summaryrefslogtreecommitdiff
path: root/tests/csrf_tests
AgeCommit message (Expand)Author
2026-01-18Applied Black's 2026 stable style.Mariusz Felisiak
2025-07-23Refs #36500 -- Rewrapped long docstrings and block comments via a script.django-bot
2025-07-23Removed double spaces after periods and within phrases.Sarah Boyce
2025-05-22Added helpers in csrf_tests and logging_tests to assert logs from `log_respon...Natalia
2024-10-16Refs #35727 -- Updated response.content.decode calls to use the HttpResponse....SaJH
2024-05-29Fixed 35467 -- Replaced urlparse with urlsplit where appropriate.Jake Howard
2023-09-13Corrected logger in CsrfViewMiddlewareTestMixin.test_ensures_csrf_cookie_no_l...Mariusz Felisiak
2023-02-01Refs #33476 -- Applied Black's 2023 stable style.David Smith
2023-01-17Refs #32800 -- Removed CSRF_COOKIE_MASKED transitional setting per deprecatio...Mariusz Felisiak
2022-03-09Fixed #33567 -- Avoided setting default text/html content type on responses.Claude Paroz
2022-02-07Refs #33476 -- Refactored code to strictly match 88 characters line length.Mariusz Felisiak
2022-02-07Refs #33476 -- Reformatted code with Black.django-bot
2021-11-29Refs #32800 -- Renamed _sanitize_token() to _check_token_format().Chris Jerdonek
2021-11-29Fixed #32800 -- Changed CsrfViewMiddleware not to mask the CSRF secret.Chris Jerdonek
2021-11-16Refs #32800 -- Avoided use of _does_token_match() in some CSRF tests.Chris Jerdonek
2021-11-16Refs #32800 -- Added CSRF tests for masked and unmasked secrets during GET.Chris Jerdonek
2021-08-17Refs #32800 -- Added test_masked_secret_accepted_and_not_replaced().Chris Jerdonek
2021-08-17Refs #32800 -- Improved CsrfViewMiddlewareTestMixin._check_token_present().Chris Jerdonek
2021-08-17Refs #32800 -- Used the cookie argument to CsrfViewMiddlewareTestMixin._get_r...Chris Jerdonek
2021-08-03Refs #32800 -- Added tests of more CSRF functions.Chris Jerdonek
2021-08-03Refs #32800 -- Renamed _compare_masked_tokens() to _does_token_match().Chris Jerdonek
2021-07-23Fixed #32329 -- Made CsrfViewMiddleware catch more specific UnreadablePostError.Virtosu Bogdan
2021-07-23Refs #32329 -- Allowed specifying request class in csrf_tests test hooks.Virtosu Bogdan
2021-07-23Refs #32902 -- Moved ensure_csrf_cookie_view after protected_view.Chris Jerdonek
2021-07-23Fixed #32902 -- Fixed CsrfViewMiddleware.process_response()'s cookie reset lo...Chris Jerdonek
2021-07-23Refs #32902 -- Added CSRF test when rotate_token() is called between resettin...Chris Jerdonek
2021-06-30Refs #32885 -- Used _read_csrf_cookie()/_set_csrf_cookie() in more CSRF tests.Chris Jerdonek
2021-06-30Fixed #32885 -- Removed cookie-based token specific logic from CsrfViewMiddle...Chris Jerdonek
2021-06-29Refs #32843 -- Added CsrfViewMiddlewareTestMixin._get_csrf_cookie_request() h...Chris Jerdonek
2021-06-29Refs #32843 -- Added method/cookie arguments to CsrfViewMiddlewareTestMixin._...Chris Jerdonek
2021-06-29Refs #32843 -- Moved _get_GET_csrf_cookie_request() to CsrfViewMiddlewareTest...Chris Jerdonek
2021-06-29Fixed #32843 -- Ensured the CSRF tests' _get_GET_csrf_cookie_request() sets t...Chris Jerdonek
2021-06-28Refs #32800 -- Added CsrfViewMiddleware tests for all combinations of masked/...Chris Jerdonek
2021-06-28Refs #32800 -- Made CsrfViewMiddlewareTestMixin._csrf_id_cookie and _csrf_id_...Chris Jerdonek
2021-06-28Refs #32800 -- Eliminated the need for separate _get_POST_bare_secret() methods.Chris Jerdonek
2021-06-28Refs #32800 -- Added to csrf_tests/tests.py the unmasked version of the secret.Chris Jerdonek
2021-06-23Fixed #32817 -- Added the token source to CsrfViewMiddleware's bad token erro...Chris Jerdonek
2021-06-23Refs #32817 -- Added tests for bad CSRF token provided via X-CSRFToken or cus...Chris Jerdonek
2021-06-23Refs #32817 -- Added post_token/meta_token/token_header arguments to _get_POS...Chris Jerdonek
2021-06-23Refs #32817 -- Combined the bad-or-missing CSRF token tests.Chris Jerdonek
2021-06-01Fixed #32796 -- Changed CsrfViewMiddleware to fail earlier on badly formatted...Chris Jerdonek
2021-06-01Refs #32796 -- Added CsrfViewMiddleware tests for incorrectly formatted cooki...Chris Jerdonek
2021-05-31Fixed #32795 -- Changed CsrfViewMiddleware to fail earlier on badly formatted...Chris Jerdonek
2021-05-31Refs #32795 -- Added CsrfViewMiddleware tests for rejecting invalid or missin...Chris Jerdonek
2021-05-28Fixed #32596 -- Added CsrfViewMiddleware._check_referer().Chris Jerdonek
2021-05-27Refs #32596 -- Added extra tests for CsrfViewMiddleware's referer logic.Chris Jerdonek
2021-03-25Fixed #32578 -- Fixed crash in CsrfViewMiddleware when a request with Origin ...Chris Jerdonek
2021-03-22Made CsrfViewMiddlewareTestMixin._get_GET_no_csrf_cookie_request() return GET...Mariusz Felisiak
2021-03-19Fixed #32571 -- Made CsrfViewMiddleware handle invalid URLs in Referer header.Adam Donaghy
2021-03-18Fixed #16010 -- Added Origin header checking to CSRF middleware.Tim Graham