angular_rails_csrf 4.2.0 → 4.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 4e8a320d5c0af2703ea102297a762789112438a32347be78810f9ed0a38f0944
4
- data.tar.gz: 69b97e7968cc7969768432e5b37a73aae82525dc22aa4736aca1ef008f479568
3
+ metadata.gz: 9e43d5d53174346803640b31332eb2b531bfbcf348551eadbd2d799ab302c89f
4
+ data.tar.gz: 125aedeb7028a2a4052d2fe82430d603b86a344b2fec566eed77d1ed66828370
5
5
  SHA512:
6
- metadata.gz: 064c1ad9b08d278ba698c7e0deebd6a0169aeba2f665c9ada2e67fe08cc704cd7d1d21cb79d31be3bf55d985d951988e87239b67ca03169ea6b6bbaf740423aa
7
- data.tar.gz: 9a6126ddfa20f2d162e569a277f539b5b15bceddc5f75f2321f8d2d5771b6b5de53c54a388397b91e7ee94d4a2bb08d812f01b230078f33d5d46884f7f67952a
6
+ metadata.gz: 91f040a88da0b98f23c1a1d322c2a4d54c9bb4b2446f7305dcb035c25e931d59388489efd70216c5deb26a3e4bdf178c8beead059980b68923ece2f3a7c10907
7
+ data.tar.gz: bb1ebd352de7af530639a662d90714ee96cd0f417edacb722db987db3950719e9e2000fb2d27c44f037d9106502b217cb1dae28b4222becf476bb5546d03bcee
data/README.md CHANGED
@@ -80,6 +80,8 @@ end
80
80
 
81
81
  **NOTE**: When using `config.angular_rails_csrf_same_site = :none`, this gem automatically sets the cookie to `Secure` (`config.angular_rails_csrf_secure = true`) to comply with [the specifications](https://tools.ietf.org/html/draft-west-cookie-incrementalism-00).
82
82
 
83
+ Please note that [Safari is known to have issues](https://bugs.webkit.org/show_bug.cgi?id=198181) with SameSite attribute set to `:none`.
84
+
83
85
  ### Exclusions
84
86
 
85
87
  Sometimes you will want to skip setting the XSRF token for certain controllers (for example, when using SSE or ActionCable, as discussed [here](https://github.com/jsanders/angular_rails_csrf/issues/7)):
data/Rakefile CHANGED
@@ -21,8 +21,7 @@ Bundler::GemHelper.install_tasks
21
21
  require 'rake/testtask'
22
22
 
23
23
  Rake::TestTask.new(:test) do |t|
24
- t.libs << 'lib'
25
- t.libs << 'test'
24
+ t.libs = %w[lib test]
26
25
  t.pattern = 'test/**/*_test.rb'
27
26
  t.verbose = false
28
27
  end
@@ -28,11 +28,7 @@ module AngularRailsCsrf
28
28
  end
29
29
 
30
30
  def verified_request?
31
- if respond_to?(:valid_authenticity_token?, true)
32
- super || valid_authenticity_token?(session, request.headers['X-XSRF-TOKEN'])
33
- else
34
- super || form_authenticity_token == request.headers['X-XSRF-TOKEN']
35
- end
31
+ super || valid_authenticity_token?(session, request.headers['X-XSRF-TOKEN'])
36
32
  end
37
33
 
38
34
  private
@@ -1,5 +1,5 @@
1
1
  # frozen_string_literal: true
2
2
 
3
3
  module AngularRailsCsrf
4
- VERSION = '4.2.0'
4
+ VERSION = '4.3.0'
5
5
  end
@@ -31,44 +31,49 @@ class AngularRailsCsrfTest < ActionController::TestCase
31
31
  assert_response :success
32
32
  end
33
33
 
34
- test 'the domain is used if present' do
35
- begin
36
- config = Rails.application.config
37
- def config.angular_rails_csrf_domain
38
- :all
39
- end
34
+ test 'csrf-cookie is not set if exclusion is enabled' do
35
+ refute @controller.respond_to?(:__exclude_xsrf_token_cookie?)
36
+ @controller.class_eval { exclude_xsrf_token_cookie }
37
+ get :index
38
+ assert_valid_cookie present: false
39
+ assert @controller.__exclude_xsrf_token_cookie?
40
+ assert_response :success
41
+ end
40
42
 
41
- get :index
42
- assert @response.headers['Set-Cookie'].include?('.test.host')
43
- assert_valid_cookie
44
- assert_response :success
45
- ensure
46
- config.instance_eval('undef :angular_rails_csrf_domain', __FILE__, __LINE__)
43
+ test 'the domain is used if present' do
44
+ config = Rails.application.config
45
+ def config.angular_rails_csrf_domain
46
+ :all
47
47
  end
48
+
49
+ get :index
50
+ assert @response.headers['Set-Cookie'].include?('.test.host')
51
+ assert_valid_cookie
52
+ assert_response :success
53
+ ensure
54
+ config.instance_eval('undef :angular_rails_csrf_domain', __FILE__, __LINE__)
48
55
  end
49
56
 
50
57
  test 'the secure flag is set if configured' do
51
- begin
52
- @request.headers['HTTPS'] = 'on'
58
+ @request.headers['HTTPS'] = 'on'
53
59
 
54
- config = Rails.application.config
55
- config.define_singleton_method(:angular_rails_csrf_secure) { true }
60
+ config = Rails.application.config
61
+ config.define_singleton_method(:angular_rails_csrf_secure) { true }
56
62
 
57
- get :index
58
- assert @response.headers['Set-Cookie'].include?('secure')
59
- assert_valid_cookie
60
- assert_response :success
61
- ensure
62
- @request.headers['HTTPS'] = nil
63
- config.instance_eval('undef :angular_rails_csrf_secure', __FILE__, __LINE__)
64
- end
63
+ get :index
64
+ assert @response.headers['Set-Cookie'].include?('secure')
65
+ assert_valid_cookie
66
+ assert_response :success
67
+ ensure
68
+ @request.headers['HTTPS'] = nil
69
+ config.instance_eval('undef :angular_rails_csrf_secure', __FILE__, __LINE__)
65
70
  end
66
71
 
