------------------------------
121
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
122
+ -------------------------------------------------------------------------------------
123
+ Processing by ApplicationController#create as HTML
124
+ Can't verify CSRF token authenticity.
125
+ Completed 422 Unprocessable Entity in 1ms
126
+ --------------------------------------------------------------------------------------------------------
127
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
128
+ --------------------------------------------------------------------------------------------------------
129
+ Processing by ApplicationController#index as HTML
130
+ Completed 200 OK in 1ms
131
+ ----------------------------------------------------------------------------
132
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
133
+ ----------------------------------------------------------------------------
134
+ Processing by ExclusionsController#index as HTML
135
+ Completed 200 OK in 0ms
136
+ ----------------------------------------------------------------------------
137
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
138
+ ----------------------------------------------------------------------------
139
+ Processing by ExclusionsController#index as HTML
140
+ Completed 200 OK in 1ms
141
+ -----------------------------------------------------------------------------
142
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
143
+ -----------------------------------------------------------------------------
144
+ Processing by ApplicationController#create as HTML
145
+ Completed 200 OK in 0ms
146
+ --------------------------------------------------------------------------------------------------------
147
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
148
+ --------------------------------------------------------------------------------------------------------
149
+ Processing by ApplicationController#index as HTML
150
+ Completed 200 OK in 0ms
151
+ -------------------------------------------------------------------------------------
152
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
153
+ -------------------------------------------------------------------------------------
154
+ Processing by ApplicationController#create as HTML
155
+ Can't verify CSRF token authenticity.
156
+ Completed 422 Unprocessable Entity in 0ms
157
+ -----------------------------------------------------------------------------------------------------
158
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
159
+ -----------------------------------------------------------------------------------------------------
160
+ Processing by ApplicationController#create as HTML
161
+ Can't verify CSRF token authenticity.
162
+ Completed 422 Unprocessable Entity in 0ms
163
+ ----------------------------------------------------------------------------
164
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
165
+ ----------------------------------------------------------------------------
166
+ Processing by ExclusionsController#index as HTML
167
+ Completed 200 OK in 0ms
168
+ --------------------------------------------------------
169
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
170
+ --------------------------------------------------------
171
+ Processing by ApplicationController#index as HTML
172
+ Completed 200 OK in 0ms
173
+ --------------------------------------------------------------------------------------------------------
174
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
175
+ --------------------------------------------------------------------------------------------------------
176
+ Processing by ApplicationController#index as HTML
177
+ Completed 200 OK in 0ms
178
+ -----------------------------------------------------------------------------------------------------
179
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
180
+ -----------------------------------------------------------------------------------------------------
181
+ Processing by ApplicationController#create as HTML
182
+ Can't verify CSRF token authenticity.
183
+ Completed 422 Unprocessable Entity in 1ms
184
+ -------------------------------------------------------------------------------------
185
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
186
+ -------------------------------------------------------------------------------------
187
+ Processing by ApplicationController#create as HTML
188
+ Can't verify CSRF token authenticity.
189
+ Completed 422 Unprocessable Entity in 0ms
190
+ -----------------------------------------------------------------------------
191
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
192
+ -----------------------------------------------------------------------------
193
+ Processing by ApplicationController#create as HTML
194
+ Completed 200 OK in 0ms
195
+ -------------------------------------------------------------------------------------
196
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
197
+ -------------------------------------------------------------------------------------
198
+ Processing by ApplicationController#create as HTML
199
+ Can't verify CSRF token authenticity.
200
+ Completed 422 Unprocessable Entity in 1ms
201
+ -----------------------------------------------------------------------------------------------------
202
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
203
+ -----------------------------------------------------------------------------------------------------
204
+ Processing by ApplicationController#create as HTML
205
+ Can't verify CSRF token authenticity.
206
+ Completed 422 Unprocessable Entity in 1ms
207
+ -----------------------------------------------------------------------------
208
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
209
+ -----------------------------------------------------------------------------
210
+ Processing by ApplicationController#create as HTML
211
+ Completed 200 OK in 0ms
212
+ --------------------------------------------------------------------------------------------------------
213
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
214
+ --------------------------------------------------------------------------------------------------------
215
+ Processing by ApplicationController#index as HTML
216
+ Completed 200 OK in 0ms
217
+ -----------------------------------------------------------------------------
218
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
219
+ -----------------------------------------------------------------------------
220
+ Processing by ApplicationController#create as HTML
221
+ -----------------------------------------------------------------------------
222
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
223
+ -----------------------------------------------------------------------------
224
+ Processing by ApplicationController#create as HTML
225
+ Completed 200 OK in 1ms
226
+ -----------------------------------------------------------------------------------------------------
227
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
228
+ -----------------------------------------------------------------------------------------------------
229
+ Processing by ApplicationController#create as HTML
230
+ Can't verify CSRF token authenticity.
