https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43505

--- Comment #15 from Jonathan Druart <[email protected]> ---
Created attachment 205467
  -->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=205467&action=edit
Bug 43505: Koha::QA - CSRF 'op in forms'

Consolidate xt/find-missing-csrf.t (CSRF token check) and
xt/find-missing-op-in-forms.t (op parameter / "cud-" prefix check)
into a single test, renamed to xt/find-csrf-issues.t.

Both checks are now covered by one Koha::QA::Security::CSRF checker,
which reports the following possible errors:
  * missing_csrf_token
  * missing_op
  * and invalid_op_value

Test plan:
 `prove xt/find-csrf-issues.t`
=> It still passes!
=> It still catches:
  * a missing CSRF token
  * a missing/invalid op parameter

-- 
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list -- [email protected]
To unsubscribe send an email to [email protected]
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to