angular_rails_csrf 4.2.0 → 4.3.0

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 4e8a320d5c0af2703ea102297a762789112438a32347be78810f9ed0a38f0944
4
- data.tar.gz: 69b97e7968cc7969768432e5b37a73aae82525dc22aa4736aca1ef008f479568
3
+ metadata.gz: 9e43d5d53174346803640b31332eb2b531bfbcf348551eadbd2d799ab302c89f
4
+ data.tar.gz: 125aedeb7028a2a4052d2fe82430d603b86a344b2fec566eed77d1ed66828370
5
5
  SHA512:
6
- metadata.gz: 064c1ad9b08d278ba698c7e0deebd6a0169aeba2f665c9ada2e67fe08cc704cd7d1d21cb79d31be3bf55d985d951988e87239b67ca03169ea6b6bbaf740423aa
7
- data.tar.gz: 9a6126ddfa20f2d162e569a277f539b5b15bceddc5f75f2321f8d2d5771b6b5de53c54a388397b91e7ee94d4a2bb08d812f01b230078f33d5d46884f7f67952a
6
+ metadata.gz: 91f040a88da0b98f23c1a1d322c2a4d54c9bb4b2446f7305dcb035c25e931d59388489efd70216c5deb26a3e4bdf178c8beead059980b68923ece2f3a7c10907
7
+ data.tar.gz: bb1ebd352de7af530639a662d90714ee96cd0f417edacb722db987db3950719e9e2000fb2d27c44f037d9106502b217cb1dae28b4222becf476bb5546d03bcee
data/README.md CHANGED
@@ -80,6 +80,8 @@ end
80
80
 
81
81
  **NOTE**: When using `config.angular_rails_csrf_same_site = :none`, this gem automatically sets the cookie to `Secure` (`config.angular_rails_csrf_secure = true`) to comply with [the specifications](https://tools.ietf.org/html/draft-west-cookie-incrementalism-00).
82
82
 
83
+ Please note that [Safari is known to have issues](https://bugs.webkit.org/show_bug.cgi?id=198181) with SameSite attribute set to `:none`.
84
+
83
85
  ### Exclusions
84
86
 
85
87
  Sometimes you will want to skip setting the XSRF token for certain controllers (for example, when using SSE or ActionCable, as discussed [here](https://github.com/jsanders/angular_rails_csrf/issues/7)):
data/Rakefile CHANGED
@@ -21,8 +21,7 @@ Bundler::GemHelper.install_tasks
21
21
  require 'rake/testtask'
22
22
 
23
23
  Rake::TestTask.new(:test) do |t|
24
- t.libs << 'lib'
25
- t.libs << 'test'
24
+ t.libs = %w[lib test]
26
25
  t.pattern = 'test/**/*_test.rb'
27
26
  t.verbose = false
28
27
  end
@@ -28,11 +28,7 @@ module AngularRailsCsrf
28
28
  end
29
29
 
30
30
  def verified_request?
31
- if respond_to?(:valid_authenticity_token?, true)
32
- super || valid_authenticity_token?(session, request.headers['X-XSRF-TOKEN'])
33
- else
34
- super || form_authenticity_token == request.headers['X-XSRF-TOKEN']
35
- end
31
+ super || valid_authenticity_token?(session, request.headers['X-XSRF-TOKEN'])
36
32
  end
37
33
 
38
34
  private
@@ -1,5 +1,5 @@
1
1
  # frozen_string_literal: true
2
2
 
3
3
  module AngularRailsCsrf
4
- VERSION = '4.2.0'
4
+ VERSION = '4.3.0'
5
5
  end
@@ -31,44 +31,49 @@ class AngularRailsCsrfTest < ActionController::TestCase
31
31
  assert_response :success
32
32
  end
33
33
 
34
- test 'the domain is used if present' do
35
- begin
36
- config = Rails.application.config
37
- def config.angular_rails_csrf_domain
38
- :all
39
- end
34
+ test 'csrf-cookie is not set if exclusion is enabled' do
35
+ refute @controller.respond_to?(:__exclude_xsrf_token_cookie?)
36
+ @controller.class_eval { exclude_xsrf_token_cookie }
37
+ get :index
38
+ assert_valid_cookie present: false
39
+ assert @controller.__exclude_xsrf_token_cookie?
40
+ assert_response :success
41
+ end
40
42
 
41
- get :index
42
- assert @response.headers['Set-Cookie'].include?('.test.host')
43
- assert_valid_cookie
44
- assert_response :success
45
- ensure
46
- config.instance_eval('undef :angular_rails_csrf_domain', __FILE__, __LINE__)
43
+ test 'the domain is used if present' do
44
+ config = Rails.application.config
45
+ def config.angular_rails_csrf_domain
46
+ :all
47
47
  end
48
+
49
+ get :index
50
+ assert @response.headers['Set-Cookie'].include?('.test.host')
51
+ assert_valid_cookie
52
+ assert_response :success
53
+ ensure
54
+ config.instance_eval('undef :angular_rails_csrf_domain', __FILE__, __LINE__)
48
55
  end
49
56
 
50
57
  test 'the secure flag is set if configured' do
51
- begin
52
- @request.headers['HTTPS'] = 'on'
58
+ @request.headers['HTTPS'] = 'on'
53
59
 
54
- config = Rails.application.config
55
- config.define_singleton_method(:angular_rails_csrf_secure) { true }
60
+ config = Rails.application.config
61
+ config.define_singleton_method(:angular_rails_csrf_secure) { true }
56
62
 
57
- get :index
58
- assert @response.headers['Set-Cookie'].include?('secure')
59
- assert_valid_cookie
60
- assert_response :success
61
- ensure
62
- @request.headers['HTTPS'] = nil
63
- config.instance_eval('undef :angular_rails_csrf_secure', __FILE__, __LINE__)
64
- end
63
+ get :index
64
+ assert @response.headers['Set-Cookie'].include?('secure')
65
+ assert_valid_cookie
66
+ assert_response :success
67
+ ensure
68
+ @request.headers['HTTPS'] = nil
69
+ config.instance_eval('undef :angular_rails_csrf_secure', __FILE__, __LINE__)
65
70
  end
66
71
 