231
+ Completed 422 Unprocessable Entity in 1ms
232
+ -------------------------------------------------------------------------------------
233
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
234
+ -------------------------------------------------------------------------------------
235
+ Processing by ApplicationController#create as HTML
236
+ Can't verify CSRF token authenticity.
237
+ Completed 422 Unprocessable Entity in 0ms
238
+ --------------------------------------------------------
239
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
240
+ --------------------------------------------------------
241
+ Processing by ApplicationController#index as HTML
242
+ Completed 200 OK in 0ms
243
+ --------------------------------------------------------------------------------------------------------
244
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
245
+ --------------------------------------------------------------------------------------------------------
246
+ Processing by ApplicationController#index as HTML
247
+ Completed 200 OK in 0ms
248
+ ----------------------------------------------------------------------------
249
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
250
+ ----------------------------------------------------------------------------
251
+ Processing by ExclusionsController#index as HTML
252
+ Completed 200 OK in 0ms
253
+ ----------------------------------------------------------------------------
254
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
255
+ ----------------------------------------------------------------------------
256
+ Processing by ExclusionsController#index as HTML
257
+ Completed 200 OK in 0ms
258
+ -----------------------------------------------------------------------------------------------------
259
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
260
+ -----------------------------------------------------------------------------------------------------
261
+ Processing by ApplicationController#create as HTML
262
+ Can't verify CSRF token authenticity.
263
+ Completed 422 Unprocessable Entity in 1ms
264
+ -----------------------------------------------------------------------------
265
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
266
+ -----------------------------------------------------------------------------
267
+ Processing by ApplicationController#create as HTML
268
+ Completed 200 OK in 1ms
269
+ -------------------------------------------------------------------------------------
270
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
271
+ -------------------------------------------------------------------------------------
272
+ Processing by ApplicationController#create as HTML
273
+ Can't verify CSRF token authenticity.
274
+ Completed 422 Unprocessable Entity in 1ms
275
+ --------------------------------------------------------
276
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
277
+ --------------------------------------------------------
278
+ Processing by ApplicationController#index as HTML
279
+ Completed 200 OK in 1ms
280
+ --------------------------------------------------------------------------------------------------------
281
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
282
+ --------------------------------------------------------------------------------------------------------
283
+ Processing by ApplicationController#index as HTML
284
+ Completed 200 OK in 1ms
285
+ ----------------------------------------------------------------------------
286
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
287
+ ----------------------------------------------------------------------------
288
+ Processing by ExclusionsController#index as HTML
289
+ Completed 200 OK in 1ms
290
+ --------------------------------------------------------
291
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
292
+ --------------------------------------------------------
293
+ Processing by ApplicationController#index as HTML
294
+ Completed 200 OK in 0ms
295
+ -------------------------------------------------------------------------------------
296
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
297
+ -------------------------------------------------------------------------------------
298
+ Processing by ApplicationController#create as HTML
299
+ Can't verify CSRF token authenticity.
300
+ Completed 422 Unprocessable Entity in 1ms
301
+ -----------------------------------------------------------------------------
302
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
303
+ -----------------------------------------------------------------------------
304
+ Processing by ApplicationController#create as HTML
305
+ Completed 200 OK in 0ms
306
+ --------------------------------------------------------------------------------------------------------
307
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
308
+ --------------------------------------------------------------------------------------------------------
309
+ Processing by ApplicationController#index as HTML
310
+ Completed 200 OK in 0ms
311
+ -----------------------------------------------------------------------------------------------------
312
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
313
+ -----------------------------------------------------------------------------------------------------
314
+ Processing by ApplicationController#create as HTML
315
+ Can't verify CSRF token authenticity.
