angular_rails_csrf 4.2.0 → 4.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/README.md +2 -0
- data/Rakefile +1 -2
- data/lib/angular_rails_csrf/concern.rb +1 -5
- data/lib/angular_rails_csrf/version.rb +1 -1
- data/test/angular_rails_csrf_test.rb +52 -53
- data/test/dummy/log/test.log +762 -0
- metadata +5 -5
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 9e43d5d53174346803640b31332eb2b531bfbcf348551eadbd2d799ab302c89f
|
4
|
+
data.tar.gz: 125aedeb7028a2a4052d2fe82430d603b86a344b2fec566eed77d1ed66828370
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 91f040a88da0b98f23c1a1d322c2a4d54c9bb4b2446f7305dcb035c25e931d59388489efd70216c5deb26a3e4bdf178c8beead059980b68923ece2f3a7c10907
|
7
|
+
data.tar.gz: bb1ebd352de7af530639a662d90714ee96cd0f417edacb722db987db3950719e9e2000fb2d27c44f037d9106502b217cb1dae28b4222becf476bb5546d03bcee
|
data/README.md
CHANGED
@@ -80,6 +80,8 @@ end
|
|
80
80
|
|
81
81
|
**NOTE**: When using `config.angular_rails_csrf_same_site = :none`, this gem automatically sets the cookie to `Secure` (`config.angular_rails_csrf_secure = true`) to comply with [the specifications](https://tools.ietf.org/html/draft-west-cookie-incrementalism-00).
|
82
82
|
|
83
|
+
Please note that [Safari is known to have issues](https://bugs.webkit.org/show_bug.cgi?id=198181) with SameSite attribute set to `:none`.
|
84
|
+
|
83
85
|
### Exclusions
|
84
86
|
|
85
87
|
Sometimes you will want to skip setting the XSRF token for certain controllers (for example, when using SSE or ActionCable, as discussed [here](https://github.com/jsanders/angular_rails_csrf/issues/7)):
|
data/Rakefile
CHANGED
@@ -28,11 +28,7 @@ module AngularRailsCsrf
|
|
28
28
|
end
|
29
29
|
|
30
30
|
def verified_request?
|
31
|
-
|
32
|
-
super || valid_authenticity_token?(session, request.headers['X-XSRF-TOKEN'])
|
33
|
-
else
|
34
|
-
super || form_authenticity_token == request.headers['X-XSRF-TOKEN']
|
35
|
-
end
|
31
|
+
super || valid_authenticity_token?(session, request.headers['X-XSRF-TOKEN'])
|
36
32
|
end
|
37
33
|
|
38
34
|
private
|
@@ -31,44 +31,49 @@ class AngularRailsCsrfTest < ActionController::TestCase
|
|
31
31
|
assert_response :success
|
32
32
|
end
|
33
33
|
|
34
|
-
test '
|
35
|
-
|
36
|
-
|
37
|
-
|
38
|
-
|
39
|
-
|
34
|
+
test 'csrf-cookie is not set if exclusion is enabled' do
|
35
|
+
refute @controller.respond_to?(:__exclude_xsrf_token_cookie?)
|
36
|
+
@controller.class_eval { exclude_xsrf_token_cookie }
|
37
|
+
get :index
|
38
|
+
assert_valid_cookie present: false
|
39
|
+
assert @controller.__exclude_xsrf_token_cookie?
|
40
|
+
assert_response :success
|
41
|
+
end
|
40
42
|
|
41
|
-
|
42
|
-
|
43
|
-
|
44
|
-
|
45
|
-
ensure
|
46
|
-
config.instance_eval('undef :angular_rails_csrf_domain', __FILE__, __LINE__)
|
43
|
+
test 'the domain is used if present' do
|
44
|
+
config = Rails.application.config
|
45
|
+
def config.angular_rails_csrf_domain
|
46
|
+
:all
|
47
47
|
end
|
48
|
+
|
49
|
+
get :index
|
50
|
+
assert @response.headers['Set-Cookie'].include?('.test.host')
|
51
|
+
assert_valid_cookie
|
52
|
+
assert_response :success
|
53
|
+
ensure
|
54
|
+
config.instance_eval('undef :angular_rails_csrf_domain', __FILE__, __LINE__)
|
48
55
|
end
|
49
56
|
|
50
57
|
test 'the secure flag is set if configured' do
|
51
|
-
|
52
|
-
@request.headers['HTTPS'] = 'on'
|
58
|
+
@request.headers['HTTPS'] = 'on'
|
53
59
|
|
54
|
-
|
55
|
-
|
60
|
+
config = Rails.application.config
|
61
|
+
config.define_singleton_method(:angular_rails_csrf_secure) { true }
|
56
62
|
|
57
|
-
|
58
|
-
|
59
|
-
|
60
|
-
|
61
|
-
|
62
|
-
|
63
|
-
|
64
|
-
end
|
63
|
+
get :index
|
64
|
+
assert @response.headers['Set-Cookie'].include?('secure')
|
65
|
+
assert_valid_cookie
|
66
|
+
assert_response :success
|
67
|
+
ensure
|
68
|
+
@request.headers['HTTPS'] = nil
|
69
|
+
config.instance_eval('undef :angular_rails_csrf_secure', __FILE__, __LINE__)
|
65
70
|
end
|
66
71
|
|
67
72
|
test 'a custom name is used if present' do
|
68
73
|
use_custom_cookie_name do
|
69
74
|
get :index
|
70
75
|
assert @response.headers['Set-Cookie'].include?('CUSTOM-COOKIE-NAME')
|
71
|
-
assert_valid_cookie
|
76
|
+
assert_valid_cookie name: 'CUSTOM-COOKIE-NAME'
|
72
77
|
assert_response :success
|
73
78
|
end
|
74
79
|
end
|
@@ -81,34 +86,30 @@ class AngularRailsCsrfTest < ActionController::TestCase
|
|
81
86
|
end
|
82
87
|
|
83
88
|
test 'same_site can be configured' do
|
84
|
-
|
85
|
-
|
86
|
-
config.define_singleton_method(:angular_rails_csrf_same_site) { :strict }
|
89
|
+
config = Rails.application.config
|
90
|
+
config.define_singleton_method(:angular_rails_csrf_same_site) { :strict }
|
87
91
|
|
88
|
-
|
89
|
-
|
90
|
-
|
91
|
-
|
92
|
-
|
93
|
-
|
94
|
-
end
|
92
|
+
get :index
|
93
|
+
assert @response.headers['Set-Cookie'].include?('SameSite=Strict')
|
94
|
+
assert_valid_cookie
|
95
|
+
assert_response :success
|
96
|
+
ensure
|
97
|
+
config.instance_eval('undef :angular_rails_csrf_same_site', __FILE__, __LINE__)
|
95
98
|
end
|
96
99
|
|
97
100
|
