angular_rails_csrf 4.3.0 → 4.4.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/lib/angular_rails_csrf/concern.rb +1 -1
- data/lib/angular_rails_csrf/version.rb +1 -1
- data/test/angular_rails_csrf_skip_test.rb +14 -0
- data/test/dummy/app/controllers/api_controller.rb +7 -0
- data/test/dummy/config.ru +1 -1
- data/test/dummy/config/routes.rb +2 -0
- data/test/dummy/log/test.log +315 -0
- metadata +9 -5
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: f310f1cd6d8278d5b0a669bb7123a802b68cfdcda1ec443de09b85a757c10eb3
|
|
4
|
+
data.tar.gz: 4eaec5f2dcf567dd0b8cf2c7374a0a1b95c965f3226204b729cfff7aa765f6ea
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: e44c7ab3ebfefe2dbcbe184243d03ba5f0eac7aa7b0b760aaf7cbd878468394cc519e7433bf72ef2dfd8ffcf3e0e099a18290035b86760e5143bf11a3236f42f
|
|
7
|
+
data.tar.gz: 57ce6512718fd75d5fbeb82e54577314b448b3c1b9e4714ad9b8b1021033501bc481e2d70a4f1b3c930727aa020a827535a357319e7a8928ba10e158d6ce8478
|
|
@@ -9,7 +9,7 @@ module AngularRailsCsrf
|
|
|
9
9
|
end
|
|
10
10
|
|
|
11
11
|
def set_xsrf_token_cookie
|
|
12
|
-
return unless protect_against_forgery? && !respond_to?(:__exclude_xsrf_token_cookie?)
|
|
12
|
+
return unless defined?(protect_against_forgery?) && protect_against_forgery? && !respond_to?(:__exclude_xsrf_token_cookie?)
|
|
13
13
|
|
|
14
14
|
config = Rails.application.config
|
|
15
15
|
|
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
# frozen_string_literal: true
|
|
2
|
+
|
|
3
|
+
require 'test_helper'
|
|
4
|
+
|
|
5
|
+
class AngularRailsCsrfSkipTest < ActionController::TestCase
|
|
6
|
+
tests ApiController
|
|
7
|
+
|
|
8
|
+
test 'csrf-cookie is not set and no error if protect_against_forgery? is not defined' do
|
|
9
|
+
refute @controller.respond_to?(:protect_against_forgery?)
|
|
10
|
+
get :index
|
|
11
|
+
assert_nil cookies['XSRF-TOKEN']
|
|
12
|
+
assert_response :success
|
|
13
|
+
end
|
|
14
|
+
end
|
data/test/dummy/config.ru
CHANGED
data/test/dummy/config/routes.rb
CHANGED
data/test/dummy/log/test.log
CHANGED
|
@@ -1619,3 +1619,318 @@ AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
|
|
1619
1619
|
----------------------------------------------------------------------------
|
|
1620
1620
|
Processing by ExclusionsController#index as HTML
|
|
1621
1621
|
Completed 200 OK in 0ms (Allocations: 71)
|
|
1622
|
+
-------------------------------------------------------------------------
|
|
1623
|
+
AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
|
|
1624
|
+
-------------------------------------------------------------------------
|
|
1625
|
+
Processing by ApplicationController#index as HTML
|
|
1626
|
+
Completed 200 OK in 0ms (Allocations: 132)
|
|
1627
|
+
-----------------------------------------------------------------------------------------------------
|
|
1628
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
|
1629
|
+
-----------------------------------------------------------------------------------------------------
|
|
1630
|
+
Processing by ApplicationController#create as HTML
|
|
1631
|
+
Can't verify CSRF token authenticity.
|
|
1632
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 116)
|
|
1633
|
+
-------------------------------------------------------------
|
|
1634
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
|
1635
|
+
-------------------------------------------------------------
|
|
1636
|
+
Processing by ApplicationController#index as HTML
|
|
1637
|
+
Completed 200 OK in 0ms (Allocations: 121)
|
|
1638
|
+
------------------------------------------------------------------------------------
|
|
1639
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
|
1640
|
+
------------------------------------------------------------------------------------
|
|
1641
|
+
Processing by ApplicationController#index as HTML
|
|
1642
|
+
Completed 200 OK in 0ms (Allocations: 108)
|
|
1643
|
+
-------------------------------------------------------------------------------------
|
|
1644
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
|
1645
|
+
-------------------------------------------------------------------------------------
|
|
1646
|
+
Processing by ApplicationController#create as HTML
|
|
1647
|
+
Can't verify CSRF token authenticity.
