summaryrefslogtreecommitdiff
path: root/tests/csrf_tests
AgeCommit message (Expand)Author
2018-09-08Fixed #29728 -- Prevented session resaving if CSRF cookie is unchanged.Michal Čihař
2018-05-07Replaced django.test.utils.patch_logger() with assertLogs().Claude Paroz
2018-05-03Used double quotation marks for csrf form element.CHI Cheng
2018-04-13Fixed #27863 -- Added support for the SameSite cookie flag.Alex Gaynor
2018-02-14Fixed #28693 -- Fixed crash in CsrfViewMiddleware when an HTTPS request has a...Tomer Chachamu
2018-01-21Fixed #29038 -- Removed closing slash from HTML void tags.Jon Dufresne
2017-09-20Fixed #28488 -- Reallowed error handlers to access CSRF tokens.Florian Apolloner
2017-09-20Initialized CsrfViewMiddleware once in csrf_tests.Florian Apolloner
2017-01-30Refs #23919 -- Assumed request COOKIES and META are strClaude Paroz
2017-01-25Refs #23919 -- Replaced super(ClassName, self) with super().chillaranand
2017-01-24Removed unneeded force_text calls in the test suiteClaude Paroz
2017-01-19Refs #23919 -- Stopped inheriting from object to define new style classes.Simon Charette
2017-01-18Refs #23919 -- Removed six.<various>_types usageClaude Paroz
2017-01-18Refs #23919 -- Removed encoding preambles and future importsClaude Paroz
2016-11-30Moved csrf_tests views to a spearate file.Tim Graham
2016-11-30Refs #16859 -- Allowed storing CSRF tokens in sessions.Raphael Michel
2016-11-10Refs #27392 -- Removed "Tests that", "Ensures that", etc. from test docstrings.za
2016-11-01Fixed CVE-2016-9014 -- Validated Host header when DEBUG=True.Tim Graham
2016-06-16Fixed #26747 -- Used more specific assertions in the Django test suite.Jon Dufresne
2016-06-04Fixed #26628 -- Changed CSRF logger to django.security.csrf.Holly Becker
2016-05-19Fixed #20869 -- made CSRF tokens change every request by salt-encrypting themShai Berger
2016-01-20Fixed #26094 -- Fixed CSRF behind a proxy (settings.USE_X_FORWARDED_PORT=True).chemary
2015-12-03Fixed many spelling mistakes in code, comments, and docs.Josh Soref
2015-09-16Fixed #24496 -- Added CSRF Referer checking against CSRF_COOKIE_DOMAIN.Matt Robenolt
2015-09-05Cleaned up docstrings in csrf_tests/tests.py.Joshua Kehn
2015-09-05Fixed #25334 -- Provided a way to allow cross-origin unsafe requests over HTTPS.Joshua Kehn
2015-05-27Fixed #24836 -- Made force_text() resolve lazy objects.Tim Graham
2015-05-20Refs #24652 -- Used SimpleTestCase where appropriate.Simon Charette
2015-05-02Fixed #24696 -- Made CSRF_COOKIE computation lazy.Jay Cox
2015-03-05Fixed #21495 -- Added settings.CSRF_HEADER_NAMEGrzegorz Slusarek
2015-02-06Sorted imports with isort; refs #23860.Tim Graham
2015-01-06Used None-related assertions in CSRF testsClaude Paroz
2015-01-06Fixed #23815 -- Prevented UnicodeDecodeError in CSRF middlewareClaude Paroz
2014-12-28Moved context_processors from django.core to django.template.Aymeric Augustin
2014-11-03Fixed #23620 -- Used more specific assertions in the Django test suite.Berker Peksag
2014-06-25Fixed #20128 -- Made CsrfViewMiddleware ignore IOError when reading POST data.Tim Graham
2014-03-06Fixed #22185 -- Added settings.CSRF_COOKIE_AGERoger Hu
2013-12-23Imported override_settings from its new location.Aymeric Augustin
2013-12-17Removed superfluous models.py files.Aymeric Augustin
2013-11-02PEP8 cleanupJason Myers
2013-10-26Fix all violators of E231Alex Gaynor
2013-09-08Removed some more unused local varsAlex Gaynor
2013-05-18Fixed #19436 -- Don't log warnings in ensure_csrf_cookie.Olivier Sels
2013-05-18Fixed #20411 -- Don't let invalid referers blow up CSRF same origin checks.Florian Apolloner
2013-02-26Merged regressiontests and modeltests into the test root.Florian Apolloner