test 'secure is set automatically when same_site is set to none' do
|
98
|
-
|
99
|
-
@request.headers['HTTPS'] = 'on'
|
101
|
+
@request.headers['HTTPS'] = 'on'
|
100
102
|
|
101
|
-
|
102
|
-
|
103
|
+
config = Rails.application.config
|
104
|
+
config.define_singleton_method(:angular_rails_csrf_same_site) { :none }
|
103
105
|
|
104
|
-
|
105
|
-
|
106
|
-
|
107
|
-
|
108
|
-
|
109
|
-
|
110
|
-
|
111
|
-
end
|
106
|
+
get :index
|
107
|
+
assert @response.headers['Set-Cookie'].include?('SameSite=None')
|
108
|
+
assert @response.headers['Set-Cookie'].include?('secure')
|
109
|
+
assert_valid_cookie
|
110
|
+
assert_response :success
|
111
|
+
ensure
|
112
|
+
config.instance_eval('undef :angular_rails_csrf_same_site', __FILE__, __LINE__)
|
112
113
|
end
|
113
114
|
|
114
115
|
private
|
@@ -119,12 +120,10 @@ class AngularRailsCsrfTest < ActionController::TestCase
|
|
119
120
|
@request.headers['X-XSRF-TOKEN'] = value
|
120
121
|
end
|
121
122
|
|
122
|
-
def assert_valid_cookie(name
|
123
|
-
|
124
|
-
|
125
|
-
|
126
|
-
assert_equal @controller.send(:form_authenticity_token), cookies['XSRF-TOKEN']
|
127
|
-
end
|
123
|
+
def assert_valid_cookie(name: 'XSRF-TOKEN', present: true)
|
124
|
+
cookie_valid = @controller.send(:valid_authenticity_token?, session, cookies[name])
|
125
|
+
cookie_valid = !cookie_valid unless present
|
126
|
+
assert cookie_valid
|
128
127
|
end
|
129
128
|
|
130
129
|
def use_custom_cookie_name
|
data/test/dummy/log/test.log
CHANGED
@@ -857,3 +857,765 @@ AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
|
857
857
|
-----------------------------------------------------------------------------
|
858
858
|
Processing by ApplicationController#create as HTML
|
859
859
|
Completed 200 OK in 0ms (Allocations: 125)
|
860
|
+
----------------------------------------------------------------------------
|
861
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
862
|
+
----------------------------------------------------------------------------
|
863
|
+
Processing by ExclusionsController#index as HTML
|
864
|
+
Completed 200 OK in 0ms (Allocations: 128)
|
865
|
+
----------------------------------
|
866
|
+
AngularRailsCsrfTest: test_exclude
|
867
|
+
----------------------------------
|
868
|
+
Processing by ApplicationController#index as HTML
|
869
|
+
Completed 200 OK in 0ms (Allocations: 74)
|
870
|
+
-------------------------------------------------------------------------------------
|
871
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
872
|
+
-------------------------------------------------------------------------------------
|
873
|
+
Processing by ApplicationController#create as HTML
|
874
|
+
Can't verify CSRF token authenticity.
|
875
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 157)
|
876
|
+
-----------------------------------------------------------
|
877
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
878
|
+
-----------------------------------------------------------
|
879
|
+
Processing by ApplicationController#index as HTML
|
880
|
+
Completed 200 OK in 0ms (Allocations: 129)
|
881
|
+
---------------------------------------------------------------
|
882
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
883
|
+
---------------------------------------------------------------
|
884
|
+
Processing by ApplicationController#index as HTML
|
885
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
886
|
+
----------------------------------
|
887
|
+
AngularRailsCsrfTest: test_exclude
|
888
|
+
----------------------------------
|
889
|
+
Processing by ApplicationController#index as HTML
|
890
|
+
Completed 200 OK in 0ms (Allocations: 74)
|
891
|
+
--------------------------------------------------------
|
892
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
893
|
+
--------------------------------------------------------
|
894
|
+
Processing by ApplicationController#index as HTML
|
895
|
+
Completed 200 OK in 0ms (Allocations: 117)
|
896
|
+
------------------------------------------------------
|
897
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
898
|
+
------------------------------------------------------
|
899
|
+
Processing by ApplicationController#index as HTML
|
900
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
901
|
+
--------------------------------------------------------------------------------------------------------
|
902
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
903
|
+
--------------------------------------------------------------------------------------------------------
|
904
|
+
Processing by ApplicationController#index as HTML
|
905
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
906
|
+
-----------------------------------------------------------------------------------------------------
|
907
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
908
|
+
-----------------------------------------------------------------------------------------------------
|
909
|
+
Processing by ApplicationController#create as HTML
|
910
|
+
Can't verify CSRF token authenticity.