|
|
1648
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 98)
|
|
1649
|
+
---------------------------------------------------------------
|
|
1650
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
|
1651
|
+
---------------------------------------------------------------
|
|
1652
|
+
Processing by ApplicationController#index as HTML
|
|
1653
|
+
Completed 200 OK in 0ms (Allocations: 108)
|
|
1654
|
+
-----------------------------------------------------------------------------
|
|
1655
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
|
1656
|
+
-----------------------------------------------------------------------------
|
|
1657
|
+
Processing by ApplicationController#create as HTML
|
|
1658
|
+
Completed 200 OK in 0ms (Allocations: 129)
|
|
1659
|
+
------------------------------------------------------
|
|
1660
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
|
1661
|
+
------------------------------------------------------
|
|
1662
|
+
Processing by ApplicationController#index as HTML
|
|
1663
|
+
Completed 200 OK in 0ms (Allocations: 108)
|
|
1664
|
+
-----------------------------------------------------------
|
|
1665
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
|
1666
|
+
-----------------------------------------------------------
|
|
1667
|
+
Processing by ApplicationController#index as HTML
|
|
1668
|
+
Completed 200 OK in 0ms (Allocations: 108)
|
|
1669
|
+
--------------------------------------------------------------------------------------------------------
|
|
1670
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
|
1671
|
+
--------------------------------------------------------------------------------------------------------
|
|
1672
|
+
Processing by ApplicationController#index as HTML
|
|
1673
|
+
Completed 200 OK in 0ms (Allocations: 108)
|
|
1674
|
+
--------------------------------------------------------
|
|
1675
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
|
1676
|
+
--------------------------------------------------------
|
|
1677
|
+
Processing by ApplicationController#index as HTML
|
|
1678
|
+
Completed 200 OK in 0ms (Allocations: 119)
|
|
1679
|
+
----------------------------------------------------------------------------
|
|
1680
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
|
1681
|
+
----------------------------------------------------------------------------
|
|
1682
|
+
Processing by ExclusionsController#index as HTML
|
|
1683
|
+
Completed 200 OK in 0ms (Allocations: 71)
|
|
1684
|
+
-----------------------------------------------------------------------------------------------------
|
|
1685
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
|
1686
|
+
-----------------------------------------------------------------------------------------------------
|
|
1687
|
+
Processing by ApplicationController#create as HTML
|
|
1688
|
+
Can't verify CSRF token authenticity.
|
|
1689
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 162)
|
|
1690
|
+
-----------------------------------------------------------------------------
|
|
1691
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
|
1692
|
+
-----------------------------------------------------------------------------
|
|
1693
|
+
Processing by ApplicationController#create as HTML
|
|
1694
|
+
Completed 200 OK in 0ms (Allocations: 148)
|
|
1695
|
+
--------------------------------------------------------
|
|
1696
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
|
1697
|
+
--------------------------------------------------------
|
|
1698
|
+
Processing by ApplicationController#index as HTML
|
|
1699
|
+
Completed 200 OK in 0ms (Allocations: 120)
|
|
1700
|
+
-------------------------------------------------------------------------
|
|
1701
|
+
AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
|
|
1702
|
+
-------------------------------------------------------------------------
|
|
1703
|
+
Processing by ApplicationController#index as HTML
|
|
1704
|
+
Completed 200 OK in 0ms (Allocations: 74)
|
|
1705
|
+
-------------------------------------------------------------
|
|
1706
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
|
1707
|
+
-------------------------------------------------------------
|
|
1708
|
+
Processing by ApplicationController#index as HTML
|
|
1709
|
+
Completed 200 OK in 0ms (Allocations: 108)
|
|
1710
|
+
-----------------------------------------------------------
|
|
1711
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
|
1712
|
+
-----------------------------------------------------------
|
|
1713
|
+
Processing by ApplicationController#index as HTML
|
|
1714
|
+
Completed 200 OK in 0ms (Allocations: 108)
|
|
1715
|
+
--------------------------------------------------------------------------------------------------------
|
|
1716
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
|
1717
|
+
--------------------------------------------------------------------------------------------------------
|
|
1718
|
+
Processing by ApplicationController#index as HTML
|
|
1719
|
+
Completed 200 OK in 0ms (Allocations: 108)
|
|
1720
|
+
------------------------------------------------------------------------------------
|
|
1721
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
|
1722
|
+
------------------------------------------------------------------------------------
|
|
1723
|
+
Processing by ApplicationController#index as HTML
|
|
1724
|
+
Completed 200 OK in 0ms (Allocations: 108)
|
|
1725
|
+
-------------------------------------------------------------------------------------
|
|
1726
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
|
1727
|
+
-------------------------------------------------------------------------------------
|
|
1728
|
+
Processing by ApplicationController#create as HTML
|
|
1729
|
+
Can't verify CSRF token authenticity.