67
72
  test 'a custom name is used if present' do
68
73
  use_custom_cookie_name do
69
74
  get :index
70
75
  assert @response.headers['Set-Cookie'].include?('CUSTOM-COOKIE-NAME')
71
- assert_valid_cookie('CUSTOM-COOKIE-NAME')
76
+ assert_valid_cookie name: 'CUSTOM-COOKIE-NAME'
72
77
  assert_response :success
73
78
  end
74
79
  end
@@ -81,34 +86,30 @@ class AngularRailsCsrfTest < ActionController::TestCase
81
86
  end
82
87
 
83
88
  test 'same_site can be configured' do
84
- begin
85
- config = Rails.application.config
86
- config.define_singleton_method(:angular_rails_csrf_same_site) { :strict }
89
+ config = Rails.application.config
90
+ config.define_singleton_method(:angular_rails_csrf_same_site) { :strict }
87
91
 
88
- get :index
89
- assert @response.headers['Set-Cookie'].include?('SameSite=Strict')
90
- assert_valid_cookie
91
- assert_response :success
92
- ensure
93
- config.instance_eval('undef :angular_rails_csrf_same_site', __FILE__, __LINE__)
94
- end
92
+ get :index
93
+ assert @response.headers['Set-Cookie'].include?('SameSite=Strict')
94
+ assert_valid_cookie
95
+ assert_response :success
96
+ ensure
97
+ config.instance_eval('undef :angular_rails_csrf_same_site', __FILE__, __LINE__)
95
98
  end
96
99
 
97
100
  test 'secure is set automatically when same_site is set to none' do
98
- begin
99
- @request.headers['HTTPS'] = 'on'
101
+ @request.headers['HTTPS'] = 'on'
100
102
 
101
- config = Rails.application.config
102
- config.define_singleton_method(:angular_rails_csrf_same_site) { :none }
103
+ config = Rails.application.config
104
+ config.define_singleton_method(:angular_rails_csrf_same_site) { :none }
103
105
 
104
- get :index
105
- assert @response.headers['Set-Cookie'].include?('SameSite=None')
106
- assert @response.headers['Set-Cookie'].include?('secure')
107
- assert_valid_cookie
108
- assert_response :success
109
- ensure
110
- config.instance_eval('undef :angular_rails_csrf_same_site', __FILE__, __LINE__)
111
- end
106
+ get :index
107
+ assert @response.headers['Set-Cookie'].include?('SameSite=None')
108
+ assert @response.headers['Set-Cookie'].include?('secure')
109
+ assert_valid_cookie
110
+ assert_response :success
111
+ ensure
112
+ config.instance_eval('undef :angular_rails_csrf_same_site', __FILE__, __LINE__)
112
113
  end
113
114
 
114
115
  private
@@ -119,12 +120,10 @@ class AngularRailsCsrfTest < ActionController::TestCase
119
120
  @request.headers['X-XSRF-TOKEN'] = value
120
121
  end
121
122
 
122
- def assert_valid_cookie(name = 'XSRF-TOKEN')
123
- if @controller.respond_to?(:valid_authenticity_token?, true)
124
- assert @controller.send(:valid_authenticity_token?, session, cookies[name])
125
- else
126
- assert_equal @controller.send(:form_authenticity_token), cookies['XSRF-TOKEN']
127
- end
123
+ def assert_valid_cookie(name: 'XSRF-TOKEN', present: true)
124
+ cookie_valid = @controller.send(:valid_authenticity_token?, session, cookies[name])
125
+ cookie_valid = !cookie_valid unless present
126
+ assert cookie_valid
128
127
  end
129
128
 