|
911
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
|
912
|
+
-------------------------------------------------------------
|
913
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
914
|
+
-------------------------------------------------------------
|
915
|
+
Processing by ApplicationController#index as HTML
|
916
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
917
|
+
------------------------------------------------------------------------------------
|
918
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
919
|
+
------------------------------------------------------------------------------------
|
920
|
+
Processing by ApplicationController#index as HTML
|
921
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
922
|
+
-----------------------------------------------------------------------------
|
923
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
924
|
+
-----------------------------------------------------------------------------
|
925
|
+
Processing by ApplicationController#create as HTML
|
926
|
+
Completed 200 OK in 0ms (Allocations: 125)
|
927
|
+
----------------------------------------------------------------------------
|
928
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
929
|
+
----------------------------------------------------------------------------
|
930
|
+
Processing by ExclusionsController#index as HTML
|
931
|
+
Completed 200 OK in 0ms (Allocations: 71)
|
932
|
+
----------------------------------------------------------------------------
|
933
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
934
|
+
----------------------------------------------------------------------------
|
935
|
+
Processing by ExclusionsController#index as HTML
|
936
|
+
Completed 200 OK in 0ms (Allocations: 128)
|
937
|
+
---------------------------------------------------------------
|
938
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
939
|
+
---------------------------------------------------------------
|
940
|
+
Processing by ApplicationController#index as HTML
|
941
|
+
Completed 200 OK in 0ms (Allocations: 111)
|
942
|
+
-------------------------------------------------------------------------------------
|
943
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
944
|
+
-------------------------------------------------------------------------------------
|
945
|
+
Processing by ApplicationController#create as HTML
|
946
|
+
Can't verify CSRF token authenticity.
|
947
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 111)
|
948
|
+
------------------------------------------------------------------------------------
|
949
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
950
|
+
------------------------------------------------------------------------------------
|
951
|
+
Processing by ApplicationController#index as HTML
|
952
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
953
|
+
-----------------------------------------------------------------------------------------------------
|
954
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
955
|
+
-----------------------------------------------------------------------------------------------------
|
956
|
+
Processing by ApplicationController#create as HTML
|
957
|
+
Can't verify CSRF token authenticity.
|
958
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
|
959
|
+
-----------------------------------------------------------------------------
|
960
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
961
|
+
-----------------------------------------------------------------------------
|
962
|
+
Processing by ApplicationController#create as HTML
|
963
|
+
Completed 200 OK in 0ms (Allocations: 125)
|
964
|
+
-----------------------------------------------------------
|
965
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
966
|
+
-----------------------------------------------------------
|
967
|
+
Processing by ApplicationController#index as HTML
|
968
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
969
|
+
--------------------------------------------------------
|
970
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
971
|
+
--------------------------------------------------------
|
972
|
+
Processing by ApplicationController#index as HTML
|
973
|
+
Completed 200 OK in 0ms (Allocations: 117)
|
974
|
+
----------------------------------
|
975
|
+
AngularRailsCsrfTest: test_exclude
|
976
|
+
----------------------------------
|
977
|
+
Processing by ApplicationController#index as HTML
|
978
|
+
Completed 200 OK in 0ms (Allocations: 74)
|
979
|
+
-------------------------------------------------------------
|
980
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
981
|
+
-------------------------------------------------------------
|
982
|
+
Processing by ApplicationController#index as HTML
|
983
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
984
|
+
--------------------------------------------------------------------------------------------------------
|
985
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
986
|
+
--------------------------------------------------------------------------------------------------------
|
987
|
+
Processing by ApplicationController#index as HTML
|
988
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
989
|
+
------------------------------------------------------
|
990
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
991
|
+
------------------------------------------------------
|
992
|
+
Processing by ApplicationController#index as HTML
|
993
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
994
|
+
-----------------------------------------------------------------------------------------------------
|
995
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
996
|
+
-----------------------------------------------------------------------------------------------------
|
997
|
+
Processing by ApplicationController#create as HTML
|
998
|
+
Can't verify CSRF token authenticity.
|
999
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 162)
|
1000
|
+
-----------------------------------------------------------
|
1001
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
1002
|
+
-----------------------------------------------------------
|
1003
|
+
Processing by ApplicationController#index as HTML
|
1004
|
+
Completed 200 OK in 0ms (Allocations: 129)
|
1005
|
+
-----------------------------------------------------------------------------
|
1006
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
1007
|
+
-----------------------------------------------------------------------------
|
1008
|
+
Processing by ApplicationController#create as HTML
|
1009
|
+
Completed 200 OK in 0ms (Allocations: 125)
|
1010
|
+
-------------------------------------------------------------
|
1011
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
1012
|
+
-------------------------------------------------------------
|
1013
|
+
Processing by ApplicationController#index as HTML
|
1014
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1015
|
+
------------------------------------------------------------------------------------
|
1016
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
1017
|
+
------------------------------------------------------------------------------------
|
1018
|
+
Processing by ApplicationController#index as HTML
|
1019
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1020
|
+
---------------------------------------------------------------
|
1021
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
1022
|
+
---------------------------------------------------------------
|
1023
|
+
Processing by ApplicationController#index as HTML
|
1024
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1025
|
+
------------------------------------------------------
|
1026
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
1027
|
+
------------------------------------------------------
|
1028
|
+
Processing by ApplicationController#index as HTML
|
1029
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1030
|
+
--------------------------------------------------------------------------------------------------------
|
1031
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
1032
|
+
--------------------------------------------------------------------------------------------------------
|
1033
|
+
Processing by ApplicationController#index as HTML
|
1034
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1035
|
+
----------------------------------
|
1036
|
+
AngularRailsCsrfTest: test_exclude
|
1037
|
+
----------------------------------
|
1038
|
+
Processing by ApplicationController#index as HTML
|
1039
|
+
Completed 200 OK in 0ms (Allocations: 74)
|
1040
|
+
-------------------------------------------------------------------------------------
|
1041
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
1042
|
+
-------------------------------------------------------------------------------------
|
1043
|
+
Processing by ApplicationController#create as HTML
|
1044
|
+
Can't verify CSRF token authenticity.