|
|
1730
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 98)
|
|
1731
|
+
------------------------------------------------------
|
|
1732
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
|
1733
|
+
------------------------------------------------------
|
|
1734
|
+
Processing by ApplicationController#index as HTML
|
|
1735
|
+
Completed 200 OK in 0ms (Allocations: 108)
|
|
1736
|
+
---------------------------------------------------------------
|
|
1737
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
|
1738
|
+
---------------------------------------------------------------
|
|
1739
|
+
Processing by ApplicationController#index as HTML
|
|
1740
|
+
Completed 200 OK in 0ms (Allocations: 108)
|
|
1741
|
+
----------------------------------------------------------------------------
|
|
1742
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
|
1743
|
+
----------------------------------------------------------------------------
|
|
1744
|
+
Processing by ExclusionsController#index as HTML
|
|
1745
|
+
Completed 200 OK in 0ms (Allocations: 71)
|
|
1746
|
+
----------------------------------------------------------------------------
|
|
1747
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
|
1748
|
+
----------------------------------------------------------------------------
|
|
1749
|
+
Processing by ExclusionsController#index as HTML
|
|
1750
|
+
Completed 200 OK in 0ms (Allocations: 128)
|
|
1751
|
+
-------------------------------------------------------------
|
|
1752
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
|
1753
|
+
-------------------------------------------------------------
|
|
1754
|
+
Processing by ApplicationController#index as HTML
|
|
1755
|
+
Completed 200 OK in 0ms (Allocations: 109)
|
|
1756
|
+
------------------------------------------------------------------------------------
|
|
1757
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
|
1758
|
+
------------------------------------------------------------------------------------
|
|
1759
|
+
Processing by ApplicationController#index as HTML
|
|
1760
|
+
Completed 200 OK in 0ms (Allocations: 104)
|
|
1761
|
+
---------------------------------------------------------------
|
|
1762
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
|
1763
|
+
---------------------------------------------------------------
|
|
1764
|
+
Processing by ApplicationController#index as HTML
|
|
1765
|
+
Completed 200 OK in 0ms (Allocations: 104)
|
|
1766
|
+
--------------------------------------------------------
|
|
1767
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
|
1768
|
+
--------------------------------------------------------
|
|
1769
|
+
Processing by ApplicationController#index as HTML
|
|
1770
|
+
Completed 200 OK in 0ms (Allocations: 115)
|
|
1771
|
+
-------------------------------------------------------------------------
|
|
1772
|
+
AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
|
|
1773
|
+
-------------------------------------------------------------------------
|
|
1774
|
+
Processing by ApplicationController#index as HTML
|
|
1775
|
+
Completed 200 OK in 0ms (Allocations: 74)
|
|
1776
|
+
-----------------------------------------------------------------------------
|
|
1777
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
|
1778
|
+
-----------------------------------------------------------------------------
|
|
1779
|
+
Processing by ApplicationController#create as HTML
|
|
1780
|
+
Completed 200 OK in 0ms (Allocations: 131)
|
|
1781
|
+
--------------------------------------------------------------------------------------------------------
|
|
1782
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
|
1783
|
+
--------------------------------------------------------------------------------------------------------
|
|
1784
|
+
Processing by ApplicationController#index as HTML
|
|
1785
|
+
Completed 200 OK in 0ms (Allocations: 104)
|
|
1786
|
+
-----------------------------------------------------------
|
|
1787
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
|
1788
|
+
-----------------------------------------------------------
|
|
1789
|
+
Processing by ApplicationController#index as HTML
|
|
1790
|
+
Completed 200 OK in 0ms (Allocations: 104)
|
|
1791
|
+
-----------------------------------------------------------------------------------------------------
|
|
1792
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
|
1793
|
+
-----------------------------------------------------------------------------------------------------
|
|
1794
|
+
Processing by ApplicationController#create as HTML
|
|
1795
|
+
Can't verify CSRF token authenticity.