316
+ Completed 422 Unprocessable Entity in 0ms
317
+ ----------------------------------------------------------------------------
318
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
319
+ ----------------------------------------------------------------------------
320
+ Processing by ExclusionsController#index as HTML
321
+ Completed 200 OK in 0ms
322
+ -------------------------------------------------------------------------------------
323
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
324
+ -------------------------------------------------------------------------------------
325
+ Processing by ApplicationController#create as HTML
326
+ Can't verify CSRF token authenticity.
327
+ Completed 422 Unprocessable Entity in 1ms
328
+ --------------------------------------------------------------------------------------------------------
329
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
330
+ --------------------------------------------------------------------------------------------------------
331
+ Processing by ApplicationController#index as HTML
332
+ Completed 200 OK in 1ms
333
+ -----------------------------------------------------------------------------------------------------
334
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
335
+ -----------------------------------------------------------------------------------------------------
336
+ Processing by ApplicationController#create as HTML
337
+ Can't verify CSRF token authenticity.
338
+ Completed 422 Unprocessable Entity in 0ms
339
+ --------------------------------------------------------
340
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
341
+ --------------------------------------------------------
342
+ Processing by ApplicationController#index as HTML
343
+ Completed 200 OK in 0ms
344
+ --------------------------------------------------------
345
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
346
+ --------------------------------------------------------
347
+ Processing by ApplicationController#index as HTML
348
+ Completed 200 OK in 1ms
349
+ --------------------------------------------------------------------------------------------------------
350
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
351
+ --------------------------------------------------------------------------------------------------------
352
+ Processing by ApplicationController#index as HTML
353
+ Completed 200 OK in 0ms
354
+ -----------------------------------------------------------------------------
355
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
356
+ -----------------------------------------------------------------------------
357
+ Processing by ApplicationController#create as HTML
358
+ Completed 200 OK in 0ms
359
+ -------------------------------------------------------------------------------------
360
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
361
+ -------------------------------------------------------------------------------------
362
+ Processing by ApplicationController#create as HTML
363
+ Can't verify CSRF token authenticity.
364
+ Completed 422 Unprocessable Entity in 1ms
365
+ -----------------------------------------------------------------------------------------------------
366
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
367
+ -----------------------------------------------------------------------------------------------------
368
+ Processing by ApplicationController#create as HTML
369
+ Can't verify CSRF token authenticity.
370
+ Completed 422 Unprocessable Entity in 0ms
371
+ ----------------------------------------------------------------------------
372
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
373
+ ----------------------------------------------------------------------------
374
+ Processing by ExclusionsController#index as HTML
375
+ Completed 200 OK in 0ms
376
+ ----------------------------------------------------------------------------
377
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
378
+ ----------------------------------------------------------------------------
379
+ Processing by ExclusionsController#index as HTML
380
+ Completed 200 OK in 0ms
381
+ --------------------------------------------------------------------------------------------------------
382
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
383
+ --------------------------------------------------------------------------------------------------------
384
+ Processing by ApplicationController#index as HTML
385
+ Completed 200 OK in 0ms
386
+ -----------------------------------------------------------------------------------------------------
387
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
388
+ -----------------------------------------------------------------------------------------------------
389
+ Processing by ApplicationController#create as HTML
390
+ Can't verify CSRF token authenticity.
391
+ Completed 422 Unprocessable Entity in 0ms
392
+ -------------------------------------------------------------------------------------
393
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
394
+ -------------------------------------------------------------------------------------
395
+ Processing by ApplicationController#create as HTML
396
+ Can't verify CSRF token authenticity.
397
+ Completed 422 Unprocessable Entity in 0ms
398
+ --------------------------------------------------------
399
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
400
+ --------------------------------------------------------
401
+ Processing by ApplicationController#index as HTML
402
+ Completed 200 OK in 0ms
403
+ -----------------------------------------------------------------------------
404
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
405
+ -----------------------------------------------------------------------------
406
+ Processing by ApplicationController#create as HTML
407
+ Completed 200 OK in 0ms
408
+ -------------------------------------------------------------------------------------
409
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
410
+ -------------------------------------------------------------------------------------
411
+ Processing by ApplicationController#create as HTML
412
+ Can't verify CSRF token authenticity.
413
+ Completed 422 Unprocessable Entity in 0ms
414
+ --------------------------------------------------------
415
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
416
+ --------------------------------------------------------
417
+ Processing by ApplicationController#index as HTML
418
+ Completed 200 OK in 0ms
419
+ -----------------------------------------------------------------------------------------------------
420
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
421
+ -----------------------------------------------------------------------------------------------------
422
+ Processing by ApplicationController#create as HTML
423
+ Can't verify CSRF token authenticity.