67
72
  test 'a custom name is used if present' do
68
73
  use_custom_cookie_name do
69
74
  get :index
70
75
  assert @response.headers['Set-Cookie'].include?('CUSTOM-COOKIE-NAME')
71
- assert_valid_cookie('CUSTOM-COOKIE-NAME')
76
+ assert_valid_cookie name: 'CUSTOM-COOKIE-NAME'
72
77
  assert_response :success
73
78
  end
74
79
  end
@@ -81,34 +86,30 @@ class AngularRailsCsrfTest < ActionController::TestCase
81
86
  end
82
87
 
83
88
  test 'same_site can be configured' do
84
- begin
85
- config = Rails.application.config
86
- config.define_singleton_method(:angular_rails_csrf_same_site) { :strict }
89
+ config = Rails.application.config
90
+ config.define_singleton_method(:angular_rails_csrf_same_site) { :strict }
87
91
 
88
- get :index
89
- assert @response.headers['Set-Cookie'].include?('SameSite=Strict')
90
- assert_valid_cookie
91
- assert_response :success
92
- ensure
93
- config.instance_eval('undef :angular_rails_csrf_same_site', __FILE__, __LINE__)
94
- end
92
+ get :index
93
+ assert @response.headers['Set-Cookie'].include?('SameSite=Strict')
94
+ assert_valid_cookie
95
+ assert_response :success
96
+ ensure
97
+ config.instance_eval('undef :angular_rails_csrf_same_site', __FILE__, __LINE__)
95
98
  end
96
99
 
97
100
  test 'secure is set automatically when same_site is set to none' do
98
- begin
99
- @request.headers['HTTPS'] = 'on'
101
+ @request.headers['HTTPS'] = 'on'
100
102
 
101
- config = Rails.application.config
102
- config.define_singleton_method(:angular_rails_csrf_same_site) { :none }
103
+ config = Rails.application.config
104
+ config.define_singleton_method(:angular_rails_csrf_same_site) { :none }
103
105
 
104
- get :index
105
- assert @response.headers['Set-Cookie'].include?('SameSite=None')
106
- assert @response.headers['Set-Cookie'].include?('secure')
107
- assert_valid_cookie
108
- assert_response :success
109
- ensure
110
- config.instance_eval('undef :angular_rails_csrf_same_site', __FILE__, __LINE__)
111
- end
106
+ get :index
107
+ assert @response.headers['Set-Cookie'].include?('SameSite=None')
108
+ assert @response.headers['Set-Cookie'].include?('secure')
109
+ assert_valid_cookie
110
+ assert_response :success
111
+ ensure
112
+ config.instance_eval('undef :angular_rails_csrf_same_site', __FILE__, __LINE__)
112
113
  end
113
114
 
114
115
  private
@@ -119,12 +120,10 @@ class AngularRailsCsrfTest < ActionController::TestCase
119
120
  @request.headers['X-XSRF-TOKEN'] = value
120
121
  end
121
122
 
122
- def assert_valid_cookie(name = 'XSRF-TOKEN')
123
- if @controller.respond_to?(:valid_authenticity_token?, true)
124
- assert @controller.send(:valid_authenticity_token?, session, cookies[name])
125
- else
126
- assert_equal @controller.send(:form_authenticity_token), cookies['XSRF-TOKEN']
127
- end
123
+ def assert_valid_cookie(name: 'XSRF-TOKEN', present: true)
124
+ cookie_valid = @controller.send(:valid_authenticity_token?, session, cookies[name])
125
+ cookie_valid = !cookie_valid unless present
126
+ assert cookie_valid
128
127
  end
129
128
 