|
1045
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 98)
|
1046
|
+
--------------------------------------------------------
|
1047
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
1048
|
+
--------------------------------------------------------
|
1049
|
+
Processing by ApplicationController#index as HTML
|
1050
|
+
Completed 200 OK in 0ms (Allocations: 117)
|
1051
|
+
----------------------------------------------------------------------------
|
1052
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
1053
|
+
----------------------------------------------------------------------------
|
1054
|
+
Processing by ExclusionsController#index as HTML
|
1055
|
+
Completed 200 OK in 0ms (Allocations: 71)
|
1056
|
+
----------------------------------------------------------------------------
|
1057
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
1058
|
+
----------------------------------------------------------------------------
|
1059
|
+
Processing by ExclusionsController#index as HTML
|
1060
|
+
Completed 200 OK in 0ms (Allocations: 128)
|
1061
|
+
-----------------------------------------------------------------------------------------------------
|
1062
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
1063
|
+
-----------------------------------------------------------------------------------------------------
|
1064
|
+
Processing by ApplicationController#create as HTML
|
1065
|
+
Can't verify CSRF token authenticity.
|
1066
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 117)
|
1067
|
+
-------------------------------------------------------------------------
|
1068
|
+
AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
|
1069
|
+
-------------------------------------------------------------------------
|
1070
|
+
Processing by ApplicationController#index as HTML
|
1071
|
+
Completed 200 OK in 0ms (Allocations: 74)
|
1072
|
+
--------------------------------------------------------
|
1073
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
1074
|
+
--------------------------------------------------------
|
1075
|
+
Processing by ApplicationController#index as HTML
|
1076
|
+
Completed 200 OK in 0ms (Allocations: 122)
|
1077
|
+
------------------------------------------------------------------------------------
|
1078
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
1079
|
+
------------------------------------------------------------------------------------
|
1080
|
+
Processing by ApplicationController#index as HTML
|
1081
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1082
|
+
------------------------------------------------------
|
1083
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
1084
|
+
------------------------------------------------------
|
1085
|
+
Processing by ApplicationController#index as HTML
|
1086
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1087
|
+
--------------------------------------------------------------------------------------------------------
|
1088
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
1089
|
+
--------------------------------------------------------------------------------------------------------
|
1090
|
+
Processing by ApplicationController#index as HTML
|
1091
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1092
|
+
-----------------------------------------------------------
|
1093
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
1094
|
+
-----------------------------------------------------------
|
1095
|
+
Processing by ApplicationController#index as HTML
|
1096
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1097
|
+
---------------------------------------------------------------
|
1098
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
1099
|
+
---------------------------------------------------------------
|
1100
|
+
Processing by ApplicationController#index as HTML
|
1101
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1102
|
+
-----------------------------------------------------------------------------
|
1103
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
1104
|
+
-----------------------------------------------------------------------------
|
1105
|
+
Processing by ApplicationController#create as HTML
|
1106
|
+
Completed 200 OK in 0ms (Allocations: 125)
|
1107
|
+
-------------------------------------------------------------------------------------
|
1108
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
1109
|
+
-------------------------------------------------------------------------------------
|
1110
|
+
Processing by ApplicationController#create as HTML
|
1111
|
+
Can't verify CSRF token authenticity.
|
1112
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 98)
|
1113
|
+
-------------------------------------------------------------
|
1114
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
1115
|
+
-------------------------------------------------------------
|
1116
|
+
Processing by ApplicationController#index as HTML
|
1117
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1118
|
+
------------------------------------------------------
|
1119
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
1120
|
+
------------------------------------------------------
|
1121
|
+
Processing by ApplicationController#index as HTML
|
1122
|
+
Completed 200 OK in 0ms (Allocations: 174)
|
1123
|
+
-------------------------------------------------------------------------
|
1124
|
+
AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
|
1125
|
+
-------------------------------------------------------------------------
|
1126
|
+
Processing by ApplicationController#index as HTML
|
1127
|
+
Completed 200 OK in 0ms (Allocations: 74)
|
1128
|
+
-----------------------------------------------------------
|
1129
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
1130
|
+
-----------------------------------------------------------
|
1131
|
+
Processing by ApplicationController#index as HTML
|
1132
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1133
|
+
--------------------------------------------------------------------------------------------------------
|
1134
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
1135
|
+
--------------------------------------------------------------------------------------------------------
|
1136
|
+
Processing by ApplicationController#index as HTML
|
1137
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1138
|
+
-------------------------------------------------------------
|
1139
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
1140
|
+
-------------------------------------------------------------
|
1141
|
+
Processing by ApplicationController#index as HTML
|
1142
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1143
|
+
------------------------------------------------------------------------------------
|
1144
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
1145
|
+
------------------------------------------------------------------------------------
|
1146
|
+
Processing by ApplicationController#index as HTML
|
1147
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1148
|
+
-----------------------------------------------------------------------------
|
1149
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
1150
|
+
-----------------------------------------------------------------------------
|
1151
|
+
Processing by ApplicationController#create as HTML
|
1152
|
+
Completed 200 OK in 0ms (Allocations: 131)
|
1153
|
+
-----------------------------------------------------------------------------------------------------
|
1154
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
1155
|
+
-----------------------------------------------------------------------------------------------------
|
1156
|
+
Processing by ApplicationController#create as HTML
|
1157
|
+
Can't verify CSRF token authenticity.
|
1158
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 110)
|
1159
|
+
-------------------------------------------------------------------------------------
|
1160
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
1161
|
+
-------------------------------------------------------------------------------------
|
1162
|
+
Processing by ApplicationController#create as HTML
|
1163
|
+
Can't verify CSRF token authenticity.