424
+ Completed 422 Unprocessable Entity in 0ms
425
+ -----------------------------------------------------------
426
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
427
+ -----------------------------------------------------------
428
+ Processing by ApplicationController#index as HTML
429
+ Completed 200 OK in 1ms
430
+ -----------------------------------------------------------------------------
431
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
432
+ -----------------------------------------------------------------------------
433
+ Processing by ApplicationController#create as HTML
434
+ Completed 200 OK in 0ms
435
+ --------------------------------------------------------------------------------------------------------
436
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
437
+ --------------------------------------------------------------------------------------------------------
438
+ Processing by ApplicationController#index as HTML
439
+ Completed 200 OK in 0ms
440
+ ----------------------------------------------------------------------------
441
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
442
+ ----------------------------------------------------------------------------
443
+ Processing by ExclusionsController#index as HTML
444
+ Completed 200 OK in 0ms
445
+ --------------------------------------------------------------------------------------------------------
446
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
447
+ --------------------------------------------------------------------------------------------------------
448
+ Processing by ApplicationController#index as HTML
449
+ Completed 200 OK in 0ms
450
+ -----------------------------------------------------------------------------------------------------
451
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
452
+ -----------------------------------------------------------------------------------------------------
453
+ Processing by ApplicationController#create as HTML
454
+ Can't verify CSRF token authenticity.
455
+ Completed 422 Unprocessable Entity in 0ms
456
+ -----------------------------------------------------------------------------
457
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
458
+ -----------------------------------------------------------------------------
459
+ Processing by ApplicationController#create as HTML
460
+ Completed 200 OK in 0ms
461
+ -----------------------------------------------------------
462
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
463
+ -----------------------------------------------------------
464
+ Processing by ApplicationController#index as HTML
465
+ Completed 200 OK in 0ms
466
+ --------------------------------------------------------
467
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
468
+ --------------------------------------------------------
469
+ Processing by ApplicationController#index as HTML
470
+ Completed 200 OK in 0ms
471
+ -------------------------------------------------------------------------------------
472
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
473
+ -------------------------------------------------------------------------------------
474
+ Processing by ApplicationController#create as HTML
475
+ Can't verify CSRF token authenticity.
476
+ Completed 422 Unprocessable Entity in 0ms
477
+ ----------------------------------------------------------------------------
478
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
479
+ ----------------------------------------------------------------------------
480
+ Processing by ExclusionsController#index as HTML
481
+ Completed 200 OK in 0ms
482
+ --------------------------------------------------------------------------------------------------------
483
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
484
+ --------------------------------------------------------------------------------------------------------
485
+ Processing by ApplicationController#index as HTML
486
+ Completed 200 OK in 0ms
487
+ -----------------------------------------------------------------------------------------------------
488
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
489
+ -----------------------------------------------------------------------------------------------------
490
+ Processing by ApplicationController#create as HTML
491
+ Can't verify CSRF token authenticity.
492
+ Completed 422 Unprocessable Entity in 0ms
493
+ --------------------------------------------------------
494
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
495
+ --------------------------------------------------------
496
+ Processing by ApplicationController#index as HTML
497
+ Completed 200 OK in 0ms
498
+ -------------------------------------------------------------------------------------
499
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
500
+ -------------------------------------------------------------------------------------
501
+ Processing by ApplicationController#create as HTML
502
+ Can't verify CSRF token authenticity.
503
+ Completed 422 Unprocessable Entity in 0ms
504
+ -----------------------------------------------------------------------------
505
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
506
+ -----------------------------------------------------------------------------
507
+ Processing by ApplicationController#create as HTML
508
+ Completed 200 OK in 0ms
509
+ -----------------------------------------------------------
510
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
511
+ -----------------------------------------------------------
512
+ Processing by ApplicationController#index as HTML
513
+ Completed 200 OK in 0ms
514
+ ----------------------------------------------------------------------------
515
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
516
+ ----------------------------------------------------------------------------
517
+ Processing by ExclusionsController#index as HTML
518
+ Completed 200 OK in 0ms
1
519
  ----------------------------------------------------------------------------
2
520
  AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
3
521
  ----------------------------------------------------------------------------
4
522
  Processing by ExclusionsController#index as HTML
5
523
  Completed 200 OK in 0ms (Allocations: 128)
524
+ -------------------------------------------------------------------------------------
525
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
526
+ -------------------------------------------------------------------------------------
527
+ Processing by ApplicationController#create as HTML
528
+ Can't verify CSRF token authenticity.