130
129
  def use_custom_cookie_name
@@ -857,3 +857,765 @@ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
857
857
  -----------------------------------------------------------------------------
858
858
  Processing by ApplicationController#create as HTML
859
859
  Completed 200 OK in 0ms (Allocations: 125)
860
+ ----------------------------------------------------------------------------
861
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
862
+ ----------------------------------------------------------------------------
863
+ Processing by ExclusionsController#index as HTML
864
+ Completed 200 OK in 0ms (Allocations: 128)
865
+ ----------------------------------
866
+ AngularRailsCsrfTest: test_exclude
867
+ ----------------------------------
868
+ Processing by ApplicationController#index as HTML
869
+ Completed 200 OK in 0ms (Allocations: 74)
870
+ -------------------------------------------------------------------------------------
871
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
872
+ -------------------------------------------------------------------------------------
873
+ Processing by ApplicationController#create as HTML
874
+ Can't verify CSRF token authenticity.
875
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 157)
876
+ -----------------------------------------------------------
877
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
878
+ -----------------------------------------------------------
879
+ Processing by ApplicationController#index as HTML
880
+ Completed 200 OK in 0ms (Allocations: 129)
881
+ ---------------------------------------------------------------
882
+ AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
883
+ ---------------------------------------------------------------
884
+ Processing by ApplicationController#index as HTML
885
+ Completed 200 OK in 0ms (Allocations: 106)
886
+ ----------------------------------
887
+ AngularRailsCsrfTest: test_exclude
888
+ ----------------------------------
889
+ Processing by ApplicationController#index as HTML
890
+ Completed 200 OK in 0ms (Allocations: 74)
891
+ --------------------------------------------------------
892
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
893
+ --------------------------------------------------------
894
+ Processing by ApplicationController#index as HTML
895
+ Completed 200 OK in 0ms (Allocations: 117)
896
+ ------------------------------------------------------
897
+ AngularRailsCsrfTest: test_same_site_can_be_configured
898
+ ------------------------------------------------------
899
+ Processing by ApplicationController#index as HTML
900
+ Completed 200 OK in 0ms (Allocations: 106)
901
+ --------------------------------------------------------------------------------------------------------
902
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
903
+ --------------------------------------------------------------------------------------------------------
904
+ Processing by ApplicationController#index as HTML
905
+ Completed 200 OK in 0ms (Allocations: 106)
906
+ -----------------------------------------------------------------------------------------------------
907
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
908
+ -----------------------------------------------------------------------------------------------------
909
+ Processing by ApplicationController#create as HTML
910
+ Can't verify CSRF token authenticity.
911
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
912
+ -------------------------------------------------------------
913
+ AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
914
+ -------------------------------------------------------------
915
+ Processing by ApplicationController#index as HTML
916
+ Completed 200 OK in 0ms (Allocations: 106)
917
+ ------------------------------------------------------------------------------------
918
+ AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
919
+ ------------------------------------------------------------------------------------
920
+ Processing by ApplicationController#index as HTML
921
+ Completed 200 OK in 0ms (Allocations: 106)
922
+ -----------------------------------------------------------------------------
923
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
924
+ -----------------------------------------------------------------------------
925
+ Processing by ApplicationController#create as HTML
926
+ Completed 200 OK in 0ms (Allocations: 125)
927
+ ----------------------------------------------------------------------------
928
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
929
+ ----------------------------------------------------------------------------
930
+ Processing by ExclusionsController#index as HTML
931
+ Completed 200 OK in 0ms (Allocations: 71)
932
+ ----------------------------------------------------------------------------
933
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
934
+ ----------------------------------------------------------------------------
935
+ Processing by ExclusionsController#index as HTML
936
+ Completed 200 OK in 0ms (Allocations: 128)
937
+ ---------------------------------------------------------------
938
+ AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
939
+ ---------------------------------------------------------------
940
+ Processing by ApplicationController#index as HTML
941
+ Completed 200 OK in 0ms (Allocations: 111)
942
+ -------------------------------------------------------------------------------------
943
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
944
+ -------------------------------------------------------------------------------------
945
+ Processing by ApplicationController#create as HTML
946
+ Can't verify CSRF token authenticity.
947
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 111)
948
+ ------------------------------------------------------------------------------------
949
+ AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
950
+ ------------------------------------------------------------------------------------
951
+ Processing by ApplicationController#index as HTML
952
+ Completed 200 OK in 0ms (Allocations: 106)
953
+ -----------------------------------------------------------------------------------------------------
954
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
955
+ -----------------------------------------------------------------------------------------------------
956
+ Processing by ApplicationController#create as HTML
957
+ Can't verify CSRF token authenticity.
958
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
959
+ -----------------------------------------------------------------------------
960
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
961
+ -----------------------------------------------------------------------------
962
+ Processing by ApplicationController#create as HTML
963
+ Completed 200 OK in 0ms (Allocations: 125)
964
+ -----------------------------------------------------------
965
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
966
+ -----------------------------------------------------------
967
+ Processing by ApplicationController#index as HTML
968
+ Completed 200 OK in 0ms (Allocations: 106)
969
+ --------------------------------------------------------
970
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
971
+ --------------------------------------------------------
972
+ Processing by ApplicationController#index as HTML
973
+ Completed 200 OK in 0ms (Allocations: 117)
974
+ ----------------------------------
975
+ AngularRailsCsrfTest: test_exclude
976
+ ----------------------------------
977
+ Processing by ApplicationController#index as HTML
978
+ Completed 200 OK in 0ms (Allocations: 74)
979
+ -------------------------------------------------------------
980
+ AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
981
+ -------------------------------------------------------------
982
+ Processing by ApplicationController#index as HTML
983
+ Completed 200 OK in 0ms (Allocations: 106)
984
+ --------------------------------------------------------------------------------------------------------
985
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
986
+ --------------------------------------------------------------------------------------------------------
987
+ Processing by ApplicationController#index as HTML
988
+ Completed 200 OK in 0ms (Allocations: 106)
989
+ ------------------------------------------------------
990
+ AngularRailsCsrfTest: test_same_site_can_be_configured
991
