innov
/
django1
1
0
Fork 0
Code Issues Pull Requests 1 Projects Releases Wiki Activity

Made CsrfViewMiddlewareTestMixin._get_GET_no_csrf_cookie_request() return GET requests.

This commit is contained in:
Mariusz Felisiak 2021-03-22 08:22:58 +01:00 committed by GitHub
parent d11b9ffcc0
commit 717b5e633a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
tests/csrf_tests/tests.py
View File

@ -39,7 +39,9 @@ class CsrfViewMiddlewareTestMixin:
_csrf_id = _csrf_id_cookie = '1bcdefghij2bcdefghij3bcdefghij4bcdefghij5bcdefghij6bcdefghijABCD'
def _get_GET_no_csrf_cookie_request(self):
return TestingHttpRequest()
req = TestingHttpRequest()
req.method = 'GET'
return req
def _get_GET_csrf_cookie_request(self):
raise NotImplementedError('This method must be implemented by a subclass.')
@ -308,7 +310,7 @@ class CsrfViewMiddlewareTestMixin:
CsrfViewMiddleware generates a 403 response if it receives an HTTPS
request with a bad host.
"""
req = self._get_GET_no_csrf_cookie_request()
req = self._get_POST_no_csrf_cookie_request()
req._is_secure_override = True
req.META['HTTP_HOST'] = '@malformed'
req.META['HTTP_REFERER'] = 'https://www.evil.org/somepage'