130
129
  def use_custom_cookie_name
@@ -857,3 +857,765 @@ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
857
857
  -----------------------------------------------------------------------------
858
858
  Processing by ApplicationController#create as HTML
859
859
  Completed 200 OK in 0ms (Allocations: 125)
860
+ ----------------------------------------------------------------------------
861
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
862
+ ----------------------------------------------------------------------------
863
+ Processing by ExclusionsController#index as HTML
864
+ Completed 200 OK in 0ms (Allocations: 128)
865
+ ----------------------------------
866
+ AngularRailsCsrfTest: test_exclude
867
+ ----------------------------------
868
+ Processing by ApplicationController#index as HTML
869
+ Completed 200 OK in 0ms (Allocations: 74)
870
+ -------------------------------------------------------------------------------------
871
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
872
+ -------------------------------------------------------------------------------------
873
+ Processing by ApplicationController#create as HTML
874
+ Can't verify CSRF token authenticity.
875
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 157)
876
+ -----------------------------------------------------------
877
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
878
+ -----------------------------------------------------------
879
+ Processing by ApplicationController#index as HTML
880
+ Completed 200 OK in 0ms (Allocations: 129)
881
+ ---------------------------------------------------------------
882
+ AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
883
+ ---------------------------------------------------------------
884
+ Processing by ApplicationController#index as HTML
885
+ Completed 200 OK in 0ms (Allocations: 106)
886
+ ----------------------------------
887
+ AngularRailsCsrfTest: test_exclude
888
+ ----------------------------------
889
+ Processing by ApplicationController#index as HTML
890
+ Completed 200 OK in 0ms (Allocations: 74)
891
+ --------------------------------------------------------
892
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
893
+ --------------------------------------------------------
894
+ Processing by ApplicationController#index as HTML
895
+ Completed 200 OK in 0ms (Allocations: 117)
896
+ ------------------------------------------------------
897
+ AngularRailsCsrfTest: test_same_site_can_be_configured
898
+ ------------------------------------------------------
899
+ Processing by ApplicationController#index as HTML
900
+ Completed 200 OK in 0ms (Allocations: 106)
901
+ --------------------------------------------------------------------------------------------------------
902
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
903
+ --------------------------------------------------------------------------------------------------------
904
+ Processing by ApplicationController#index as HTML
905
+ Completed 200 OK in 0ms (Allocations: 106)
906
+ -----------------------------------------------------------------------------------------------------
907
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
908
+ -----------------------------------------------------------------------------------------------------
909
+ Processing by ApplicationController#create as HTML
910
+ Can't verify CSRF token authenticity.
911
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
912
+ -------------------------------------------------------------
913
+ AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
914
+ -------------------------------------------------------------
915
+ Processing by ApplicationController#index as HTML
916
+ Completed 200 OK in 0ms (Allocations: 106)
917
+ ------------------------------------------------------------------------------------
918
+ AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
919
+ ------------------------------------------------------------------------------------
920
+ Processing by ApplicationController#index as HTML
921
+ Completed 200 OK in 0ms (Allocations: 106)
922
+ -----------------------------------------------------------------------------
923
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
924
+ -----------------------------------------------------------------------------
925
+ Processing by ApplicationController#create as HTML
926
+ Completed 200 OK in 0ms (Allocations: 125)
927
+ ----------------------------------------------------------------------------
928
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
929
+ ----------------------------------------------------------------------------
930
+ Processing by ExclusionsController#index as HTML
931
+ Completed 200 OK in 0ms (Allocations: 71)
932
+ ----------------------------------------------------------------------------
933
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
934
+ ----------------------------------------------------------------------------
935
+ Processing by ExclusionsController#index as HTML
936
+ Completed 200 OK in 0ms (Allocations: 128)
937
+ ---------------------------------------------------------------
938
+ AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
939
+ ---------------------------------------------------------------
940
+ Processing by ApplicationController#index as HTML
941
+ Completed 200 OK in 0ms (Allocations: 111)
942
+ -------------------------------------------------------------------------------------
943
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
944
+ -------------------------------------------------------------------------------------
945
+ Processing by ApplicationController#create as HTML
946
+ Can't verify CSRF token authenticity.
947
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 111)
948
+ ------------------------------------------------------------------------------------
949
+ AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
950
+ ------------------------------------------------------------------------------------
951
+ Processing by ApplicationController#index as HTML
952
+ Completed 200 OK in 0ms (Allocations: 106)
953
+ -----------------------------------------------------------------------------------------------------
954
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
955
+ -----------------------------------------------------------------------------------------------------
956
+ Processing by ApplicationController#create as HTML
957
+ Can't verify CSRF token authenticity.
958
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
959
+ -----------------------------------------------------------------------------
960
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
961
+ -----------------------------------------------------------------------------
962
+ Processing by ApplicationController#create as HTML
963
+ Completed 200 OK in 0ms (Allocations: 125)
964
+ -----------------------------------------------------------
965
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
966
+ -----------------------------------------------------------
967
+ Processing by ApplicationController#index as HTML
968
+ Completed 200 OK in 0ms (Allocations: 106)
969
+ --------------------------------------------------------
970
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
971
+ --------------------------------------------------------
972
+ Processing by ApplicationController#index as HTML
973
+ Completed 200 OK in 0ms (Allocations: 117)
974
+ ----------------------------------
975
+ AngularRailsCsrfTest: test_exclude
976
+ ----------------------------------
977
+ Processing by ApplicationController#index as HTML
978
+ Completed 200 OK in 0ms (Allocations: 74)
979
+ -------------------------------------------------------------
980
+ AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
981
+ -------------------------------------------------------------
982
+ Processing by ApplicationController#index as HTML
983
+ Completed 200 OK in 0ms (Allocations: 106)
984
+ --------------------------------------------------------------------------------------------------------
985
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
986
+ --------------------------------------------------------------------------------------------------------
987
+ Processing by ApplicationController#index as HTML
988
+ Completed 200 OK in 0ms (Allocations: 106)
989
+ ------------------------------------------------------
990
+ AngularRailsCsrfTest: test_same_site_can_be_configured
991