+ ------------------------------------------------------
992
+ Processing by ApplicationController#index as HTML
993
+ Completed 200 OK in 0ms (Allocations: 106)
994
+ -----------------------------------------------------------------------------------------------------
995
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
996
+ -----------------------------------------------------------------------------------------------------
997
+ Processing by ApplicationController#create as HTML
998
+ Can't verify CSRF token authenticity.
999
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 162)
1000
+ -----------------------------------------------------------
1001
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
1002
+ -----------------------------------------------------------
1003
+ Processing by ApplicationController#index as HTML
1004
+ Completed 200 OK in 0ms (Allocations: 129)
1005
+ -----------------------------------------------------------------------------
1006
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
1007
+ -----------------------------------------------------------------------------
1008
+ Processing by ApplicationController#create as HTML
1009
+ Completed 200 OK in 0ms (Allocations: 125)
1010
+ -------------------------------------------------------------
1011
+ AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
1012
+ -------------------------------------------------------------
1013
+ Processing by ApplicationController#index as HTML
1014
+ Completed 200 OK in 0ms (Allocations: 106)
1015
+ ------------------------------------------------------------------------------------
1016
+ AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
1017
+ ------------------------------------------------------------------------------------
1018
+ Processing by ApplicationController#index as HTML
1019
+ Completed 200 OK in 0ms (Allocations: 106)
1020
+ ---------------------------------------------------------------
1021
+ AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
1022
+ ---------------------------------------------------------------
1023
+ Processing by ApplicationController#index as HTML
1024
+ Completed 200 OK in 0ms (Allocations: 106)
1025
+ ------------------------------------------------------
1026
+ AngularRailsCsrfTest: test_same_site_can_be_configured
1027
+ ------------------------------------------------------
1028
+ Processing by ApplicationController#index as HTML
1029
+ Completed 200 OK in 0ms (Allocations: 106)
1030
+ --------------------------------------------------------------------------------------------------------
1031
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
1032
+ --------------------------------------------------------------------------------------------------------
1033
+ Processing by ApplicationController#index as HTML
1034
+ Completed 200 OK in 0ms (Allocations: 106)
1035
+ ----------------------------------
1036
+ AngularRailsCsrfTest: test_exclude
1037
+ ----------------------------------
1038
+ Processing by ApplicationController#index as HTML
1039
+ Completed 200 OK in 0ms (Allocations: 74)
1040
+ -------------------------------------------------------------------------------------
1041
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
1042
+ -------------------------------------------------------------------------------------
1043
+ Processing by ApplicationController#create as HTML
1044
+ Can't verify CSRF token authenticity.
1045
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 98)
1046
+ --------------------------------------------------------
1047
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
1048
+ --------------------------------------------------------
1049
+ Processing by ApplicationController#index as HTML
1050
+ Completed 200 OK in 0ms (Allocations: 117)
1051
+ ----------------------------------------------------------------------------
1052
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
1053
+ ----------------------------------------------------------------------------
1054
+ Processing by ExclusionsController#index as HTML
1055
+ Completed 200 OK in 0ms (Allocations: 71)
1056
+ ----------------------------------------------------------------------------
1057
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
1058
+ ----------------------------------------------------------------------------
1059
+ Processing by ExclusionsController#index as HTML
1060
+ Completed 200 OK in 0ms (Allocations: 128)
1061
+ -----------------------------------------------------------------------------------------------------
1062
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
1063
+ -----------------------------------------------------------------------------------------------------
1064
+ Processing by ApplicationController#create as HTML
1065
+ Can't verify CSRF token authenticity.
1066
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 117)
1067
+ -------------------------------------------------------------------------
1068
+ AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
1069
+ -------------------------------------------------------------------------
1070
+ Processing by ApplicationController#index as HTML
1071
+ Completed 200 OK in 0ms (Allocations: 74)
1072
+ --------------------------------------------------------
1073
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
1074
+ --------------------------------------------------------
1075
+ Processing by ApplicationController#index as HTML
1076
+ Completed 200 OK in 0ms (Allocations: 122)
1077
+ ------------------------------------------------------------------------------------
1078
+ AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
1079
+ ------------------------------------------------------------------------------------
1080
+ Processing by ApplicationController#index as HTML
1081
+ Completed 200 OK in 0ms (Allocations: 106)
1082
+ ------------------------------------------------------
1083
+ AngularRailsCsrfTest: test_same_site_can_be_configured
1084
+ ------------------------------------------------------
1085
+ Processing by ApplicationController#index as HTML
1086
+ Completed 200 OK in 0ms (Allocations: 106)
1087
+ --------------------------------------------------------------------------------------------------------
1088
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
1089
+ --------------------------------------------------------------------------------------------------------
1090
+ Processing by ApplicationController#index as HTML
1091
+ Completed 200 OK in 0ms (Allocations: 106)
1092
+ -----------------------------------------------------------
1093
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
1094
+ -----------------------------------------------------------
1095
+ Processing by ApplicationController#index as HTML
1096
+ Completed 200 OK in 0ms (Allocations: 106)
1097
+ ---------------------------------------------------------------
1098
+ AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
1099
+ ---------------------------------------------------------------
1100
+ Processing by ApplicationController#index as HTML
1101
+ Completed 200 OK in 0ms (Allocations: 106)
1102
+ -----------------------------------------------------------------------------
1103
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
1104
+ -----------------------------------------------------------------------------
1105
+ Processing by ApplicationController#create as HTML
1106
+ Completed 200 OK in 0ms (Allocations: 125)
1107
+ -------------------------------------------------------------------------------------
1108
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
1109
+ -------------------------------------------------------------------------------------
1110
+ Processing by ApplicationController#create as HTML
1111
+ Can't verify CSRF token authenticity.
1112
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 98)
1113
+ -------------------------------------------------------------
1114
+ AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
1115
+ -------------------------------------------------------------
1116
+ Processing by ApplicationController#index as HTML
1117
+ Completed 200 OK in 0ms (Allocations: 106)
1118
+ ------------------------------------------------------
1119
+ AngularRailsCsrfTest: test_same_site_can_be_configured
1120
+ ------------------------------------------------------
1121
+ Processing by ApplicationController#index as HTML
1122
+ Completed 200 OK in 0ms (Allocations: 174)
1123