|
1164
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 98)
|
1165
|
+
---------------------------------------------------------------
|
1166
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
1167
|
+
---------------------------------------------------------------
|
1168
|
+
Processing by ApplicationController#index as HTML
|
1169
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1170
|
+
--------------------------------------------------------
|
1171
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
1172
|
+
--------------------------------------------------------
|
1173
|
+
Processing by ApplicationController#index as HTML
|
1174
|
+
Completed 200 OK in 0ms (Allocations: 117)
|
1175
|
+
----------------------------------------------------------------------------
|
1176
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
1177
|
+
----------------------------------------------------------------------------
|
1178
|
+
Processing by ExclusionsController#index as HTML
|
1179
|
+
Completed 200 OK in 0ms (Allocations: 71)
|
1180
|
+
--------------------------------------------------------------------------------------------------------
|
1181
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
1182
|
+
--------------------------------------------------------------------------------------------------------
|
1183
|
+
Processing by ApplicationController#index as HTML
|
1184
|
+
Completed 200 OK in 0ms (Allocations: 174)
|
1185
|
+
------------------------------------------------------
|
1186
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
1187
|
+
------------------------------------------------------
|
1188
|
+
Processing by ApplicationController#index as HTML
|
1189
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1190
|
+
--------------------------------------------------------
|
1191
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
1192
|
+
--------------------------------------------------------
|
1193
|
+
Processing by ApplicationController#index as HTML
|
1194
|
+
Completed 200 OK in 0ms (Allocations: 117)
|
1195
|
+
-------------------------------------------------------------------------------------
|
1196
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
1197
|
+
-------------------------------------------------------------------------------------
|
1198
|
+
Processing by ApplicationController#create as HTML
|
1199
|
+
Can't verify CSRF token authenticity.
|
1200
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 111)
|
1201
|
+
-----------------------------------------------------------
|
1202
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
1203
|
+
-----------------------------------------------------------
|
1204
|
+
Processing by ApplicationController#index as HTML
|
1205
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1206
|
+
---------------------------------------------------------------
|
1207
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
1208
|
+
---------------------------------------------------------------
|
1209
|
+
Processing by ApplicationController#index as HTML
|
1210
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1211
|
+
-----------------------------------------------------------------------------------------------------
|
1212
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
1213
|
+
-----------------------------------------------------------------------------------------------------
|
1214
|
+
Processing by ApplicationController#create as HTML
|
1215
|
+
Can't verify CSRF token authenticity.
|
1216
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
|
1217
|
+
-------------------------------------------------------------
|
1218
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
1219
|
+
-------------------------------------------------------------
|
1220
|
+
Processing by ApplicationController#index as HTML
|
1221
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1222
|
+
-------------------------------------------------------------------------
|
1223
|
+
AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
|
1224
|
+
-------------------------------------------------------------------------
|
1225
|
+
Processing by ApplicationController#index as HTML
|
1226
|
+
Completed 200 OK in 0ms (Allocations: 74)
|
1227
|
+
-----------------------------------------------------------------------------
|
1228
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
1229
|
+
-----------------------------------------------------------------------------
|
1230
|
+
Processing by ApplicationController#create as HTML
|
1231
|
+
Completed 200 OK in 0ms (Allocations: 125)
|
1232
|
+
------------------------------------------------------------------------------------
|
1233
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
1234
|
+
------------------------------------------------------------------------------------
|
1235
|
+
Processing by ApplicationController#index as HTML
|
1236
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1237
|
+
----------------------------------------------------------------------------
|
1238
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
1239
|
+
----------------------------------------------------------------------------
|
1240
|
+
Processing by ExclusionsController#index as HTML
|
1241
|
+
Completed 200 OK in 0ms (Allocations: 71)
|
1242
|
+
--------------------------------------------------------------------------------------------------------
|
1243
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
1244
|
+
--------------------------------------------------------------------------------------------------------
|
1245
|
+
Processing by ApplicationController#index as HTML
|
1246
|
+
Completed 200 OK in 0ms (Allocations: 174)
|
1247
|
+
-------------------------------------------------------------------------
|
1248
|
+
AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
|
1249
|
+
-------------------------------------------------------------------------
|
1250
|
+
Processing by ApplicationController#index as HTML
|
1251
|
+
Completed 200 OK in 0ms (Allocations: 74)
|
1252
|
+
-------------------------------------------------------------
|
1253
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
1254
|
+
-------------------------------------------------------------
|
1255
|
+
Processing by ApplicationController#index as HTML
|
1256
|
+
Completed 200 OK in 0ms (Allocations: 174)
|
1257
|
+
---------------------------------------------------------------
|
1258
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
1259
|
+
---------------------------------------------------------------
|
1260
|
+
Processing by ApplicationController#index as HTML
|
1261
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1262
|
+
-------------------------------------------------------------------------
|
1263
|
+
AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
|
1264
|
+
-------------------------------------------------------------------------
|
1265
|
+
--------------------------------------------------------
|
1266
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
1267
|
+
--------------------------------------------------------
|
1268
|
+
Processing by ApplicationController#index as HTML
|
1269
|
+
Completed 200 OK in 0ms (Allocations: 117)
|
1270
|
+
-----------------------------------------------------------------------------
|
1271
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
1272
|
+
-----------------------------------------------------------------------------
|
1273
|
+
Processing by ApplicationController#create as HTML
|
1274
|
+
Completed 200 OK in 0ms (Allocations: 131)
|
1275
|
+
-----------------------------------------------------------------------------------------------------
|
1276
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
1277
|
+
-----------------------------------------------------------------------------------------------------
|
1278
|
+
Processing by ApplicationController#create as HTML
|
1279
|
+
Can't verify CSRF token authenticity.