|
|
1796
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 110)
|
|
1797
|
+
-------------------------------------------------------------------------------------
|
|
1798
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
|
1799
|
+
-------------------------------------------------------------------------------------
|
|
1800
|
+
Processing by ApplicationController#create as HTML
|
|
1801
|
+
Can't verify CSRF token authenticity.
|
|
1802
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 98)
|
|
1803
|
+
------------------------------------------------------
|
|
1804
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
|
1805
|
+
------------------------------------------------------
|
|
1806
|
+
Processing by ApplicationController#index as HTML
|
|
1807
|
+
Completed 200 OK in 0ms (Allocations: 104)
|
|
1808
|
+
----------------------------------------------------------------------------
|
|
1809
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
|
1810
|
+
----------------------------------------------------------------------------
|
|
1811
|
+
Processing by ExclusionsController#index as HTML
|
|
1812
|
+
Completed 200 OK in 0ms (Allocations: 128)
|
|
1813
|
+
-------------------------------------------------------------------------
|
|
1814
|
+
AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
|
|
1815
|
+
-------------------------------------------------------------------------
|
|
1816
|
+
Processing by ApplicationController#index as HTML
|
|
1817
|
+
Completed 200 OK in 0ms (Allocations: 74)
|
|
1818
|
+
-------------------------------------------------------------
|
|
1819
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
|
1820
|
+
-------------------------------------------------------------
|
|
1821
|
+
Processing by ApplicationController#index as HTML
|
|
1822
|
+
Completed 200 OK in 0ms (Allocations: 109)
|
|
1823
|
+
-----------------------------------------------------------------------------------------------------
|
|
1824
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
|
1825
|
+
-----------------------------------------------------------------------------------------------------
|
|
1826
|
+
Processing by ApplicationController#create as HTML
|
|
1827
|
+
Can't verify CSRF token authenticity.
|
|
1828
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 116)
|
|
1829
|
+
------------------------------------------------------
|
|
1830
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
|
1831
|
+
------------------------------------------------------
|
|
1832
|
+
Processing by ApplicationController#index as HTML
|
|
1833
|
+
Completed 200 OK in 0ms (Allocations: 104)
|
|
1834
|
+
-------------------------------------------------------------------------------------
|
|
1835
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
|
1836
|
+
-------------------------------------------------------------------------------------
|
|
1837
|
+
Processing by ApplicationController#create as HTML
|
|
1838
|
+
Can't verify CSRF token authenticity.
|
|
1839
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 98)
|
|
1840
|
+
---------------------------------------------------------------
|
|
1841
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
|
1842
|
+
---------------------------------------------------------------
|
|
1843
|
+
Processing by ApplicationController#index as HTML
|
|
1844
|
+
Completed 200 OK in 0ms (Allocations: 104)
|
|
1845
|
+
-----------------------------------------------------------
|
|
1846
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
|
1847
|
+
-----------------------------------------------------------
|
|
1848
|
+
Processing by ApplicationController#index as HTML
|
|
1849
|
+
Completed 200 OK in 0ms (Allocations: 104)
|
|
1850
|
+
------------------------------------------------------------------------------------
|
|
1851
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
|
1852
|
+
------------------------------------------------------------------------------------
|
|
1853
|
+
Processing by ApplicationController#index as HTML
|
|
1854
|
+
Completed 200 OK in 0ms (Allocations: 104)
|
|
1855
|
+
-----------------------------------------------------------------------------
|
|
1856
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
|
1857
|
+
-----------------------------------------------------------------------------
|
|
1858
|
+
Processing by ApplicationController#create as HTML
|
|
1859
|
+
Completed 200 OK in 0ms (Allocations: 125)
|
|
1860
|
+
--------------------------------------------------------
|
|
1861
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
|
1862
|
+
--------------------------------------------------------
|
|
1863
|
+
Processing by ApplicationController#index as HTML
|
|
1864
|
+
Completed 200 OK in 0ms (Allocations: 115)
|
|
1865
|
+
