perso/syncthing-arm
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Fix CSRF tests (fixes #2009)

Browse Source
This commit is contained in:
Audrius Butkevicius
2015-06-30 19:38:27 +01:00
parent a03c9f9457
commit 37a42dc408
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
test/http_test.go
View File

@@ -204,6 +204,7 @@ func TestPOSTWithoutCSRF(t *testing.T) {
} }
res.Body.Close() res.Body.Close()
hdr := res.Header.Get("Set-Cookie") hdr := res.Header.Get("Set-Cookie")
id := res.Header.Get("X-Syncthing-ID")[:5]
if !strings.Contains(hdr, "CSRF-Token") { if !strings.Contains(hdr, "CSRF-Token") {
t.Error("Missing CSRF-Token in", hdr) t.Error("Missing CSRF-Token in", hdr)
} }
@@ -214,7 +215,8 @@ func TestPOSTWithoutCSRF(t *testing.T) {
if err != nil { if err != nil {
t.Fatal(err) t.Fatal(err)
} }
req.Header.Set("X-CSRF-Token", hdr[len("CSRF-Token="):])
req.Header.Set("X-CSRF-Token-"+id, hdr[len("CSRF-Token-"+id+"="):])
res, err = http.DefaultClient.Do(req) res, err = http.DefaultClient.Do(req)
if err != nil { if err != nil {
t.Fatal(err) t.Fatal(err)
@@ -230,7 +232,7 @@ func TestPOSTWithoutCSRF(t *testing.T) {
if err != nil { if err != nil {
t.Fatal(err) t.Fatal(err)
} }
req.Header.Set("X-CSRF-Token", hdr[len("CSRF-Token="):]+"X") req.Header.Set("X-CSRF-Token-"+id, hdr[len("CSRF-Token-"+id+"="):]+"X")
res, err = http.DefaultClient.Do(req) res, err = http.DefaultClient.Do(req)
if err != nil { if err != nil {
t.Fatal(err) t.Fatal(err)