|
1280
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 110)
|
1281
|
+
--------------------------------------------------------------------------------------------------------
|
1282
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
1283
|
+
--------------------------------------------------------------------------------------------------------
|
1284
|
+
Processing by ApplicationController#index as HTML
|
1285
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1286
|
+
-----------------------------------------------------------
|
1287
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
1288
|
+
-----------------------------------------------------------
|
1289
|
+
Processing by ApplicationController#index as HTML
|
1290
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1291
|
+
-------------------------------------------------------------------------------------
|
1292
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
1293
|
+
-------------------------------------------------------------------------------------
|
1294
|
+
Processing by ApplicationController#create as HTML
|
1295
|
+
Can't verify CSRF token authenticity.
|
1296
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 98)
|
1297
|
+
------------------------------------------------------
|
1298
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
1299
|
+
------------------------------------------------------
|
1300
|
+
Processing by ApplicationController#index as HTML
|
1301
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1302
|
+
------------------------------------------------------------------------------------
|
1303
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
1304
|
+
------------------------------------------------------------------------------------
|
1305
|
+
Processing by ApplicationController#index as HTML
|
1306
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1307
|
+
----------------------------------------------------------------------------
|
1308
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
1309
|
+
----------------------------------------------------------------------------
|
1310
|
+
Processing by ExclusionsController#index as HTML
|
1311
|
+
Completed 200 OK in 0ms (Allocations: 71)
|
1312
|
+
----------------------------------------------------------------------------
|
1313
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
1314
|
+
----------------------------------------------------------------------------
|
1315
|
+
Processing by ExclusionsController#index as HTML
|
1316
|
+
Completed 200 OK in 0ms (Allocations: 128)
|
1317
|
+
--------------------------------------------------------
|
1318
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
1319
|
+
--------------------------------------------------------
|
1320
|
+
Processing by ApplicationController#index as HTML
|
1321
|
+
Completed 200 OK in 0ms (Allocations: 122)
|
1322
|
+
-----------------------------------------------------------
|
1323
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
1324
|
+
-----------------------------------------------------------
|
1325
|
+
Processing by ApplicationController#index as HTML
|
1326
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1327
|
+
------------------------------------------------------
|
1328
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
1329
|
+
------------------------------------------------------
|
1330
|
+
Processing by ApplicationController#index as HTML
|
1331
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1332
|
+
-------------------------------------------------------------------------------------
|
1333
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
1334
|
+
-------------------------------------------------------------------------------------
|
1335
|
+
Processing by ApplicationController#create as HTML
|
1336
|
+
Can't verify CSRF token authenticity.
|
1337
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 111)
|
1338
|
+
-------------------------------------------------------------
|
1339
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
1340
|
+
-------------------------------------------------------------
|
1341
|
+
Processing by ApplicationController#index as HTML
|
1342
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1343
|
+
-----------------------------------------------------------------------------
|
1344
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
1345
|
+
-----------------------------------------------------------------------------
|
1346
|
+
Processing by ApplicationController#create as HTML
|
1347
|
+
Completed 200 OK in 0ms (Allocations: 125)
|
1348
|
+
------------------------------------------------------------------------------------
|
1349
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
1350
|
+
------------------------------------------------------------------------------------
|
1351
|
+
Processing by ApplicationController#index as HTML
|
1352
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1353
|
+
---------------------------------------------------------------
|
1354
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
1355
|
+
---------------------------------------------------------------
|
1356
|
+
Processing by ApplicationController#index as HTML
|
1357
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1358
|
+
-------------------------------------------------------------------------
|
1359
|
+
AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
|
1360
|
+
-------------------------------------------------------------------------
|
1361
|
+
Processing by ApplicationController#index as HTML
|
1362
|
+
Completed 200 OK in 0ms (Allocations: 74)
|
1363
|
+
--------------------------------------------------------------------------------------------------------
|
1364
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
1365
|
+
--------------------------------------------------------------------------------------------------------
|
1366
|
+
Processing by ApplicationController#index as HTML
|
1367
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1368
|
+
-----------------------------------------------------------------------------------------------------
|
1369
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
1370
|
+
-----------------------------------------------------------------------------------------------------
|
1371
|
+
Processing by ApplicationController#create as HTML
|
1372
|
+
Can't verify CSRF token authenticity.
|
1373
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
|
1374
|
+
----------------------------------------------------------------------------
|
1375
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
1376
|
+
----------------------------------------------------------------------------
|
1377
|
+
Processing by ExclusionsController#index as HTML
|
1378
|
+
Completed 200 OK in 0ms (Allocations: 128)
|
1379
|
+
-------------------------------------------------------------------------------------
|
1380
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
1381
|
+
-------------------------------------------------------------------------------------
|
1382
|
+
Processing by ApplicationController#create as HTML
|
1383
|
+
Can't verify CSRF token authenticity.
|
1384
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 112)
|
1385
|
+
-----------------------------------------------------------------------------
|
1386
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
1387
|
+
-----------------------------------------------------------------------------
|
1388
|
+
Processing by ApplicationController#create as HTML
|
1389
|
+
Completed 200 OK in 0ms (Allocations: 132)
|
1390
|
+
------------------------------------------------------------------------------------
|
1391
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
1392
|
+
------------------------------------------------------------------------------------
|
1393
|
+
Processing by ApplicationController#index as HTML
|
1394
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1395
|
+
--------------------------------------------------------------------------------------------------------
|
1396
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
1397
|
+
--------------------------------------------------------------------------------------------------------
|
1398
|
+
Processing by ApplicationController#index as HTML
|
1399
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1400
|
+
-----------------------------------------------------------
|
1401
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
1402
|
+
-----------------------------------------------------------
|
1403
|
+
Processing by ApplicationController#index as HTML
|
1404
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1405
|
+
--------------------------------------------------------
|
1406
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
1407
|
+
--------------------------------------------------------
|
1408
|
+
Processing by ApplicationController#index as HTML
|
1409
|
+
Completed 200 OK in 0ms (Allocations: 117)
|
1410
|
+
-------------------------------------------------------------
|
1411
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
1412
|
+
-------------------------------------------------------------
|
1413
|
+
Processing by ApplicationController#index as HTML
|
1414
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1415
|
+
-----------------------------------------------------------------------------------------------------
|
1416
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
1417
|
+
-----------------------------------------------------------------------------------------------------
|
1418
|
+
Processing by ApplicationController#create as HTML
|
1419
|
+
Can't verify CSRF token authenticity.
