SEC-2325: Polish CSRF Tag support
- Rename csrfField to csrfInput - Make AbstractCsrfTag package scope - rename FormFieldTag to CsrfInputTag - rename MetaTagsTag to CsrfMetaTagsTag - removed whitespace from tag output so output is minimized & improving browser performance - Update @since - changed test names to be more meaningful
This commit is contained in:
+4
-4
@@ -36,9 +36,9 @@ public class AbstractCsrfTagTests {
|
||||
}
|
||||
|
||||
@Test
|
||||
public void testDoEndTag01() throws JspException, UnsupportedEncodingException {
|
||||
public void noCsrfDoesNotRender() throws JspException, UnsupportedEncodingException {
|
||||
|
||||
this.tag.handleReturn = "fooBarBazQux";
|
||||
this.tag.handleReturn = "shouldNotBeRendered";
|
||||
|
||||
int returned = this.tag.doEndTag();
|
||||
|
||||
@@ -47,7 +47,7 @@ public class AbstractCsrfTagTests {
|
||||
}
|
||||
|
||||
@Test
|
||||
public void testDoEndTag02() throws JspException, UnsupportedEncodingException {
|
||||
public void hasCsrfRendersReturnedValue() throws JspException, UnsupportedEncodingException {
|
||||
|
||||
CsrfToken token = new DefaultCsrfToken("X-Csrf-Token", "_csrf", "abc123def456ghi789");
|
||||
this.request.setAttribute(CsrfToken.class.getName(), token);
|
||||
@@ -62,7 +62,7 @@ public class AbstractCsrfTagTests {
|
||||
}
|
||||
|
||||
@Test
|
||||
public void testDoEndTag03() throws JspException, UnsupportedEncodingException {
|
||||
public void hasCsrfRendersDifferentValue() throws JspException, UnsupportedEncodingException {
|
||||
|
||||
CsrfToken token = new DefaultCsrfToken("X-Csrf-Token", "_csrf", "abc123def456ghi789");
|
||||
this.request.setAttribute(CsrfToken.class.getName(), token);
|
||||
|
||||
+7
-7
@@ -10,36 +10,36 @@ import static org.junit.Assert.*;
|
||||
/**
|
||||
* @author Nick Williams
|
||||
*/
|
||||
public class FormFieldTagTests {
|
||||
public class CsrfInputTagTests {
|
||||
|
||||
public FormFieldTag tag;
|
||||
public CsrfInputTag tag;
|
||||
|
||||
@Before
|
||||
public void setUp() {
|
||||
this.tag = new FormFieldTag();
|
||||
this.tag = new CsrfInputTag();
|
||||
}
|
||||
|
||||
@Test
|
||||
public void testHandleToken01() {
|
||||
public void handleTokenReturnsHiddenInput() {
|
||||
CsrfToken token = new DefaultCsrfToken("X-Csrf-Token", "_csrf", "abc123def456ghi789");
|
||||
|
||||
String value = this.tag.handleToken(token);
|
||||
|
||||
assertNotNull("The returned value should not be null.", value);
|
||||
assertEquals("The output is not correct.",
|
||||
"<input type=\"hidden\" name=\"_csrf\" value=\"abc123def456ghi789\" />\n",
|
||||
"<input type=\"hidden\" name=\"_csrf\" value=\"abc123def456ghi789\" />",
|
||||
value);
|
||||
}
|
||||
|
||||
@Test
|
||||
public void testHandleToken() {
|
||||
public void handleTokenReturnsHiddenInputDifferentTokenValue() {
|
||||
CsrfToken token = new DefaultCsrfToken("X-Csrf-Token", "csrfParameter", "fooBarBazQux");
|
||||
|
||||
String value = this.tag.handleToken(token);
|
||||
|
||||
assertNotNull("The returned value should not be null.", value);
|
||||
assertEquals("The output is not correct.",
|
||||
"<input type=\"hidden\" name=\"csrfParameter\" value=\"fooBarBazQux\" />\n",
|
||||
"<input type=\"hidden\" name=\"csrfParameter\" value=\"fooBarBazQux\" />",
|
||||
value);
|
||||
}
|
||||
}
|
||||
+11
-11
@@ -10,40 +10,40 @@ import static org.junit.Assert.*;
|
||||
/**
|
||||
* @author Nick Williams
|
||||
*/
|
||||
public class MetaTagsTagTests {
|
||||
public class CsrfMetaTagsTagTests {
|
||||
|
||||
public MetaTagsTag tag;
|
||||
public CsrfMetaTagsTag tag;
|
||||
|
||||
@Before
|
||||
public void setUp() {
|
||||
this.tag = new MetaTagsTag();
|
||||
this.tag = new CsrfMetaTagsTag();
|
||||
}
|
||||
|
||||
@Test
|
||||
public void testHandleToken01() {
|
||||
public void handleTokenRendersTags() {
|
||||
CsrfToken token = new DefaultCsrfToken("X-Csrf-Token", "_csrf", "abc123def456ghi789");
|
||||
|
||||
String value = this.tag.handleToken(token);
|
||||
|
||||
assertNotNull("The returned value should not be null.", value);
|
||||
assertEquals("The output is not correct.",
|
||||
"<meta name=\"_csrf_parameter\" content=\"_csrf\" />\n" +
|
||||
" <meta name=\"_csrf_header\" content=\"X-Csrf-Token\" />\n" +
|
||||
" <meta name=\"_csrf\" content=\"abc123def456ghi789\" />\n",
|
||||
"<meta name=\"_csrf_parameter\" content=\"_csrf\" />" +
|
||||
"<meta name=\"_csrf_header\" content=\"X-Csrf-Token\" />" +
|
||||
"<meta name=\"_csrf\" content=\"abc123def456ghi789\" />",
|
||||
value);
|
||||
}
|
||||
|
||||
@Test
|
||||
public void testHandleToken02() {
|
||||
public void handleTokenRendersTagsDifferentToken() {
|
||||
CsrfToken token = new DefaultCsrfToken("csrfHeader", "csrfParameter", "fooBarBazQux");
|
||||
|
||||
String value = this.tag.handleToken(token);
|
||||
|
||||
assertNotNull("The returned value should not be null.", value);
|
||||
assertEquals("The output is not correct.",
|
||||
"<meta name=\"_csrf_parameter\" content=\"csrfParameter\" />\n" +
|
||||
" <meta name=\"_csrf_header\" content=\"csrfHeader\" />\n" +
|
||||
" <meta name=\"_csrf\" content=\"fooBarBazQux\" />\n",
|
||||
"<meta name=\"_csrf_parameter\" content=\"csrfParameter\" />" +
|
||||
"<meta name=\"_csrf_header\" content=\"csrfHeader\" />" +
|
||||
"<meta name=\"_csrf\" content=\"fooBarBazQux\" />",
|
||||
value);
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user