529
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 118)
6
530
  --------------------------------------------------------
7
531
  AngularRailsCsrfTest: test_the_domain_is_used_if_present
8
532
  --------------------------------------------------------
9
533
  Processing by ApplicationController#index as HTML
10
- Completed 200 OK in 0ms (Allocations: 118)
11
- ---------------------------------------------------------------
12
- AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
13
- ---------------------------------------------------------------
534
+ Completed 200 OK in 0ms (Allocations: 119)
535
+ --------------------------------------------------------------------------------------------------------
536
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
537
+ --------------------------------------------------------------------------------------------------------
14
538
  Processing by ApplicationController#index as HTML
15
- Completed 200 OK in 0ms (Allocations: 106)
539
+ Completed 200 OK in 0ms (Allocations: 116)
540
+ -----------------------------------------------------------------------------------------------------
541
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
542
+ -----------------------------------------------------------------------------------------------------
543
+ Processing by ApplicationController#create as HTML
544
+ Can't verify CSRF token authenticity.
545
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 109)
546
+ -----------------------------------------------------------------------------
547
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
548
+ -----------------------------------------------------------------------------
549
+ Processing by ApplicationController#create as HTML
550
+ Completed 200 OK in 0ms (Allocations: 136)
551
+ -----------------------------------------------------------
552
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
553
+ -----------------------------------------------------------
554
+ Processing by ApplicationController#index as HTML
555
+ Completed 200 OK in 0ms (Allocations: 116)
556
+ ----------------------------------------------------------------------------
557
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
558
+ ----------------------------------------------------------------------------
559
+ Processing by ExclusionsController#index as HTML
560
+ Completed 200 OK in 0ms (Allocations: 128)
561
+ --------------------------------------------------------------------------------------------------------
562
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
563
+ --------------------------------------------------------------------------------------------------------
564
+ Processing by ApplicationController#index as HTML
565
+ Completed 200 OK in 0ms (Allocations: 110)
566
+ -----------------------------------------------------------------------------
567
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
568
+ -----------------------------------------------------------------------------
569
+ Processing by ApplicationController#create as HTML
570
+ Completed 200 OK in 0ms (Allocations: 135)
571
+ --------------------------------------------------------
572
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
573
+ --------------------------------------------------------
574
+ Processing by ApplicationController#index as HTML
575
+ Completed 200 OK in 0ms (Allocations: 120)
16
576
  -------------------------------------------------------------------------------------
17
577
  AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
18
578
  -------------------------------------------------------------------------------------
19
579
  Processing by ApplicationController#create as HTML
20
580
  Can't verify CSRF token authenticity.
21
- Completed 422 Unprocessable Entity in 1ms (Allocations: 111)
581
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 106)
582
+ -----------------------------------------------------------
583
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
584
+ -----------------------------------------------------------
585
+ Processing by ApplicationController#index as HTML
586
+ Completed 200 OK in 0ms (Allocations: 118)
587
+ -----------------------------------------------------------------------------------------------------
588
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
589
+ -----------------------------------------------------------------------------------------------------
590
+ Processing by ApplicationController#create as HTML
591
+ Can't verify CSRF token authenticity.
592
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 104)
22
593
  --------------------------------------------------------------------------------------------------------
23
594
  AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
24
595
  --------------------------------------------------------------------------------------------------------
25
596
  Processing by ApplicationController#index as HTML
26
- Completed 200 OK in 0ms (Allocations: 106)
597
+ Completed 200 OK in 0ms (Allocations: 172)
598
+ --------------------------------------------------------
599
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
600
+ --------------------------------------------------------
601
+ Processing by ApplicationController#index as HTML
602
+ Completed 200 OK in 0ms (Allocations: 119)
27
603
  -----------------------------------------------------------
28
604
  AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
29
605
  -----------------------------------------------------------
30
606
  Processing by ApplicationController#index as HTML
31
- Completed 200 OK in 0ms (Allocations: 106)
607
+ Completed 200 OK in 0ms (Allocations: 117)
32
608
  -----------------------------------------------------------------------------------------------------
33
609
  AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
34
610
  -----------------------------------------------------------------------------------------------------
35
611
  Processing by ApplicationController#create as HTML
36
612
  Can't verify CSRF token authenticity.