--------------------------------------------------------------------------------------------------------
|
|
1866
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
|
1867
|
+
--------------------------------------------------------------------------------------------------------
|
|
1868
|
+
Processing by ApplicationController#index as HTML
|
|
1869
|
+
Completed 200 OK in 0ms (Allocations: 104)
|
|
1870
|
+
----------------------------------------------------------------------------
|
|
1871
|
+
AngularRailsCsrfExceptionTest: test_a_get_does_not_set_the_XSRF-TOKEN_cookie
|
|
1872
|
+
----------------------------------------------------------------------------
|
|
1873
|
+
Processing by ExclusionsController#index as HTML
|
|
1874
|
+
Completed 200 OK in 0ms (Allocations: 128)
|
|
1875
|
+
--------------------------------------------------------
|
|
1876
|
+
AngularRailsCsrfTest: test_the_domain_is_used_if_present
|
|
1877
|
+
--------------------------------------------------------
|
|
1878
|
+
Processing by ApplicationController#index as HTML
|
|
1879
|
+
Completed 200 OK in 0ms (Allocations: 120)
|
|
1880
|
+
-------------------------------------------------------------------------------------
|
|
1881
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
|
|
1882
|
+
-------------------------------------------------------------------------------------
|
|
1883
|
+
Processing by ApplicationController#create as HTML
|
|
1884
|
+
Can't verify CSRF token authenticity.
|
|
1885
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 111)
|
|
1886
|
+
------------------------------------------------------
|
|
1887
|
+
AngularRailsCsrfTest: test_same_site_can_be_configured
|
|
1888
|
+
------------------------------------------------------
|
|
1889
|
+
Processing by ApplicationController#index as HTML
|
|
1890
|
+
Completed 200 OK in 0ms (Allocations: 104)
|
|
1891
|
+
---------------------------------------------------------------
|
|
1892
|
+
AngularRailsCsrfTest: test_the_secure_flag_is_set_if_configured
|
|
1893
|
+
---------------------------------------------------------------
|
|
1894
|
+
Processing by ApplicationController#index as HTML
|
|
1895
|
+
Completed 200 OK in 0ms (Allocations: 104)
|
|
1896
|
+
------------------------------------------------------------------------------------
|
|
1897
|
+
AngularRailsCsrfTest: test_secure_is_set_automatically_when_same_site_is_set_to_none
|
|
1898
|
+
------------------------------------------------------------------------------------
|
|
1899
|
+
Processing by ApplicationController#index as HTML
|
|
1900
|
+
Completed 200 OK in 0ms (Allocations: 104)
|
|
1901
|
+
-------------------------------------------------------------------------
|
|
1902
|
+
AngularRailsCsrfTest: test_csrf-cookie_is_not_set_if_exclusion_is_enabled
|
|
1903
|
+
-------------------------------------------------------------------------
|
|
1904
|
+
Processing by ApplicationController#index as HTML
|
|
1905
|
+
Completed 200 OK in 0ms (Allocations: 74)
|
|
1906
|
+
-----------------------------------------------------------------------------
|
|
1907
|
+
AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
|
|
1908
|
+
-----------------------------------------------------------------------------
|
|
1909
|
+
Processing by ApplicationController#create as HTML
|
|
1910
|
+
Completed 200 OK in 0ms (Allocations: 125)
|
|
1911
|
+
-------------------------------------------------------------
|
|
1912
|
+
AngularRailsCsrfTest: test_same_site_is_set_to_Lax_by_default
|
|
1913
|
+
-------------------------------------------------------------
|
|
1914
|
+
Processing by ApplicationController#index as HTML
|
|
1915
|
+
Completed 200 OK in 0ms (Allocations: 104)
|
|
1916
|
+
--------------------------------------------------------------------------------------------------------
|
|
1917
|
+
AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
|
|
1918
|
+
--------------------------------------------------------------------------------------------------------
|
|
1919
|
+
Processing by ApplicationController#index as HTML
|
|
1920
|
+
Completed 200 OK in 0ms (Allocations: 104)
|
|
1921
|
+
-----------------------------------------------------------
|
|
1922
|
+
AngularRailsCsrfTest: test_a_custom_name_is_used_if_present
|
|
1923
|
+
-----------------------------------------------------------
|
|
1924
|
+
Processing by ApplicationController#index as HTML
|
|
1925
|
+
Completed 200 OK in 0ms (Allocations: 104)
|
|
1926
|
+
-----------------------------------------------------------------------------------------------------
|
|
1927
|
+
AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
|
|
1928
|
+
-----------------------------------------------------------------------------------------------------
|
|
1929
|
+
Processing by ApplicationController#create as HTML
|
|
1930
|
+
Can't verify CSRF token authenticity.