+ ------------------------------------------------------
992
+ Processing by ApplicationController#index as HTML
993
+ Completed 200 OK in 0ms (Allocations: 106)
994
+ -----------------------------------------------------------------------------------------------------
995
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
996
+ -----------------------------------------------------------------------------------------------------
997
+ Processing by ApplicationController#create as HTML
998
+ Can't verify CSRF token authenticity.
999
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 162)
1000
+ -----------------------------------------------------------
1001
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
1002
+ -----------------------------------------------------------
1003
+ Processing by ApplicationController#index as HTML
1004
+ Completed 200 OK in 0ms (Allocations: 129)
1005
+ -----------------------------------------------------------------------------
1006
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
1007
+ -----------------------------------------------------------------------------
1008
+ Processing by ApplicationController#create as HTML
1009
+ Completed 200 OK in 0ms (Allocations: 125)
1010
+ -------------------------------------------------------------
1011
+ AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
1012
+ -------------------------------------------------------------
1013
+ Processing by ApplicationController#index as HTML
1014
+ Completed 200 OK in 0ms (Allocations: 106)
1015
+ ------------------------------------------------------------------------------------
1016
+ AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
1017
+ ------------------------------------------------------------------------------------
1018
+ Processing by ApplicationController#index as HTML
1019
+ Completed 200 OK in 0ms (Allocations: 106)
1020
+ ---------------------------------------------------------------
1021
+ AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
1022
+ ---------------------------------------------------------------
1023
+ Processing by ApplicationController#index as HTML
1024
+ Completed 200 OK in 0ms (Allocations: 106)
1025
+ ------------------------------------------------------
1026
+ AngularRailsCsrfTest: test_same_site_can_be_configured
1027
+ ------------------------------------------------------
1028
+ Processing by ApplicationController#index as HTML
1029
+ Completed 200 OK in 0ms (Allocations: 106)
1030
+ --------------------------------------------------------------------------------------------------------
1031
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
1032
+ --------------------------------------------------------------------------------------------------------
1033
+ Processing by ApplicationController#index as HTML
1034
+ Completed 200 OK in 0ms (Allocations: 106)
1035
+ ----------------------------------
1036
+ AngularRailsCsrfTest: test_exclude
1037
+ ----------------------------------
1038
+ Processing by ApplicationController#index as HTML
1039
+ Completed 200 OK in 0ms (Allocations: 74)
1040
+ -------------------------------------------------------------------------------------
1041
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
1042
+ -------------------------------------------------------------------------------------
1043
+ Processing by ApplicationController#create as HTML
1044
+ Can't verify CSRF token authenticity.
1045
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 98)
1046
+ --------------------------------------------------------
1047
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
1048
+ --------------------------------------------------------
1049
+ Processing by ApplicationController#index as HTML
1050
+ Completed 200 OK in 0ms (Allocations: 117)
1051
+ ----------------------------------------------------------------------------
1052
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
1053
+ ----------------------------------------------------------------------------
1054
+ Processing by ExclusionsController#index as HTML
1055
+ Completed 200 OK in 0ms (Allocations: 71)
1056
+ ----------------------------------------------------------------------------
1057
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
1058
+ ----------------------------------------------------------------------------
1059
+ Processing by ExclusionsController#index as HTML
1060
+ Completed 200 OK in 0ms (Allocations: 128)
1061
+ -----------------------------------------------------------------------------------------------------
1062
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
1063
+ -----------------------------------------------------------------------------------------------------
1064
+ Processing by ApplicationController#create as HTML
1065
+ Can't verify CSRF token authenticity.
1066
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 117)
1067
+ -------------------------------------------------------------------------
1068
+ AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
1069
+ -------------------------------------------------------------------------
1070
+ Processing by ApplicationController#index as HTML
1071
+ Completed 200 OK in 0ms (Allocations: 74)
1072
+ --------------------------------------------------------
1073
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
1074
+ --------------------------------------------------------
1075
+ Processing by ApplicationController#index as HTML
1076
+ Completed 200 OK in 0ms (Allocations: 122)
1077
+ ------------------------------------------------------------------------------------
1078
+ AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
1079
+ ------------------------------------------------------------------------------------
1080
+ Processing by ApplicationController#index as HTML
1081
+ Completed 200 OK in 0ms (Allocations: 106)
1082
+ ------------------------------------------------------
1083
+ AngularRailsCsrfTest: test_same_site_can_be_configured
1084
+ ------------------------------------------------------
1085
+ Processing by ApplicationController#index as HTML
1086
+ Completed 200 OK in 0ms (Allocations: 106)
1087
+ --------------------------------------------------------------------------------------------------------
1088
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
1089
+ --------------------------------------------------------------------------------------------------------
1090
+ Processing by ApplicationController#index as HTML
1091
+ Completed 200 OK in 0ms (Allocations: 106)
1092
+ -----------------------------------------------------------
1093
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
1094
+ -----------------------------------------------------------
1095
+ Processing by ApplicationController#index as HTML
1096
+ Completed 200 OK in 0ms (Allocations: 106)
1097
+ ---------------------------------------------------------------
1098
+ AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
1099
+ ---------------------------------------------------------------
1100
+ Processing by ApplicationController#index as HTML
1101
+ Completed 200 OK in 0ms (Allocations: 106)
1102
+ -----------------------------------------------------------------------------
1103
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
1104
+ -----------------------------------------------------------------------------
1105
+ Processing by ApplicationController#create as HTML
1106
+ Completed 200 OK in 0ms (Allocations: 125)
1107
+ -------------------------------------------------------------------------------------
1108
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
1109
+ -------------------------------------------------------------------------------------
1110
+ Processing by ApplicationController#create as HTML
1111
+ Can't verify CSRF token authenticity.
1112
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 98)
1113
+ -------------------------------------------------------------
1114
+ AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
1115
+ -------------------------------------------------------------
1116
+ Processing by ApplicationController#index as HTML
1117
+ Completed 200 OK in 0ms (Allocations: 106)
1118
+ ------------------------------------------------------
1119
+ AngularRailsCsrfTest: test_same_site_can_be_configured
1120
+ ------------------------------------------------------
1121
+ Processing by ApplicationController#index as HTML
1122
+ Completed 200 OK in 0ms (Allocations: 174)
1123