37
- Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
613
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 116)
38
614
  -----------------------------------------------------------------------------
39
615
  AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
40
616
  -----------------------------------------------------------------------------
41
617
  Processing by ApplicationController#create as HTML
42
- Completed 200 OK in 0ms (Allocations: 125)
618
+ Completed 200 OK in 0ms (Allocations: 136)
619
+ -------------------------------------------------------------------------------------
620
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
621
+ -------------------------------------------------------------------------------------
622
+ Processing by ApplicationController#create as HTML
623
+ Can't verify CSRF token authenticity.
624
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 98)
625
+ ----------------------------------------------------------------------------
626
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
627
+ ----------------------------------------------------------------------------
628
+ Processing by ExclusionsController#index as HTML
629
+ Completed 200 OK in 0ms (Allocations: 71)
630
+ --------------------------------------------------------
631
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
632
+ --------------------------------------------------------
633
+ Processing by ApplicationController#index as HTML
634
+ Completed 200 OK in 0ms (Allocations: 183)
635
+ -------------------------------------------------------------------------------------
636
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
637
+ -------------------------------------------------------------------------------------
638
+ Processing by ApplicationController#create as HTML
639
+ Can't verify CSRF token authenticity.
640
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 111)
641
+ -----------------------------------------------------------------------------
642
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
643
+ -----------------------------------------------------------------------------
644
+ Processing by ApplicationController#create as HTML
645
+ Completed 200 OK in 0ms (Allocations: 136)
43
646
  -----------------------------------------------------------------------------------------------------
44
647
  AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
45
648
  -----------------------------------------------------------------------------------------------------
46
649
  Processing by ApplicationController#create as HTML
47
650
  Can't verify CSRF token authenticity.
48
- Completed 422 Unprocessable Entity in 0ms (Allocations: 162)
651
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
49
652
  --------------------------------------------------------------------------------------------------------
50
653
  AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
51
654
  --------------------------------------------------------------------------------------------------------
52
655
  Processing by ApplicationController#index as HTML
53
- Completed 200 OK in 0ms (Allocations: 125)
54
- ---------------------------------------------------------------
55
- AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
56
- ---------------------------------------------------------------
656
+ Completed 200 OK in 0ms (Allocations: 117)
657
+ -----------------------------------------------------------
658
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
659
+ -----------------------------------------------------------
57
660
  Processing by ApplicationController#index as HTML
58
- Completed 200 OK in 0ms (Allocations: 106)
661
+ Completed 200 OK in 0ms (Allocations: 117)
662
+ ----------------------------------------------------------------------------
663
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
664
+ ----------------------------------------------------------------------------
665
+ Processing by ExclusionsController#index as HTML
666
+ Completed 200 OK in 0ms (Allocations: 71)
667
+ ----------------------------------------------------------------------------
668
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
669
+ ----------------------------------------------------------------------------
670
+ Processing by ExclusionsController#index as HTML
671
+ Completed 200 OK in 0ms (Allocations: 128)
672
+ -----------------------------------------------------------
673
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
674
+ -----------------------------------------------------------
675
+ Processing by ApplicationController#index as HTML
676
+ Completed 200 OK in 0ms (Allocations: 109)
677
+ --------------------------------------------------------
678
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
679
+ --------------------------------------------------------
680
+ Processing by ApplicationController#index as HTML
681
+ Completed 200 OK in 0ms (Allocations: 119)
682
+ -------------------------------------------------------------------------------------
683
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
684
+ -------------------------------------------------------------------------------------
685
+ Processing by ApplicationController#create as HTML
686
+ Can't verify CSRF token authenticity.
687
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 111)
688
+ --------------------------------------------------------------------------------------------------------
689
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
690
+ --------------------------------------------------------------------------------------------------------
691
+ Processing by ApplicationController#index as HTML
692
+ Completed 200 OK in 0ms (Allocations: 117)
693
+ -----------------------------------------------------------------------------------------------------
694
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
695
+ -----------------------------------------------------------------------------------------------------
696
+ Processing by ApplicationController#create as HTML
697
+ Can't verify CSRF token authenticity.