|
1420
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
|
1421
|
+
-------------------------------------------------------------------------
|
1422
|
+
AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
|
1423
|
+
-------------------------------------------------------------------------
|
1424
|
+
Processing by ApplicationController#index as HTML
|
1425
|
+
Completed 200 OK in 0ms (Allocations: 74)
|
1426
|
+
------------------------------------------------------
|
1427
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
1428
|
+
------------------------------------------------------
|
1429
|
+
Processing by ApplicationController#index as HTML
|
1430
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1431
|
+
---------------------------------------------------------------
|
1432
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
1433
|
+
---------------------------------------------------------------
|
1434
|
+
Processing by ApplicationController#index as HTML
|
1435
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1436
|
+
----------------------------------------------------------------------------
|
1437
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
1438
|
+
----------------------------------------------------------------------------
|
1439
|
+
Processing by ExclusionsController#index as HTML
|
1440
|
+
Completed 200 OK in 0ms (Allocations: 128)
|
1441
|
+
------------------------------------------------------
|
1442
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
1443
|
+
------------------------------------------------------
|
1444
|
+
Processing by ApplicationController#index as HTML
|
1445
|
+
Completed 200 OK in 0ms (Allocations: 111)
|
1446
|
+
--------------------------------------------------------
|
1447
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
1448
|
+
--------------------------------------------------------
|
1449
|
+
Processing by ApplicationController#index as HTML
|
1450
|
+
Completed 200 OK in 0ms (Allocations: 117)
|
1451
|
+
-------------------------------------------------------------------------------------
|
1452
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
1453
|
+
-------------------------------------------------------------------------------------
|
1454
|
+
Processing by ApplicationController#create as HTML
|
1455
|
+
Can't verify CSRF token authenticity.
|
1456
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 111)
|
1457
|
+
---------------------------------------------------------------
|
1458
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
1459
|
+
---------------------------------------------------------------
|
1460
|
+
Processing by ApplicationController#index as HTML
|
1461
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1462
|
+
-----------------------------------------------------------------------------------------------------
|
1463
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
1464
|
+
-----------------------------------------------------------------------------------------------------
|
1465
|
+
Processing by ApplicationController#create as HTML
|
1466
|
+
Can't verify CSRF token authenticity.
|
1467
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
|
1468
|
+
-------------------------------------------------------------
|
1469
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
1470
|
+
-------------------------------------------------------------
|
1471
|
+
Processing by ApplicationController#index as HTML
|
1472
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1473
|
+
-------------------------------------------------------------------------
|
1474
|
+
AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
|
1475
|
+
-------------------------------------------------------------------------
|
1476
|
+
Processing by ApplicationController#index as HTML
|
1477
|
+
Completed 200 OK in 0ms (Allocations: 74)
|
1478
|
+
------------------------------------------------------------------------------------
|
1479
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
1480
|
+
------------------------------------------------------------------------------------
|
1481
|
+
Processing by ApplicationController#index as HTML
|
1482
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1483
|
+
-----------------------------------------------------------
|
1484
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
1485
|
+
-----------------------------------------------------------
|
1486
|
+
Processing by ApplicationController#index as HTML
|
1487
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1488
|
+
-----------------------------------------------------------------------------
|
1489
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
1490
|
+
-----------------------------------------------------------------------------
|
1491
|
+
Processing by ApplicationController#create as HTML
|
1492
|
+
Completed 200 OK in 0ms (Allocations: 125)
|
1493
|
+
--------------------------------------------------------------------------------------------------------
|
1494
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
1495
|
+
--------------------------------------------------------------------------------------------------------
|
1496
|
+
Processing by ApplicationController#index as HTML
|
1497
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1498
|
+
----------------------------------------------------------------------------
|
1499
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
1500
|
+
----------------------------------------------------------------------------
|
1501
|
+
Processing by ExclusionsController#index as HTML
|
1502
|
+
Completed 200 OK in 0ms (Allocations: 128)
|
1503
|
+
------------------------------------------------------------------------------------
|
1504
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
1505
|
+
------------------------------------------------------------------------------------
|
1506
|
+
Processing by ApplicationController#index as HTML
|
1507
|
+
Completed 200 OK in 0ms (Allocations: 111)
|
1508
|
+
-----------------------------------------------------------------------------
|
1509
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
1510
|
+
-----------------------------------------------------------------------------
|
1511
|
+
Processing by ApplicationController#create as HTML
|
1512
|
+
Completed 200 OK in 0ms (Allocations: 131)
|
1513
|
+
-----------------------------------------------------------
|
1514
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
1515
|
+
-----------------------------------------------------------
|
1516
|
+
Processing by ApplicationController#index as HTML
|
1517
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1518
|
+
--------------------------------------------------------------------------------------------------------
|
1519
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
1520
|
+
--------------------------------------------------------------------------------------------------------
|
1521
|
+
Processing by ApplicationController#index as HTML
|
1522
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1523
|
+
-------------------------------------------------------------------------
|
1524
|
+
AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
|
1525
|
+
-------------------------------------------------------------------------
|
1526
|
+
Processing by ApplicationController#index as HTML
|
1527
|
+
Completed 200 OK in 0ms (Allocations: 74)
|
1528
|
+
---------------------------------------------------------------
|
1529
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
1530
|
+
---------------------------------------------------------------
|
1531
|
+
Processing by ApplicationController#index as HTML
|
1532
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1533
|
+
-------------------------------------------------------------------------------------
|
1534
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
1535
|
+
-------------------------------------------------------------------------------------
|
1536
|
+
Processing by ApplicationController#create as HTML
|
1537
|
+
Can't verify CSRF token authenticity.