+ -------------------------------------------------------------------------
1124
+ AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
1125
+ -------------------------------------------------------------------------
1126
+ Processing by ApplicationController#index as HTML
1127
+ Completed 200 OK in 0ms (Allocations: 74)
1128
+ -----------------------------------------------------------
1129
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
1130
+ -----------------------------------------------------------
1131
+ Processing by ApplicationController#index as HTML
1132
+ Completed 200 OK in 0ms (Allocations: 106)
1133
+ --------------------------------------------------------------------------------------------------------
1134
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
1135
+ --------------------------------------------------------------------------------------------------------
1136
+ Processing by ApplicationController#index as HTML
1137
+ Completed 200 OK in 0ms (Allocations: 106)
1138
+ -------------------------------------------------------------
1139
+ AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
1140
+ -------------------------------------------------------------
1141
+ Processing by ApplicationController#index as HTML
1142
+ Completed 200 OK in 0ms (Allocations: 106)
1143
+ ------------------------------------------------------------------------------------
1144
+ AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
1145
+ ------------------------------------------------------------------------------------
1146
+ Processing by ApplicationController#index as HTML
1147
+ Completed 200 OK in 0ms (Allocations: 106)
1148
+ -----------------------------------------------------------------------------
1149
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
1150
+ -----------------------------------------------------------------------------
1151
+ Processing by ApplicationController#create as HTML
1152
+ Completed 200 OK in 0ms (Allocations: 131)
1153
+ -----------------------------------------------------------------------------------------------------
1154
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
1155
+ -----------------------------------------------------------------------------------------------------
1156
+ Processing by ApplicationController#create as HTML
1157
+ Can't verify CSRF token authenticity.
1158
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 110)
1159
+ -------------------------------------------------------------------------------------
1160
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
1161
+ -------------------------------------------------------------------------------------
1162
+ Processing by ApplicationController#create as HTML
1163
+ Can't verify CSRF token authenticity.
1164
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 98)
1165
+ ---------------------------------------------------------------
1166
+ AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
1167
+ ---------------------------------------------------------------
1168
+ Processing by ApplicationController#index as HTML
1169
+ Completed 200 OK in 0ms (Allocations: 106)
1170
+ --------------------------------------------------------
1171
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
1172
+ --------------------------------------------------------
1173
+ Processing by ApplicationController#index as HTML
1174
+ Completed 200 OK in 0ms (Allocations: 117)
1175
+ ----------------------------------------------------------------------------
1176
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
1177
+ ----------------------------------------------------------------------------
1178
+ Processing by ExclusionsController#index as HTML
1179
+ Completed 200 OK in 0ms (Allocations: 71)
1180
+ --------------------------------------------------------------------------------------------------------
1181
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
1182
+ --------------------------------------------------------------------------------------------------------
1183
+ Processing by ApplicationController#index as HTML
1184
+ Completed 200 OK in 0ms (Allocations: 174)
1185
+ ------------------------------------------------------
1186
+ AngularRailsCsrfTest: test_same_site_can_be_configured
1187
+ ------------------------------------------------------
1188
+ Processing by ApplicationController#index as HTML
1189
+ Completed 200 OK in 0ms (Allocations: 106)
1190
+ --------------------------------------------------------
1191
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
1192
+ --------------------------------------------------------
1193
+ Processing by ApplicationController#index as HTML
1194
+ Completed 200 OK in 0ms (Allocations: 117)
1195
+ -------------------------------------------------------------------------------------
1196
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
1197
+ -------------------------------------------------------------------------------------
1198
+ Processing by ApplicationController#create as HTML
1199
+ Can't verify CSRF token authenticity.
1200
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 111)
1201
+ -----------------------------------------------------------
1202
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
1203
+ -----------------------------------------------------------
1204
+ Processing by ApplicationController#index as HTML
1205
+ Completed 200 OK in 0ms (Allocations: 106)
1206
+ ---------------------------------------------------------------
1207
+ AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
1208
+ ---------------------------------------------------------------
1209
+ Processing by ApplicationController#index as HTML
1210
+ Completed 200 OK in 0ms (Allocations: 106)
1211
+ -----------------------------------------------------------------------------------------------------
1212
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
1213
+ -----------------------------------------------------------------------------------------------------
1214
+ Processing by ApplicationController#create as HTML
1215
+ Can't verify CSRF token authenticity.
1216
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
1217
+ -------------------------------------------------------------
1218
+ AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
1219
+ -------------------------------------------------------------
1220
+ Processing by ApplicationController#index as HTML
1221
+ Completed 200 OK in 0ms (Allocations: 106)
1222
+ -------------------------------------------------------------------------
1223
+ AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
1224
+ -------------------------------------------------------------------------
1225
+ Processing by ApplicationController#index as HTML
1226
+ Completed 200 OK in 0ms (Allocations: 74)
1227
+ -----------------------------------------------------------------------------
1228
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
1229
+ -----------------------------------------------------------------------------
1230
+ Processing by ApplicationController#create as HTML
1231
+ Completed 200 OK in 0ms (Allocations: 125)
1232
+ ------------------------------------------------------------------------------------
1233
+ AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
1234
+ ------------------------------------------------------------------------------------
1235
+ Processing by ApplicationController#index as HTML
1236
+ Completed 200 OK in 0ms (Allocations: 106)
1237
+ ----------------------------------------------------------------------------
1238
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
1239
+ ----------------------------------------------------------------------------
1240
+ Processing by ExclusionsController#index as HTML
1241
+ Completed 200 OK in 0ms (Allocations: 71)
1242
+ --------------------------------------------------------------------------------------------------------
1243
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
1244
+ --------------------------------------------------------------------------------------------------------
1245
+ Processing by ApplicationController#index as HTML
1246
+ Completed 200 OK in 0ms (Allocations: 174)
1247
+ -------------------------------------------------------------------------
1248
+ AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
1249
+ -------------------------------------------------------------------------
1250
+ Processing by ApplicationController#index as HTML
1251
+ Completed 200 OK in 0ms (Allocations: 74)
1252