698
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
59
699
  -----------------------------------------------------------------------------
60
700
  AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
61
701
  -----------------------------------------------------------------------------
62
702
  Processing by ApplicationController#create as HTML
63
- Completed 200 OK in 0ms (Allocations: 125)
703
+ Completed 200 OK in 0ms (Allocations: 136)
704
+ ----------------------------------------------------------------------------
705
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
706
+ ----------------------------------------------------------------------------
707
+ Processing by ExclusionsController#index as HTML
708
+ Completed 200 OK in 0ms (Allocations: 128)
709
+ -----------------------------------------------------------------------------------------------------
710
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
711
+ -----------------------------------------------------------------------------------------------------
712
+ Processing by ApplicationController#create as HTML
713
+ Can't verify CSRF token authenticity.
714
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 117)
715
+ -----------------------------------------------------------------------------
716
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
717
+ -----------------------------------------------------------------------------
718
+ Processing by ApplicationController#create as HTML
719
+ Completed 200 OK in 1ms (Allocations: 128)
720
+ --------------------------------------------------------------------------------------------------------
721
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
722
+ --------------------------------------------------------------------------------------------------------
723
+ Processing by ApplicationController#index as HTML
724
+ Completed 200 OK in 0ms (Allocations: 106)
64
725
  -------------------------------------------------------------------------------------
65
726
  AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
66
727
  -------------------------------------------------------------------------------------
67
728
  Processing by ApplicationController#create as HTML
68
729
  Can't verify CSRF token authenticity.
69
730
  Completed 422 Unprocessable Entity in 0ms (Allocations: 98)
731
+ ---------------------------------------------------------------
732
+ AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
733
+ ---------------------------------------------------------------
734
+ Processing by ApplicationController#index as HTML
735
+ Completed 200 OK in 1ms (Allocations: 106)
736
+ --------------------------------------------------------
737
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
738
+ --------------------------------------------------------
739
+ Processing by ApplicationController#index as HTML
740
+ Completed 200 OK in 1ms (Allocations: 117)
741
+ -----------------------------------------------------------
742
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
743
+ -----------------------------------------------------------
744
+ Processing by ApplicationController#index as HTML
745
+ Completed 200 OK in 0ms (Allocations: 106)
746
+ ----------------------------------------------------------------------------
747
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
748
+ ----------------------------------------------------------------------------
749
+ Processing by ExclusionsController#index as HTML
750
+ Completed 200 OK in 0ms (Allocations: 128)
751
+ ---------------------------------------------------------------
752
+ AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
753
+ ---------------------------------------------------------------
754
+ Processing by ApplicationController#index as HTML
755
+ Completed 200 OK in 0ms (Allocations: 107)
756
+ -----------------------------------------------------------------------------
757
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
758
+ -----------------------------------------------------------------------------
759
+ Processing by ApplicationController#create as HTML
760
+ Completed 200 OK in 0ms (Allocations: 131)
761
+ -------------------------------------------------------------
762
+ AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
763
+ -------------------------------------------------------------
764
+ Processing by ApplicationController#index as HTML
765
+ Completed 200 OK in 0ms (Allocations: 106)
766
+ --------------------------------------------------------------------------------------------------------
767
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
768
+ --------------------------------------------------------------------------------------------------------
769
+ Processing by ApplicationController#index as HTML
770
+ Completed 200 OK in 1ms (Allocations: 106)
70
771
  -----------------------------------------------------------
71
772
  AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
72
773
  -----------------------------------------------------------
73
774
  Processing by ApplicationController#index as HTML
74
775
  Completed 200 OK in 0ms (Allocations: 106)
776
+ -----------------------------------------------------------------------------------------------------
777
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
778
+ -----------------------------------------------------------------------------------------------------
779
+ Processing by ApplicationController#create as HTML
780
+ Can't verify CSRF token authenticity.
781
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 110)
75
782
  --------------------------------------------------------
76
783
  AngularRailsCsrfTest: test_the_domain_is_used_if_present
77
784
  --------------------------------------------------------
78
785
  Processing by ApplicationController#index as HTML
79
786
  Completed 200 OK in 0ms (Allocations: 117)
787
+ ------------------------------------------------------
788
+ AngularRailsCsrfTest: test_same_site_can_be_configured
789
+ ------------------------------------------------------
790
+ Processing by ApplicationController#index as HTML
791
+ Completed 200 OK in 0ms (Allocations: 106)
792
+ ------------------------------------------------------------------------------------
793
+ AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
794
+ ------------------------------------------------------------------------------------
795
+ Processing by ApplicationController#index as HTML
796
+ Completed 200 OK in 0ms (Allocations: 106)
797
+ -------------------------------------------------------------------------------------
798
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
799
+ -------------------------------------------------------------------------------------
800
+ Processing by ApplicationController#create as HTML
801
+ Can't verify CSRF token authenticity.
