Add new CSRF manager for unit testing purposes
This adds a new CSRF manager for unit testing purposes, it's interface is based upon https://github.com/symfony/security-csrf. Due to some of our required custom changes it is however not possible to use the Symfony component directly.
Showing
- lib/private/appframework/http/request.php 11 additions, 19 deletionslib/private/appframework/http/request.php
- lib/private/security/csrf/csrftoken.php 69 additions, 0 deletionslib/private/security/csrf/csrftoken.php
- lib/private/security/csrf/csrftokengenerator.php 52 additions, 0 deletionslib/private/security/csrf/csrftokengenerator.php
- lib/private/security/csrf/csrftokenmanager.php 97 additions, 0 deletionslib/private/security/csrf/csrftokenmanager.php
- lib/private/security/csrf/tokenstorage/sessionstorage.php 80 additions, 0 deletionslib/private/security/csrf/tokenstorage/sessionstorage.php
- lib/private/server.php 20 additions, 7 deletionslib/private/server.php
- lib/private/template.php 2 additions, 2 deletionslib/private/template.php
- lib/private/template/base.php 3 additions, 2 deletionslib/private/template/base.php
- lib/private/user.php 1 addition, 1 deletionlib/private/user.php
- lib/private/util.php 0 additions, 36 deletionslib/private/util.php
- lib/public/util.php 13 additions, 3 deletionslib/public/util.php
- tests/lib/appframework/http/RequestTest.php 86 additions, 4 deletionstests/lib/appframework/http/RequestTest.php
- tests/lib/security/csrf/CsrfTokenGeneratorTest.php 54 additions, 0 deletionstests/lib/security/csrf/CsrfTokenGeneratorTest.php
- tests/lib/security/csrf/CsrfTokenManagerTest.php 134 additions, 0 deletionstests/lib/security/csrf/CsrfTokenManagerTest.php
- tests/lib/security/csrf/CsrfTokenTest.php 33 additions, 0 deletionstests/lib/security/csrf/CsrfTokenTest.php
- tests/lib/security/csrf/tokenstorage/SessionStorageTest.php 107 additions, 0 deletionstests/lib/security/csrf/tokenstorage/SessionStorageTest.php
- tests/lib/util.php 0 additions, 5 deletionstests/lib/util.php
Loading
Please register or sign in to comment