+ -------------------------------------------------------------------------
1124
+ AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
1125
+ -------------------------------------------------------------------------
1126
+ Processing by ApplicationController#index as HTML
1127
+ Completed 200 OK in 0ms (Allocations: 74)
1128
+ -----------------------------------------------------------
1129
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
1130
+ -----------------------------------------------------------
1131
+ Processing by ApplicationController#index as HTML
1132
+ Completed 200 OK in 0ms (Allocations: 106)
1133
+ --------------------------------------------------------------------------------------------------------
1134
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
1135
+ --------------------------------------------------------------------------------------------------------
1136
+ Processing by ApplicationController#index as HTML
1137
+ Completed 200 OK in 0ms (Allocations: 106)
1138
+ -------------------------------------------------------------
1139
+ AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
1140
+ -------------------------------------------------------------
1141
+ Processing by ApplicationController#index as HTML
1142
+ Completed 200 OK in 0ms (Allocations: 106)
1143
+ ------------------------------------------------------------------------------------
1144
+ AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
1145
+ ------------------------------------------------------------------------------------
1146
+ Processing by ApplicationController#index as HTML
1147
+ Completed 200 OK in 0ms (Allocations: 106)
1148
+ -----------------------------------------------------------------------------
1149
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
1150
+ -----------------------------------------------------------------------------
1151
+ Processing by ApplicationController#create as HTML
1152
+ Completed 200 OK in 0ms (Allocations: 131)
1153
+ -----------------------------------------------------------------------------------------------------
1154
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
1155
+ -----------------------------------------------------------------------------------------------------
1156
+ Processing by ApplicationController#create as HTML
1157
+ Can't verify CSRF token authenticity.
1158
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 110)
1159
+ -------------------------------------------------------------------------------------
1160
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
1161
+ -------------------------------------------------------------------------------------
1162
+ Processing by ApplicationController#create as HTML
1163
+ Can't verify CSRF token authenticity.
1164
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 98)
1165
+ ---------------------------------------------------------------
1166
+ AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
1167
+ ---------------------------------------------------------------
1168
+ Processing by ApplicationController#index as HTML
1169
+ Completed 200 OK in 0ms (Allocations: 106)
1170
+ --------------------------------------------------------
1171
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
1172
+ --------------------------------------------------------
1173
+ Processing by ApplicationController#index as HTML
1174
+ Completed 200 OK in 0ms (Allocations: 117)
1175
+ ----------------------------------------------------------------------------
1176
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
1177
+ ----------------------------------------------------------------------------
1178
+ Processing by ExclusionsController#index as HTML
1179
+ Completed 200 OK in 0ms (Allocations: 71)
1180
+ --------------------------------------------------------------------------------------------------------
1181
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
1182
+ --------------------------------------------------------------------------------------------------------
1183
+ Processing by ApplicationController#index as HTML
1184
+ Completed 200 OK in 0ms (Allocations: 174)
1185
+ ------------------------------------------------------
1186
+ AngularRailsCsrfTest: test_same_site_can_be_configured
1187
+ ------------------------------------------------------
1188
+ Processing by ApplicationController#index as HTML
1189
+ Completed 200 OK in 0ms (Allocations: 106)
1190
+ --------------------------------------------------------
1191
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
1192
+ --------------------------------------------------------
1193
+ Processing by ApplicationController#index as HTML
1194
+ Completed 200 OK in 0ms (Allocations: 117)
1195
+ -------------------------------------------------------------------------------------
1196
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
1197
+ -------------------------------------------------------------------------------------
1198
+ Processing by ApplicationController#create as HTML
1199
+ Can't verify CSRF token authenticity.
1200
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 111)
1201
+ -----------------------------------------------------------
1202
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
1203
+ -----------------------------------------------------------
1204
+ Processing by ApplicationController#index as HTML
1205
+ Completed 200 OK in 0ms (Allocations: 106)
1206
+ ---------------------------------------------------------------
1207
+ AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
1208
+ ---------------------------------------------------------------
1209
+ Processing by ApplicationController#index as HTML
1210
+ Completed 200 OK in 0ms (Allocations: 106)
1211
+ -----------------------------------------------------------------------------------------------------
1212
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
1213
+ -----------------------------------------------------------------------------------------------------
1214
+ Processing by ApplicationController#create as HTML
1215
+ Can't verify CSRF token authenticity.
1216
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
1217
+ -------------------------------------------------------------
1218
+ AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
1219
+ -------------------------------------------------------------
1220
+ Processing by ApplicationController#index as HTML
1221
+ Completed 200 OK in 0ms (Allocations: 106)
1222
+ -------------------------------------------------------------------------
1223
+ AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
1224
+ -------------------------------------------------------------------------
1225
+ Processing by ApplicationController#index as HTML
1226
+ Completed 200 OK in 0ms (Allocations: 74)
1227
+ -----------------------------------------------------------------------------
1228
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
1229
+ -----------------------------------------------------------------------------
1230
+ Processing by ApplicationController#create as HTML
1231
+ Completed 200 OK in 0ms (Allocations: 125)
1232
+ ------------------------------------------------------------------------------------
1233
+ AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
1234
+ ------------------------------------------------------------------------------------
1235
+ Processing by ApplicationController#index as HTML
1236
+ Completed 200 OK in 0ms (Allocations: 106)
1237
+ ----------------------------------------------------------------------------
1238
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
1239
+ ----------------------------------------------------------------------------
1240
+ Processing by ExclusionsController#index as HTML
1241
+ Completed 200 OK in 0ms (Allocations: 71)
1242
+ --------------------------------------------------------------------------------------------------------
1243
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
1244
+ --------------------------------------------------------------------------------------------------------
1245
+ Processing by ApplicationController#index as HTML
1246
+ Completed 200 OK in 0ms (Allocations: 174)
1247
+ -------------------------------------------------------------------------
1248
+ AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
1249
+ -------------------------------------------------------------------------
1250
+ Processing by ApplicationController#index as HTML
1251
+ Completed 200 OK in 0ms (Allocations: 74)