802
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 98)
80
803
  ----------------------------------------------------------------------------
81
804
  AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
82
805
  ----------------------------------------------------------------------------
83
806
  Processing by ExclusionsController#index as HTML
84
- Completed 200 OK in 0ms (Allocations: 71)
807
+ Completed 200 OK in 0ms (Allocations: 128)
808
+ --------------------------------------------------------
809
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
810
+ --------------------------------------------------------
811
+ Processing by ApplicationController#index as HTML
812
+ Completed 200 OK in 0ms (Allocations: 122)
813
+ -----------------------------------------------------------
814
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
815
+ -----------------------------------------------------------
816
+ Processing by ApplicationController#index as HTML
817
+ Completed 200 OK in 0ms (Allocations: 106)
818
+ ---------------------------------------------------------------
819
+ AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
820
+ ---------------------------------------------------------------
821
+ Processing by ApplicationController#index as HTML
822
+ Completed 200 OK in 0ms (Allocations: 106)
823
+ -------------------------------------------------------------------------------------
824
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
825
+ -------------------------------------------------------------------------------------
826
+ Processing by ApplicationController#create as HTML
827
+ Can't verify CSRF token authenticity.
828
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 111)
829
+ --------------------------------------------------------------------------------------------------------
830
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
831
+ --------------------------------------------------------------------------------------------------------
832
+ Processing by ApplicationController#index as HTML
833
+ Completed 200 OK in 0ms (Allocations: 106)
834
+ ------------------------------------------------------
835
+ AngularRailsCsrfTest: test_same_site_can_be_configured
836
+ ------------------------------------------------------
837
+ Processing by ApplicationController#index as HTML
838
+ Completed 200 OK in 0ms (Allocations: 106)
839
+ -------------------------------------------------------------
840
+ AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
841
+ -------------------------------------------------------------
842
+ Processing by ApplicationController#index as HTML
843
+ Completed 200 OK in 0ms (Allocations: 106)
844
+ -----------------------------------------------------------------------------------------------------
845
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
846
+ -----------------------------------------------------------------------------------------------------
847
+ Processing by ApplicationController#create as HTML
848
+ Can't verify CSRF token authenticity.
849
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
850
+ ------------------------------------------------------------------------------------
851
+ AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
852
+ ------------------------------------------------------------------------------------
853
+ Processing by ApplicationController#index as HTML
854
+ Completed 200 OK in 1ms (Allocations: 106)
855
+ -----------------------------------------------------------------------------
856
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
857
+ -----------------------------------------------------------------------------
858
+ Processing by ApplicationController#create as HTML
859
+ Completed 200 OK in 0ms (Allocations: 125)
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: angular_rails_csrf
3
3
  version: !ruby/object:Gem::Version
4
- version: 4.1.0
4
+ version: 4.2.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - James Sanders
@@ -9,7 +9,7 @@ authors:
9
9
  autorequire:
10
10
  bindir: bin
11
11
  cert_chain: []
12
- date: 2020-02-03 00:00:00.000000000 Z
12
+ date: 2020-03-31 00:00:00.000000000 Z
13
13
  dependencies:
14
14
  - !ruby/object:Gem::Dependency
15
15
  name: rake
@@ -45,14 +45,14 @@ dependencies:
45
45
  requirements:
46
46
  - - '='
47
47
  - !ruby/object:Gem::Version
48
- version: 6.0.2.1
48
+ version: 6.0.2.2
49
49
  type: :development
50
50
  prerelease: false
51
51
  version_requirements: !ruby/object:Gem::Requirement
52
52
  requirements:
53
53
  - - '='
54
54
  - !ruby/object:Gem::Version
55
- version: 6.0.2.1
55
+ version: 6.0.2.2
56
56
  - !ruby/object:Gem::Dependency
57
57
  name: railties
58
58
  requirement: !ruby/object:Gem::Requirement