+ -------------------------------------------------------------
1253
+ AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
1254
+ -------------------------------------------------------------
1255
+ Processing by ApplicationController#index as HTML
1256
+ Completed 200 OK in 0ms (Allocations: 174)
1257
+ ---------------------------------------------------------------
1258
+ AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
1259
+ ---------------------------------------------------------------
1260
+ Processing by ApplicationController#index as HTML
1261
+ Completed 200 OK in 0ms (Allocations: 106)
1262
+ -------------------------------------------------------------------------
1263
+ AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
1264
+ -------------------------------------------------------------------------
1265
+ --------------------------------------------------------
1266
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
1267
+ --------------------------------------------------------
1268
+ Processing by ApplicationController#index as HTML
1269
+ Completed 200 OK in 0ms (Allocations: 117)
1270
+ -----------------------------------------------------------------------------
1271
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
1272
+ -----------------------------------------------------------------------------
1273
+ Processing by ApplicationController#create as HTML
1274
+ Completed 200 OK in 0ms (Allocations: 131)
1275
+ -----------------------------------------------------------------------------------------------------
1276
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
1277
+ -----------------------------------------------------------------------------------------------------
1278
+ Processing by ApplicationController#create as HTML
1279
+ Can't verify CSRF token authenticity.
1280
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 110)
1281
+ --------------------------------------------------------------------------------------------------------
1282
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
1283
+ --------------------------------------------------------------------------------------------------------
1284
+ Processing by ApplicationController#index as HTML
1285
+ Completed 200 OK in 0ms (Allocations: 106)
1286
+ -----------------------------------------------------------
1287
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
1288
+ -----------------------------------------------------------
1289
+ Processing by ApplicationController#index as HTML
1290
+ Completed 200 OK in 0ms (Allocations: 106)
1291
+ -------------------------------------------------------------------------------------
1292
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
1293
+ -------------------------------------------------------------------------------------
1294
+ Processing by ApplicationController#create as HTML
1295
+ Can't verify CSRF token authenticity.
1296
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 98)
1297
+ ------------------------------------------------------
1298
+ AngularRailsCsrfTest: test_same_site_can_be_configured
1299
+ ------------------------------------------------------
1300
+ Processing by ApplicationController#index as HTML
1301
+ Completed 200 OK in 0ms (Allocations: 106)
1302
+ ------------------------------------------------------------------------------------
1303
+ AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
1304
+ ------------------------------------------------------------------------------------
1305
+ Processing by ApplicationController#index as HTML
1306
+ Completed 200 OK in 0ms (Allocations: 106)
1307
+ ----------------------------------------------------------------------------
1308
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
1309
+ ----------------------------------------------------------------------------
1310
+ Processing by ExclusionsController#index as HTML
1311
+ Completed 200 OK in 0ms (Allocations: 71)
1312
+ ----------------------------------------------------------------------------
1313
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
1314
+ ----------------------------------------------------------------------------
1315
+ Processing by ExclusionsController#index as HTML
1316
+ Completed 200 OK in 0ms (Allocations: 128)
1317
+ --------------------------------------------------------
1318
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
1319
+ --------------------------------------------------------
1320
+ Processing by ApplicationController#index as HTML
1321
+ Completed 200 OK in 0ms (Allocations: 122)
1322
+ -----------------------------------------------------------
1323
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
1324
+ -----------------------------------------------------------
1325
+ Processing by ApplicationController#index as HTML
1326
+ Completed 200 OK in 0ms (Allocations: 106)
1327
+ ------------------------------------------------------
1328
+ AngularRailsCsrfTest: test_same_site_can_be_configured
1329
+ ------------------------------------------------------
1330
+ Processing by ApplicationController#index as HTML
1331
+ Completed 200 OK in 0ms (Allocations: 106)
1332
+ -------------------------------------------------------------------------------------
1333
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
1334
+ -------------------------------------------------------------------------------------
1335
+ Processing by ApplicationController#create as HTML
1336
+ Can't verify CSRF token authenticity.
1337
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 111)
1338
+ -------------------------------------------------------------
1339
+ AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
1340
+ -------------------------------------------------------------
1341
+ Processing by ApplicationController#index as HTML
1342
+ Completed 200 OK in 0ms (Allocations: 106)
1343
+ -----------------------------------------------------------------------------
1344
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
1345
+ -----------------------------------------------------------------------------
1346
+ Processing by ApplicationController#create as HTML
1347
+ Completed 200 OK in 0ms (Allocations: 125)
1348
+ ------------------------------------------------------------------------------------
1349
+ AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
1350
+ ------------------------------------------------------------------------------------
1351
+ Processing by ApplicationController#index as HTML
1352
+ Completed 200 OK in 0ms (Allocations: 106)
1353
+ ---------------------------------------------------------------
1354
+ AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
1355
+ ---------------------------------------------------------------
1356
+ Processing by ApplicationController#index as HTML
1357
+ Completed 200 OK in 0ms (Allocations: 106)
1358
+ -------------------------------------------------------------------------
1359
+ AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
1360
+ -------------------------------------------------------------------------
1361
+ Processing by ApplicationController#index as HTML
1362
+ Completed 200 OK in 0ms (Allocations: 74)
1363
+ --------------------------------------------------------------------------------------------------------
1364
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
1365
+ --------------------------------------------------------------------------------------------------------
1366
+ Processing by ApplicationController#index as HTML
1367
+ Completed 200 OK in 0ms (Allocations: 106)
1368
+ -----------------------------------------------------------------------------------------------------
1369
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
1370
+ -----------------------------------------------------------------------------------------------------
1371
+ Processing by ApplicationController#create as HTML
1372
+ Can't verify CSRF token authenticity.
1373
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
1374
+ ----------------------------------------------------------------------------
1375
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
1376
+ ----------------------------------------------------------------------------
1377
+ Processing by ExclusionsController#index as HTML
1378
+ Completed 200 OK in 0ms (Allocations: 128)
1379
+ -------------------------------------------------------------------------------------
1380
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
1381