1252
+ -------------------------------------------------------------
1253
+ AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
1254
+ -------------------------------------------------------------
1255
+ Processing by ApplicationController#index as HTML
1256
+ Completed 200 OK in 0ms (Allocations: 174)
1257
+ ---------------------------------------------------------------
1258
+ AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
1259
+ ---------------------------------------------------------------
1260
+ Processing by ApplicationController#index as HTML
1261
+ Completed 200 OK in 0ms (Allocations: 106)
1262
+ -------------------------------------------------------------------------
1263
+ AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
1264
+ -------------------------------------------------------------------------
1265
+ --------------------------------------------------------
1266
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
1267
+ --------------------------------------------------------
1268
+ Processing by ApplicationController#index as HTML
1269
+ Completed 200 OK in 0ms (Allocations: 117)
1270
+ -----------------------------------------------------------------------------
1271
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
1272
+ -----------------------------------------------------------------------------
1273
+ Processing by ApplicationController#create as HTML
1274
+ Completed 200 OK in 0ms (Allocations: 131)
1275
+ -----------------------------------------------------------------------------------------------------
1276
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
1277
+ -----------------------------------------------------------------------------------------------------
1278
+ Processing by ApplicationController#create as HTML
1279
+ Can't verify CSRF token authenticity.
1280
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 110)
1281
+ --------------------------------------------------------------------------------------------------------
1282
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
1283
+ --------------------------------------------------------------------------------------------------------
1284
+ Processing by ApplicationController#index as HTML
1285
+ Completed 200 OK in 0ms (Allocations: 106)
1286
+ -----------------------------------------------------------
1287
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
1288
+ -----------------------------------------------------------
1289
+ Processing by ApplicationController#index as HTML
1290
+ Completed 200 OK in 0ms (Allocations: 106)
1291
+ -------------------------------------------------------------------------------------
1292
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
1293
+ -------------------------------------------------------------------------------------
1294
+ Processing by ApplicationController#create as HTML
1295
+ Can't verify CSRF token authenticity.
1296
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 98)
1297
+ ------------------------------------------------------
1298
+ AngularRailsCsrfTest: test_same_site_can_be_configured
1299
+ ------------------------------------------------------
1300
+ Processing by ApplicationController#index as HTML
1301
+ Completed 200 OK in 0ms (Allocations: 106)
1302
+ ------------------------------------------------------------------------------------
1303
+ AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
1304
+ ------------------------------------------------------------------------------------
1305
+ Processing by ApplicationController#index as HTML
1306
+ Completed 200 OK in 0ms (Allocations: 106)
1307
+ ----------------------------------------------------------------------------
1308
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
1309
+ ----------------------------------------------------------------------------
1310
+ Processing by ExclusionsController#index as HTML
1311
+ Completed 200 OK in 0ms (Allocations: 71)
1312
+ ----------------------------------------------------------------------------
1313
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
1314
+ ----------------------------------------------------------------------------
1315
+ Processing by ExclusionsController#index as HTML
1316
+ Completed 200 OK in 0ms (Allocations: 128)
1317
+ --------------------------------------------------------
1318
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
1319
+ --------------------------------------------------------
1320
+ Processing by ApplicationController#index as HTML
1321
+ Completed 200 OK in 0ms (Allocations: 122)
1322
+ -----------------------------------------------------------
1323
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
1324
+ -----------------------------------------------------------
1325
+ Processing by ApplicationController#index as HTML
1326
+ Completed 200 OK in 0ms (Allocations: 106)
1327
+ ------------------------------------------------------
1328
+ AngularRailsCsrfTest: test_same_site_can_be_configured
1329
+ ------------------------------------------------------
1330
+ Processing by ApplicationController#index as HTML
1331
+ Completed 200 OK in 0ms (Allocations: 106)
1332
+ -------------------------------------------------------------------------------------
1333
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
1334
+ -------------------------------------------------------------------------------------
1335
+ Processing by ApplicationController#create as HTML
1336
+ Can't verify CSRF token authenticity.
1337
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 111)
1338
+ -------------------------------------------------------------
1339
+ AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
1340
+ -------------------------------------------------------------
1341
+ Processing by ApplicationController#index as HTML
1342
+ Completed 200 OK in 0ms (Allocations: 106)
1343
+ -----------------------------------------------------------------------------
1344
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
1345
+ -----------------------------------------------------------------------------
1346
+ Processing by ApplicationController#create as HTML
1347
+ Completed 200 OK in 0ms (Allocations: 125)
1348
+ ------------------------------------------------------------------------------------
1349
+ AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
1350
+ ------------------------------------------------------------------------------------
1351
+ Processing by ApplicationController#index as HTML
1352
+ Completed 200 OK in 0ms (Allocations: 106)
1353
+ ---------------------------------------------------------------
1354
+ AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
1355
+ ---------------------------------------------------------------
1356
+ Processing by ApplicationController#index as HTML
1357
+ Completed 200 OK in 0ms (Allocations: 106)
1358
+ -------------------------------------------------------------------------
1359
+ AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
1360
+ -------------------------------------------------------------------------
1361
+ Processing by ApplicationController#index as HTML
1362
+ Completed 200 OK in 0ms (Allocations: 74)
1363
+ --------------------------------------------------------------------------------------------------------
1364
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
1365
+ --------------------------------------------------------------------------------------------------------
1366
+ Processing by ApplicationController#index as HTML
1367
+ Completed 200 OK in 0ms (Allocations: 106)
1368
+ -----------------------------------------------------------------------------------------------------
1369
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
1370
+ -----------------------------------------------------------------------------------------------------
1371
+ Processing by ApplicationController#create as HTML
1372
+ Can't verify CSRF token authenticity.
1373
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
1374
+ ----------------------------------------------------------------------------
1375
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
1376
+ ----------------------------------------------------------------------------
1377
+ Processing by ExclusionsController#index as HTML
1378
+ Completed 200 OK in 0ms (Allocations: 128)
1379
+ -------------------------------------------------------------------------------------
1380
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
