jaculabilis/danbooru
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
Files
fda9843a55b7fa61c97d257cdd2abd88edf4eda6
danbooru/test/functional
History
evazion 2d34e69737 api: disable csrf protection for api requests. 
Fixes POST/PUT API requests failing with InvalidAuthenticityToken errors
due to missing CSRF tokens.

CSRF protection is only necessary for cookie-based authentication. For
non-cookie-based authentication we can safely disable it. That is, if
the user is already passing their login + api_key, then we don't need
to additionally verify the request with a CSRF token.

ref: 2e407fa476 (comments)
2019-08-24 22:55:35 -05:00
..
admin
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
explore
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
maintenance/user
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
moderator
Fix #4053: Add disapproval index improvements.
2019-08-02 22:03:03 -05:00
application_controller_test.rb
api: disable csrf protection for api requests.
2019-08-24 22:55:35 -05:00
artist_commentaries_controller_test.rb
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
artist_commentary_versions_controller_test.rb
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
artist_urls_controller_test.rb
artist urls: add tests for controller + artist url search.
2018-09-15 19:58:55 -05:00
artist_versions_controller_test.rb
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
artists_controller_test.rb
tests: drop timecop gem.
2019-08-18 11:24:41 -05:00
bans_controller_test.rb
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
bulk_update_requests_controller_test.rb
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
comment_votes_controller_test.rb
comment votes: fix error handling.
2019-08-19 17:22:36 -05:00
comments_controller_test.rb
tests: fix authentication in controller tests.
2019-08-24 22:55:35 -05:00
counts_controller_test.rb
throw error on counts/posts endpoint during a timeout (#2170)
2018-09-19 13:34:50 -07:00
delayed_jobs_controller_test.rb
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
dmails_controller_test.rb
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
dtext_previews_controller_test.rb
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
favorite_groups_controller_test.rb
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
favorites_controller_test.rb
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
forum_posts_controller_test.rb
reduce constraints for when to show forum post vote links (#3691)
2018-05-15 11:20:16 -07:00
forum_topics_controller_test.rb
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
ip_bans_controller_test.rb
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
iqdb_queries_controller_test.rb
iqdb fixes
2018-06-23 11:15:14 -07:00
janitor_trials_controller_test.rb
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
meta_searches_controller_test.rb
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
mod_actions_controller_test.rb
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
news_updates_controller_test.rb
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
note_previews_controller_test.rb
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
note_versions_controller_test.rb
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
notes_controller_test.rb
users: drop id_to_name, name_to_id caching.
2019-08-18 11:24:42 -05:00
pool_elements_controller_test.rb
pools: store post_ids as array instead of string (fix #3979)
2018-11-08 15:09:31 -06:00
pool_versions_controller_test.rb
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
pools_controller_test.rb
pools: store post_ids as array instead of string (fix #3979)
2018-11-08 15:09:31 -06:00
post_appeals_controller_test.rb
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
post_approvals_controller_test.rb
post approvals: add index page + search options (fix #3579).
2018-05-05 14:00:49 -05:00
post_events_controller_test.rb
post approvals: add to post events page.
2018-05-05 14:00:58 -05:00
post_flags_controller_test.rb
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
post_replacements_controller_test.rb
tests: drop timecop gem.
2019-08-18 11:24:41 -05:00
post_versions_controller_test.rb
tests: drop timecop gem.
2019-08-18 11:24:41 -05:00
post_votes_controller_test.rb
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
posts_controller_test.rb
tests: move authentication tests out of post tests.
2019-08-24 22:55:35 -05:00
recommended_posts_controller_test.rb
add mock recommender service for development, add user-context recommended posts
2018-07-21 14:02:57 -07:00
related_tags_controller_test.rb
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
reports_controller_test.rb
upload tags report: add controller test (#3975).
2018-11-06 18:29:27 -06:00
saved_searches_controller_test.rb
continue refactoring savedsearch
2018-11-15 12:06:13 -08:00
sessions_controller_test.rb
sessions: remove nonexistent GET /session route.
2019-08-14 01:46:43 -05:00
sources_controller_test.rb
skip additional tests failures that are caused by networking issues
2018-09-11 13:43:34 -07:00
tag_alias_requests_controller_test.rb
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
tag_aliases_controller_test.rb
aliases/implications: fix controller tests.
2018-12-31 19:08:15 -06:00
tag_implication_requests_controller_test.rb
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
tag_implications_controller_test.rb
aliases/implications: fix controller tests.
2018-12-31 19:08:15 -06:00
tags_controller_test.rb
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
uploads_controller_test.rb
users: drop id_to_name, name_to_id caching.
2019-08-18 11:24:42 -05:00
user_feedbacks_controller_test.rb
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
user_name_change_requests_controller_test.rb
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
users_controller_test.rb
tests: fix /users?name=<nonexistent> test.
2019-08-22 21:30:00 -05:00
wiki_page_versions_controller_test.rb
Raise error on unpermitted params.
2018-04-06 18:09:57 -07:00
wiki_pages_controller_test.rb
tests: drop timecop gem.
2019-08-18 11:24:41 -05:00