+ -------------------------------------------------------------------------------------
1382
+ Processing by ApplicationController#create as HTML
1383
+ Can't verify CSRF token authenticity.
1384
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 112)
1385
+ -----------------------------------------------------------------------------
1386
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
1387
+ -----------------------------------------------------------------------------
1388
+ Processing by ApplicationController#create as HTML
1389
+ Completed 200 OK in 0ms (Allocations: 132)
1390
+ ------------------------------------------------------------------------------------
1391
+ AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
1392
+ ------------------------------------------------------------------------------------
1393
+ Processing by ApplicationController#index as HTML
1394
+ Completed 200 OK in 0ms (Allocations: 106)
1395
+ --------------------------------------------------------------------------------------------------------
1396
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
1397
+ --------------------------------------------------------------------------------------------------------
1398
+ Processing by ApplicationController#index as HTML
1399
+ Completed 200 OK in 0ms (Allocations: 106)
1400
+ -----------------------------------------------------------
1401
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
1402
+ -----------------------------------------------------------
1403
+ Processing by ApplicationController#index as HTML
1404
+ Completed 200 OK in 0ms (Allocations: 106)
1405
+ --------------------------------------------------------
1406
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
1407
+ --------------------------------------------------------
1408
+ Processing by ApplicationController#index as HTML
1409
+ Completed 200 OK in 0ms (Allocations: 117)
1410
+ -------------------------------------------------------------
1411
+ AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
1412
+ -------------------------------------------------------------
1413
+ Processing by ApplicationController#index as HTML
1414
+ Completed 200 OK in 0ms (Allocations: 106)
1415
+ -----------------------------------------------------------------------------------------------------
1416
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
1417
+ -----------------------------------------------------------------------------------------------------
1418
+ Processing by ApplicationController#create as HTML
1419
+ Can't verify CSRF token authenticity.
1420
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
1421
+ -------------------------------------------------------------------------
1422
+ AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
1423
+ -------------------------------------------------------------------------
1424
+ Processing by ApplicationController#index as HTML
1425
+ Completed 200 OK in 0ms (Allocations: 74)
1426
+ ------------------------------------------------------
1427
+ AngularRailsCsrfTest: test_same_site_can_be_configured
1428
+ ------------------------------------------------------
1429
+ Processing by ApplicationController#index as HTML
1430
+ Completed 200 OK in 0ms (Allocations: 106)
1431
+ ---------------------------------------------------------------
1432
+ AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
1433
+ ---------------------------------------------------------------
1434
+ Processing by ApplicationController#index as HTML
1435
+ Completed 200 OK in 0ms (Allocations: 106)
1436
+ ----------------------------------------------------------------------------
1437
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
1438
+ ----------------------------------------------------------------------------
1439
+ Processing by ExclusionsController#index as HTML
1440
+ Completed 200 OK in 0ms (Allocations: 128)
1441
+ ------------------------------------------------------
1442
+ AngularRailsCsrfTest: test_same_site_can_be_configured
1443
+ ------------------------------------------------------
1444
+ Processing by ApplicationController#index as HTML
1445
+ Completed 200 OK in 0ms (Allocations: 111)
1446
+ --------------------------------------------------------
1447
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
1448
+ --------------------------------------------------------
1449
+ Processing by ApplicationController#index as HTML
1450
+ Completed 200 OK in 0ms (Allocations: 117)
1451
+ -------------------------------------------------------------------------------------
1452
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
1453
+ -------------------------------------------------------------------------------------
1454
+ Processing by ApplicationController#create as HTML
1455
+ Can't verify CSRF token authenticity.
1456
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 111)
1457
+ ---------------------------------------------------------------
1458
+ AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
1459
+ ---------------------------------------------------------------
1460
+ Processing by ApplicationController#index as HTML
1461
+ Completed 200 OK in 0ms (Allocations: 106)
1462
+ -----------------------------------------------------------------------------------------------------
1463
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
1464
+ -----------------------------------------------------------------------------------------------------
1465
+ Processing by ApplicationController#create as HTML
1466
+ Can't verify CSRF token authenticity.
1467
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
1468
+ -------------------------------------------------------------
1469
+ AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
1470
+ -------------------------------------------------------------
1471
+ Processing by ApplicationController#index as HTML
1472
+ Completed 200 OK in 0ms (Allocations: 106)
1473
+ -------------------------------------------------------------------------
1474
+ AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
1475
+ -------------------------------------------------------------------------
1476
+ Processing by ApplicationController#index as HTML
1477
+ Completed 200 OK in 0ms (Allocations: 74)
1478
+ ------------------------------------------------------------------------------------
1479
+ AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
1480
+ ------------------------------------------------------------------------------------
1481
+ Processing by ApplicationController#index as HTML
1482
+ Completed 200 OK in 0ms (Allocations: 106)
1483
+ -----------------------------------------------------------
1484
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
1485
+ -----------------------------------------------------------
1486
+ Processing by ApplicationController#index as HTML
1487
+ Completed 200 OK in 0ms (Allocations: 106)
1488
+ -----------------------------------------------------------------------------
1489
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
1490
+ -----------------------------------------------------------------------------
1491
+ Processing by ApplicationController#create as HTML
1492
+ Completed 200 OK in 0ms (Allocations: 125)
1493
+ --------------------------------------------------------------------------------------------------------
1494
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
1495
+ --------------------------------------------------------------------------------------------------------
1496
+ Processing by ApplicationController#index as HTML
1497
+ Completed 200 OK in 0ms (Allocations: 106)
1498
+ ----------------------------------------------------------------------------
1499
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
1500
+ ----------------------------------------------------------------------------
1501
+ Processing by ExclusionsController#index as HTML
1502
+ Completed 200 OK in 0ms (Allocations: 128)
1503
+ ------------------------------------------------------------------------------------
1504
+ AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
1505
+ ------------------------------------------------------------------------------------
1506
+ Processing by ApplicationController#index as HTML
1507
+ Completed 200 OK in 0ms (Allocations: 111)
1508
+ -----------------------------------------------------------------------------
1509
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
1510
+ -----------------------------------------------------------------------------