|
|
1931
|
+
Completed 422 Unprocessable Entity in 0ms (Allocations: 103)
|
|
1932
|
+
-------------------------------------------------------------------------------------------------------------
|
|
1933
|
+
AngularRailsCsrfSkipTest: test_csrf-cookie_is_not_set_and_no_error_if_protect_against_forgery?_is_not_defined
|
|
1934
|
+
-------------------------------------------------------------------------------------------------------------
|
|
1935
|
+
Processing by ApiController#index as HTML
|
|
1936
|
+
Completed 200 OK in 0ms (Allocations: 84)
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: angular_rails_csrf
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 4.
|
|
4
|
+
version: 4.4.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- James Sanders
|
|
@@ -9,7 +9,7 @@ authors:
|
|
|
9
9
|
autorequire:
|
|
10
10
|
bindir: bin
|
|
11
11
|
cert_chain: []
|
|
12
|
-
date: 2020-
|
|
12
|
+
date: 2020-08-04 00:00:00.000000000 Z
|
|
13
13
|
dependencies:
|
|
14
14
|
- !ruby/object:Gem::Dependency
|
|
15
15
|
name: rake
|
|
@@ -45,14 +45,14 @@ dependencies:
|
|
|
45
45
|
requirements:
|
|
46
46
|
- - '='
|
|
47
47
|
- !ruby/object:Gem::Version
|
|
48
|
-
version: 6.0.3
|
|
48
|
+
version: 6.0.3.2
|
|
49
49
|
type: :development
|
|
50
50
|
prerelease: false
|
|
51
51
|
version_requirements: !ruby/object:Gem::Requirement
|
|
52
52
|
requirements:
|
|
53
53
|
- - '='
|
|
54
54
|
- !ruby/object:Gem::Version
|
|
55
|
-
version: 6.0.3
|
|
55
|
+
version: 6.0.3.2
|
|
56
56
|
- !ruby/object:Gem::Dependency
|
|
57
57
|
name: railties
|
|
58
58
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -144,8 +144,10 @@ files:
|
|
|
144
144
|
- lib/angular_rails_csrf/railtie.rb
|
|
145
145
|
- lib/angular_rails_csrf/version.rb
|
|
146
146
|
- test/angular_rails_csrf_exception_test.rb
|
|
147
|
+
- test/angular_rails_csrf_skip_test.rb
|
|
147
148
|
- test/angular_rails_csrf_test.rb
|
|
148
149
|
- test/dummy/app/assets/config/manifest.js
|
|
150
|
+
- test/dummy/app/controllers/api_controller.rb
|
|
149
151
|
- test/dummy/app/controllers/application_controller.rb
|
|
150
152
|
- test/dummy/app/controllers/exclusions_controller.rb
|
|
151
153
|
- test/dummy/config.ru
|
|
@@ -174,14 +176,16 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
174
176
|
- !ruby/object:Gem::Version
|
|
175
177
|
version: '0'
|
|
176
178
|
requirements: []
|
|
177
|
-
rubygems_version: 3.1.
|
|
179
|
+
rubygems_version: 3.1.4
|
|
178
180
|
signing_key:
|
|
179
181
|
specification_version: 4
|
|
180
182
|
summary: Support for AngularJS $http service style CSRF protection in Rails
|
|
181
183
|
test_files:
|
|
182
184
|
- test/angular_rails_csrf_exception_test.rb
|
|
185
|
+
- test/angular_rails_csrf_skip_test.rb
|
|
183
186
|
- test/angular_rails_csrf_test.rb
|
|
184
187
|
- test/dummy/app/assets/config/manifest.js
|
|
188
|
+
- test/dummy/app/controllers/api_controller.rb
|
|
185
189
|
- test/dummy/app/controllers/application_controller.rb
|
|
186
190
|
- test/dummy/app/controllers/exclusions_controller.rb
|
|
187
191
|
- test/dummy/config/application.rb
|