|
1538
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 105)
|
1539
|
+
-----------------------------------------------------------------------------------------------------
|
1540
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
1541
|
+
-----------------------------------------------------------------------------------------------------
|
1542
|
+
Processing by ApplicationController#create as HTML
|
1543
|
+
Can't verify CSRF token authenticity.
|
1544
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
|
1545
|
+
--------------------------------------------------------
|
1546
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
1547
|
+
--------------------------------------------------------
|
1548
|
+
Processing by ApplicationController#index as HTML
|
1549
|
+
Completed 200 OK in 0ms (Allocations: 117)
|
1550
|
+
-------------------------------------------------------------
|
1551
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
1552
|
+
-------------------------------------------------------------
|
1553
|
+
Processing by ApplicationController#index as HTML
|
1554
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1555
|
+
------------------------------------------------------
|
1556
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
1557
|
+
------------------------------------------------------
|
1558
|
+
Processing by ApplicationController#index as HTML
|
1559
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1560
|
+
------------------------------------------------------
|
1561
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
1562
|
+
------------------------------------------------------
|
1563
|
+
Processing by ApplicationController#index as HTML
|
1564
|
+
Completed 200 OK in 0ms (Allocations: 174)
|
1565
|
+
-------------------------------------------------------------------------------------
|
1566
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
1567
|
+
-------------------------------------------------------------------------------------
|
1568
|
+
Processing by ApplicationController#create as HTML
|
1569
|
+
Can't verify CSRF token authenticity.
|
1570
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 111)
|
1571
|
+
-----------------------------------------------------------------------------
|
1572
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
1573
|
+
-----------------------------------------------------------------------------
|
1574
|
+
Processing by ApplicationController#create as HTML
|
1575
|
+
Completed 200 OK in 0ms (Allocations: 125)
|
1576
|
+
-----------------------------------------------------------------------------------------------------
|
1577
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
1578
|
+
-----------------------------------------------------------------------------------------------------
|
1579
|
+
Processing by ApplicationController#create as HTML
|
1580
|
+
Can't verify CSRF token authenticity.
|
1581
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
|
1582
|
+
-------------------------------------------------------------
|
1583
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
1584
|
+
-------------------------------------------------------------
|
1585
|
+
Processing by ApplicationController#index as HTML
|
1586
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1587
|
+
---------------------------------------------------------------
|
1588
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
1589
|
+
---------------------------------------------------------------
|
1590
|
+
Processing by ApplicationController#index as HTML
|
1591
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1592
|
+
-------------------------------------------------------------------------
|
1593
|
+
AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
|
1594
|
+
-------------------------------------------------------------------------
|
1595
|
+
Processing by ApplicationController#index as HTML
|
1596
|
+
Completed 200 OK in 0ms (Allocations: 74)
|
1597
|
+
-----------------------------------------------------------
|
1598
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
1599
|
+
-----------------------------------------------------------
|
1600
|
+
Processing by ApplicationController#index as HTML
|
1601
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1602
|
+
------------------------------------------------------------------------------------
|
1603
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
1604
|
+
------------------------------------------------------------------------------------
|
1605
|
+
Processing by ApplicationController#index as HTML
|
1606
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1607
|
+
--------------------------------------------------------
|
1608
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
1609
|
+
--------------------------------------------------------
|
1610
|
+
Processing by ApplicationController#index as HTML
|
1611
|
+
Completed 200 OK in 0ms (Allocations: 117)
|
1612
|
+
--------------------------------------------------------------------------------------------------------
|
1613
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
1614
|
+
--------------------------------------------------------------------------------------------------------
|
1615
|
+
Processing by ApplicationController#index as HTML
|
1616
|
+
Completed 200 OK in 0ms (Allocations: 106)
|
1617
|
+
----------------------------------------------------------------------------
|
1618
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
1619
|
+
----------------------------------------------------------------------------
|
1620
|
+
Processing by ExclusionsController#index as HTML
|
1621
|
+
Completed 200 OK in 0ms (Allocations: 71)
|
metadata
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: angular_rails_csrf
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 4.
|
4
|
+
version: 4.3.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- James Sanders
|
@@ -9,7 +9,7 @@ authors:
|
|
9
9
|
autorequire:
|
10
10
|
bindir: bin
|
11
11
|
cert_chain: []
|
12
|
-
date: 2020-
|
12
|
+
date: 2020-05-18 00:00:00.000000000 Z
|
13
13
|
dependencies:
|
14
14
|
- !ruby/object:Gem::Dependency
|
15
15
|
name: rake
|
@@ -45,14 +45,14 @@ dependencies:
|
|
45
45
|
requirements:
|
46
46
|
- - '='
|
47
47
|
- !ruby/object:Gem::Version
|
48
|
-
version: 6.0.
|
48
|
+
version: 6.0.3
|
49
49
|
type: :development
|
50
50
|
prerelease: false
|
51
51
|
version_requirements: !ruby/object:Gem::Requirement
|
52
52
|
requirements:
|
53
53
|
- - '='
|
54
54
|
- !ruby/object:Gem::Version
|
55
|
-
version: 6.0.
|
55
|
+
version: 6.0.3
|
56
56
|
- !ruby/object:Gem::Dependency
|
57
57
|
name: railties
|
58
58
|
requirement: !ruby/object:Gem::Requirement
|
@@ -167,7 +167,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
|
|
167
167
|
requirements:
|
168
168
|
- - ">="
|
169
169
|
- !ruby/object:Gem::Version
|
170
|
-
version: 2.
|
170
|
+
version: 2.5.0
|
171
171
|
required_rubygems_version: !ruby/object:Gem::Requirement
|
172
172
|
requirements:
|
173
173
|
- - ">="
|