1381
+ -------------------------------------------------------------------------------------
1382
+ Processing by ApplicationController#create as HTML
1383
+ Can't verify CSRF token authenticity.
1384
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 112)
1385
+ -----------------------------------------------------------------------------
1386
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
1387
+ -----------------------------------------------------------------------------
1388
+ Processing by ApplicationController#create as HTML
1389
+ Completed 200 OK in 0ms (Allocations: 132)
1390
+ ------------------------------------------------------------------------------------
1391
+ AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
1392
+ ------------------------------------------------------------------------------------
1393
+ Processing by ApplicationController#index as HTML
1394
+ Completed 200 OK in 0ms (Allocations: 106)
1395
+ --------------------------------------------------------------------------------------------------------
1396
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
1397
+ --------------------------------------------------------------------------------------------------------
1398
+ Processing by ApplicationController#index as HTML
1399
+ Completed 200 OK in 0ms (Allocations: 106)
1400
+ -----------------------------------------------------------
1401
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
1402
+ -----------------------------------------------------------
1403
+ Processing by ApplicationController#index as HTML
1404
+ Completed 200 OK in 0ms (Allocations: 106)
1405
+ --------------------------------------------------------
1406
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
1407
+ --------------------------------------------------------
1408
+ Processing by ApplicationController#index as HTML
1409
+ Completed 200 OK in 0ms (Allocations: 117)
1410
+ -------------------------------------------------------------
1411
+ AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
1412
+ -------------------------------------------------------------
1413
+ Processing by ApplicationController#index as HTML
1414
+ Completed 200 OK in 0ms (Allocations: 106)
1415
+ -----------------------------------------------------------------------------------------------------
1416
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
1417
+ -----------------------------------------------------------------------------------------------------
1418
+ Processing by ApplicationController#create as HTML
1419
+ Can't verify CSRF token authenticity.
1420
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
1421
+ -------------------------------------------------------------------------
1422
+ AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
1423
+ -------------------------------------------------------------------------
1424
+ Processing by ApplicationController#index as HTML
1425
+ Completed 200 OK in 0ms (Allocations: 74)
1426
+ ------------------------------------------------------
1427
+ AngularRailsCsrfTest: test_same_site_can_be_configured
1428
+ ------------------------------------------------------
1429
+ Processing by ApplicationController#index as HTML
1430
+ Completed 200 OK in 0ms (Allocations: 106)
1431
+ ---------------------------------------------------------------
1432
+ AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
1433
+ ---------------------------------------------------------------
1434
+ Processing by ApplicationController#index as HTML
1435
+ Completed 200 OK in 0ms (Allocations: 106)
1436
+ ----------------------------------------------------------------------------
1437
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
1438
+ ----------------------------------------------------------------------------
1439
+ Processing by ExclusionsController#index as HTML
1440
+ Completed 200 OK in 0ms (Allocations: 128)
1441
+ ------------------------------------------------------
1442
+ AngularRailsCsrfTest: test_same_site_can_be_configured
1443
+ ------------------------------------------------------
1444
+ Processing by ApplicationController#index as HTML
1445
+ Completed 200 OK in 0ms (Allocations: 111)
1446
+ --------------------------------------------------------
1447
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
1448
+ --------------------------------------------------------
1449
+ Processing by ApplicationController#index as HTML
1450
+ Completed 200 OK in 0ms (Allocations: 117)
1451
+ -------------------------------------------------------------------------------------
1452
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
1453
+ -------------------------------------------------------------------------------------
1454
+ Processing by ApplicationController#create as HTML
1455
+ Can't verify CSRF token authenticity.
1456
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 111)
1457
+ ---------------------------------------------------------------
1458
+ AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
1459
+ ---------------------------------------------------------------
1460
+ Processing by ApplicationController#index as HTML
1461
+ Completed 200 OK in 0ms (Allocations: 106)
1462
+ -----------------------------------------------------------------------------------------------------
1463
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
1464
+ -----------------------------------------------------------------------------------------------------
1465
+ Processing by ApplicationController#create as HTML
1466
+ Can't verify CSRF token authenticity.
1467
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
1468
+ -------------------------------------------------------------
1469
+ AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
1470
+ -------------------------------------------------------------
1471
+ Processing by ApplicationController#index as HTML
1472
+ Completed 200 OK in 0ms (Allocations: 106)
1473
+ -------------------------------------------------------------------------
1474
+ AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
1475
+ -------------------------------------------------------------------------
1476
+ Processing by ApplicationController#index as HTML
1477
+ Completed 200 OK in 0ms (Allocations: 74)
1478
+ ------------------------------------------------------------------------------------
1479
+ AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
1480
+ ------------------------------------------------------------------------------------
1481
+ Processing by ApplicationController#index as HTML
1482
+ Completed 200 OK in 0ms (Allocations: 106)
1483
+ -----------------------------------------------------------
1484
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
1485
+ -----------------------------------------------------------
1486
+ Processing by ApplicationController#index as HTML
1487
+ Completed 200 OK in 0ms (Allocations: 106)
1488
+ -----------------------------------------------------------------------------
1489
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
1490
+ -----------------------------------------------------------------------------
1491
+ Processing by ApplicationController#create as HTML
1492
+ Completed 200 OK in 0ms (Allocations: 125)
1493
+ --------------------------------------------------------------------------------------------------------
1494
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
1495
+ --------------------------------------------------------------------------------------------------------
1496
+ Processing by ApplicationController#index as HTML
1497
+ Completed 200 OK in 0ms (Allocations: 106)
1498
+ ----------------------------------------------------------------------------
1499
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
1500
+ ----------------------------------------------------------------------------
1501
+ Processing by ExclusionsController#index as HTML
1502
+ Completed 200 OK in 0ms (Allocations: 128)
1503
+ ------------------------------------------------------------------------------------
1504
+ AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
1505
+ ------------------------------------------------------------------------------------
1506
+ Processing by ApplicationController#index as HTML
1507
+ Completed 200 OK in 0ms (Allocations: 111)
1508
+ -----------------------------------------------------------------------------
1509
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
1510
+ -----------------------------------------------------------------------------