1511
+ Processing by ApplicationController#create as HTML
1512
+ Completed 200 OK in 0ms (Allocations: 131)
1513
+ -----------------------------------------------------------
1514
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
1515
+ -----------------------------------------------------------
1516
+ Processing by ApplicationController#index as HTML
1517
+ Completed 200 OK in 0ms (Allocations: 106)
1518
+ --------------------------------------------------------------------------------------------------------
1519
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
1520
+ --------------------------------------------------------------------------------------------------------
1521
+ Processing by ApplicationController#index as HTML
1522
+ Completed 200 OK in 0ms (Allocations: 106)
1523
+ -------------------------------------------------------------------------
1524
+ AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
1525
+ -------------------------------------------------------------------------
1526
+ Processing by ApplicationController#index as HTML
1527
+ Completed 200 OK in 0ms (Allocations: 74)
1528
+ ---------------------------------------------------------------
1529
+ AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
1530
+ ---------------------------------------------------------------
1531
+ Processing by ApplicationController#index as HTML
1532
+ Completed 200 OK in 0ms (Allocations: 106)
1533
+ -------------------------------------------------------------------------------------
1534
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
1535
+ -------------------------------------------------------------------------------------
1536
+ Processing by ApplicationController#create as HTML
1537
+ Can't verify CSRF token authenticity.
1538
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 105)
1539
+ -----------------------------------------------------------------------------------------------------
1540
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
1541
+ -----------------------------------------------------------------------------------------------------
1542
+ Processing by ApplicationController#create as HTML
1543
+ Can't verify CSRF token authenticity.
1544
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
1545
+ --------------------------------------------------------
1546
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
1547
+ --------------------------------------------------------
1548
+ Processing by ApplicationController#index as HTML
1549
+ Completed 200 OK in 0ms (Allocations: 117)
1550
+ -------------------------------------------------------------
1551
+ AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
1552
+ -------------------------------------------------------------
1553
+ Processing by ApplicationController#index as HTML
1554
+ Completed 200 OK in 0ms (Allocations: 106)
1555
+ ------------------------------------------------------
1556
+ AngularRailsCsrfTest: test_same_site_can_be_configured
1557
+ ------------------------------------------------------
1558
+ Processing by ApplicationController#index as HTML
1559
+ Completed 200 OK in 0ms (Allocations: 106)
1560
+ ------------------------------------------------------
1561
+ AngularRailsCsrfTest: test_same_site_can_be_configured
1562
+ ------------------------------------------------------
1563
+ Processing by ApplicationController#index as HTML
1564
+ Completed 200 OK in 0ms (Allocations: 174)
1565
+ -------------------------------------------------------------------------------------
1566
+ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
1567
+ -------------------------------------------------------------------------------------
1568
+ Processing by ApplicationController#create as HTML
1569
+ Can't verify CSRF token authenticity.
1570
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 111)
1571
+ -----------------------------------------------------------------------------
1572
+ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
1573
+ -----------------------------------------------------------------------------
1574
+ Processing by ApplicationController#create as HTML
1575
+ Completed 200 OK in 0ms (Allocations: 125)
1576
+ -----------------------------------------------------------------------------------------------------
1577
+ AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
1578
+ -----------------------------------------------------------------------------------------------------
1579
+ Processing by ApplicationController#create as HTML
1580
+ Can't verify CSRF token authenticity.
1581
+ Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
1582
+ -------------------------------------------------------------
1583
+ AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
1584
+ -------------------------------------------------------------
1585
+ Processing by ApplicationController#index as HTML
1586
+ Completed 200 OK in 0ms (Allocations: 106)
1587
+ ---------------------------------------------------------------
1588
+ AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
1589
+ ---------------------------------------------------------------
1590
+ Processing by ApplicationController#index as HTML
1591
+ Completed 200 OK in 0ms (Allocations: 106)
1592
+ -------------------------------------------------------------------------
1593
+ AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
1594
+ -------------------------------------------------------------------------
1595
+ Processing by ApplicationController#index as HTML
1596
+ Completed 200 OK in 0ms (Allocations: 74)
1597
+ -----------------------------------------------------------
1598
+ AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
1599
+ -----------------------------------------------------------
1600
+ Processing by ApplicationController#index as HTML
1601
+ Completed 200 OK in 0ms (Allocations: 106)
1602
+ ------------------------------------------------------------------------------------
1603
+ AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
1604
+ ------------------------------------------------------------------------------------
1605
+ Processing by ApplicationController#index as HTML
1606
+ Completed 200 OK in 0ms (Allocations: 106)
1607
+ --------------------------------------------------------
1608
+ AngularRailsCsrfTest: test_the_domain_is_used_if_present
1609
+ --------------------------------------------------------
1610
+ Processing by ApplicationController#index as HTML
1611
+ Completed 200 OK in 0ms (Allocations: 117)
1612
+ --------------------------------------------------------------------------------------------------------
1613
+ AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
1614
+ --------------------------------------------------------------------------------------------------------
1615
+ Processing by ApplicationController#index as HTML
1616
+ Completed 200 OK in 0ms (Allocations: 106)
1617
+ ----------------------------------------------------------------------------
1618
+ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
1619
+ ----------------------------------------------------------------------------
1620
+ Processing by ExclusionsController#index as HTML
1621
+ Completed 200 OK in 0ms (Allocations: 71)
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: angular_rails_csrf
3
3
  version: !ruby/object:Gem::Version
4
- version: 4.2.0
4
+ version: 4.3.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - James Sanders
@@ -9,7 +9,7 @@ authors:
9
9
  autorequire:
10
10
  bindir: bin
11
11
  cert_chain: []
12
- date: 2020-03-31 00:00:00.000000000 Z
12
+ date: 2020-05-18 00:00:00.000000000 Z
13
13
  dependencies:
14
14
  - !ruby/object:Gem::Dependency
15
15
  name: rake
@@ -45,14 +45,14 @@ dependencies:
45
45
  requirements:
46
46
  - - '='
47
47
  - !ruby/object:Gem::Version
48
- version: 6.0.2.2
48
+ version: 6.0.3
49
49
  type: :development
50
50
  prerelease: false
51
51
  version_requirements: !ruby/object:Gem::Requirement
52
52
  requirements:
53
53
  - - '='
54
54
  - !ruby/object:Gem::Version
55
- version: 6.0.2.2
55
+ version: 6.0.3
56
56
  - !ruby/object:Gem::Dependency
57
57
  name: railties
58
58
  requirement: !ruby/object:Gem::Requirement
@@ -167,7 +167,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
167
167
  requirements:
168
168
  - - ">="
169
169
  - !ruby/object:Gem::Version
170
- version: 2.3.0
170
+ version: 2.5.0
171
171
  required_rubygems_version: !ruby/object:Gem::Requirement
172
172
  requirements:
173
173
  - - ">="