1511
+ Processing by ApplicationController#create as HTML
1512
+ Completed 200 OK in 0ms (Allocations: 131)
1513
+ -----------------------------------------------------------
1514
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
1515
+ -----------------------------------------------------------
1516
+ Processing by ApplicationController#index as HTML
1517
+ Completed 200 OK in 0ms (Allocations: 106)
1518
+ --------------------------------------------------------------------------------------------------------
1519
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
1520
+ --------------------------------------------------------------------------------------------------------
1521
+ Processing by ApplicationController#index as HTML
1522
+ Completed 200 OK in 0ms (Allocations: 106)
1523
+ -------------------------------------------------------------------------
1524
+ AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
1525
+ -------------------------------------------------------------------------
1526
+ Processing by ApplicationController#index as HTML
1527
+ Completed 200 OK in 0ms (Allocations: 74)
1528
+ ---------------------------------------------------------------
1529
+ AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
1530
+ ---------------------------------------------------------------
1531
+ Processing by ApplicationController#index as HTML
1532
+ Completed 200 OK in 0ms (Allocations: 106)
1533
+ -------------------------------------------------------------------------------------
1534
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
1535
+ -------------------------------------------------------------------------------------
1536
+ Processing by ApplicationController#create as HTML
1537
+ Can't verify CSRF token authenticity.
1538
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 105)
1539
+ -----------------------------------------------------------------------------------------------------
1540
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
1541
+ -----------------------------------------------------------------------------------------------------
1542
+ Processing by ApplicationController#create as HTML
1543
+ Can't verify CSRF token authenticity.
1544
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
1545
+ --------------------------------------------------------
1546
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
1547
+ --------------------------------------------------------
1548
+ Processing by ApplicationController#index as HTML
1549
+ Completed 200 OK in 0ms (Allocations: 117)
1550
+ -------------------------------------------------------------
1551
+ AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
1552
+ -------------------------------------------------------------
1553
+ Processing by ApplicationController#index as HTML
1554
+ Completed 200 OK in 0ms (Allocations: 106)
1555
+ ------------------------------------------------------
1556
+ AngularRailsCsrfTest: test_same_site_can_be_configured
1557
+ ------------------------------------------------------
1558
+ Processing by ApplicationController#index as HTML
1559
+ Completed 200 OK in 0ms (Allocations: 106)
1560
+ ------------------------------------------------------
1561
+ AngularRailsCsrfTest: test_same_site_can_be_configured
1562
+ ------------------------------------------------------
1563
+ Processing by ApplicationController#index as HTML
1564
+ Completed 200 OK in 0ms (Allocations: 174)
1565
+ -------------------------------------------------------------------------------------
1566
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
1567
+ -------------------------------------------------------------------------------------
1568
+ Processing by ApplicationController#create as HTML
1569
+ Can't verify CSRF token authenticity.
1570
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 111)
1571
+ -----------------------------------------------------------------------------
1572
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
1573
+ -----------------------------------------------------------------------------
1574
+ Processing by ApplicationController#create as HTML
1575
+ Completed 200 OK in 0ms (Allocations: 125)
1576
+ -----------------------------------------------------------------------------------------------------
1577
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
1578
+ -----------------------------------------------------------------------------------------------------
1579
+ Processing by ApplicationController#create as HTML
1580
+ Can't verify CSRF token authenticity.
1581
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
1582
+ -------------------------------------------------------------
1583
+ AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
1584
+ -------------------------------------------------------------
1585
+ Processing by ApplicationController#index as HTML
1586
+ Completed 200 OK in 0ms (Allocations: 106)
1587
+ ---------------------------------------------------------------
1588
+ AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
1589
+ ---------------------------------------------------------------
1590
+ Processing by ApplicationController#index as HTML
1591
+ Completed 200 OK in 0ms (Allocations: 106)
1592
+ -------------------------------------------------------------------------
1593
+ AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
1594
+ -------------------------------------------------------------------------
1595
+ Processing by ApplicationController#index as HTML
1596
+ Completed 200 OK in 0ms (Allocations: 74)
1597
+ -----------------------------------------------------------
1598
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
1599
+ -----------------------------------------------------------
1600
+ Processing by ApplicationController#index as HTML
1601
+ Completed 200 OK in 0ms (Allocations: 106)
1602
+ ------------------------------------------------------------------------------------
1603
+ AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
1604
+ ------------------------------------------------------------------------------------
1605
+ Processing by ApplicationController#index as HTML
1606
+ Completed 200 OK in 0ms (Allocations: 106)
1607
+ --------------------------------------------------------
1608
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
1609
+ --------------------------------------------------------
1610
+ Processing by ApplicationController#index as HTML
1611
+ Completed 200 OK in 0ms (Allocations: 117)
1612
+ --------------------------------------------------------------------------------------------------------
1613
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
1614
+ --------------------------------------------------------------------------------------------------------
1615
+ Processing by ApplicationController#index as HTML
1616
+ Completed 200 OK in 0ms (Allocations: 106)
1617
+ ----------------------------------------------------------------------------
1618
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
1619
+ ----------------------------------------------------------------------------
1620
+ Processing by ExclusionsController#index as HTML
1621
+ Completed 200 OK in 0ms (Allocations: 71)
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: angular_rails_csrf
3
3
  version: !ruby/object:Gem::Version
4
- version: 4.2.0
4
+ version: 4.3.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - James Sanders
@@ -9,7 +9,7 @@ authors:
9
9
  autorequire:
10
10
  bindir: bin
11
11
  cert_chain: []
12
- date: 2020-03-31 00:00:00.000000000 Z
12
+ date: 2020-05-18 00:00:00.000000000 Z
13
13
  dependencies:
14
14
  - !ruby/object:Gem::Dependency
15
15
  name: rake
@@ -45,14 +45,14 @@ dependencies:
45
45
  requirements:
46
46
  - - '='
47
47
  - !ruby/object:Gem::Version
48
- version: 6.0.2.2
48
+ version: 6.0.3
49
49
  type: :development
50
50
  prerelease: false
51
51
  version_requirements: !ruby/object:Gem::Requirement
52
52
  requirements:
53
53
  - - '='
54
54
  - !ruby/object:Gem::Version
55
- version: 6.0.2.2
55
+ version: 6.0.3
56
56
  - !ruby/object:Gem::Dependency
57
57
  name: railties
58
58
  requirement: !ruby/object:Gem::Requirement
@@ -167,7 +167,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
167
167
  requirements:
168
168
  - - ">="
169
169
  - !ruby/object:Gem::Version
170
- version: 2.3.0
170
+ version: 2.5.0
171
171
  required_rubygems_version: !ruby/object:Gem::Requirement
172
172
  requirements:
173
173
  - - ">="