mirror of
https://github.com/django/django.git
synced 2025-03-03 13:34:26 +00:00
Cosmetic edits to tests/view_tests/tests/test_csrf.py.
This commit is contained in:
parent
8cb1b1fd8e
commit
e1cd5a76d7
@ -22,21 +22,15 @@ class CsrfViewTests(SimpleTestCase):
|
|||||||
],
|
],
|
||||||
)
|
)
|
||||||
def test_translation(self):
|
def test_translation(self):
|
||||||
"""
|
"""An invalid request is rejected with a localized error message."""
|
||||||
An invalid request is rejected with a localized error message.
|
|
||||||
"""
|
|
||||||
response = self.client.post('/')
|
response = self.client.post('/')
|
||||||
self.assertContains(response, "Forbidden", status_code=403)
|
self.assertContains(response, 'Forbidden', status_code=403)
|
||||||
self.assertContains(response,
|
self.assertContains(response, 'CSRF verification failed. Request aborted.', status_code=403)
|
||||||
"CSRF verification failed. Request aborted.",
|
|
||||||
status_code=403)
|
|
||||||
|
|
||||||
with self.settings(LANGUAGE_CODE='nl'), override('en-us'):
|
with self.settings(LANGUAGE_CODE='nl'), override('en-us'):
|
||||||
response = self.client.post('/')
|
response = self.client.post('/')
|
||||||
self.assertContains(response, "Verboden", status_code=403)
|
self.assertContains(response, 'Verboden', status_code=403)
|
||||||
self.assertContains(response,
|
self.assertContains(response, 'CSRF-verificatie mislukt. Verzoek afgebroken.', status_code=403)
|
||||||
"CSRF-verificatie mislukt. Verzoek afgebroken.",
|
|
||||||
status_code=403)
|
|
||||||
|
|
||||||
@override_settings(
|
@override_settings(
|
||||||
SECURE_PROXY_SSL_HEADER=('HTTP_X_FORWARDED_PROTO', 'https')
|
SECURE_PROXY_SSL_HEADER=('HTTP_X_FORWARDED_PROTO', 'https')
|
||||||
@ -47,11 +41,20 @@ class CsrfViewTests(SimpleTestCase):
|
|||||||
exception by sending an incorrect referer.
|
exception by sending an incorrect referer.
|
||||||
"""
|
"""
|
||||||
response = self.client.post('/', HTTP_X_FORWARDED_PROTO='https')
|
response = self.client.post('/', HTTP_X_FORWARDED_PROTO='https')
|
||||||
self.assertContains(response,
|
self.assertContains(
|
||||||
"You are seeing this message because this HTTPS "
|
response,
|
||||||
"site requires a 'Referer header' to be "
|
'You are seeing this message because this HTTPS site requires a '
|
||||||
"sent by your Web browser, but none was sent.",
|
''Referer header' to be sent by your Web browser, but '
|
||||||
status_code=403)
|
'none was sent.',
|
||||||
|
status_code=403,
|
||||||
|
)
|
||||||
|
self.assertContains(
|
||||||
|
response,
|
||||||
|
'If you have configured your browser to disable 'Referer' '
|
||||||
|
'headers, please re-enable them, at least for this site, or for '
|
||||||
|
'HTTPS connections, or for 'same-origin' requests.',
|
||||||
|
status_code=403,
|
||||||
|
)
|
||||||
|
|
||||||
def test_no_cookies(self):
|
def test_no_cookies(self):
|
||||||
"""
|
"""
|
||||||
@ -59,13 +62,14 @@ class CsrfViewTests(SimpleTestCase):
|
|||||||
provide a nice error message.
|
provide a nice error message.
|
||||||
"""
|
"""
|
||||||
response = self.client.post('/')
|
response = self.client.post('/')
|
||||||
self.assertContains(response,
|
self.assertContains(
|
||||||
"You are seeing this message because this site "
|
response,
|
||||||
"requires a CSRF cookie when submitting forms. "
|
'You are seeing this message because this site requires a CSRF '
|
||||||
"This cookie is required for security reasons, to "
|
'cookie when submitting forms. This cookie is required for '
|
||||||
"ensure that your browser is not being hijacked "
|
'security reasons, to ensure that your browser is not being '
|
||||||
"by third parties.",
|
'hijacked by third parties.',
|
||||||
status_code=403)
|
status_code=403,
|
||||||
|
)
|
||||||
|
|
||||||
@override_settings(TEMPLATES=[])
|
@override_settings(TEMPLATES=[])
|
||||||
def test_no_django_template_engine(self):
|
def test_no_django_template_engine(self):
|
||||||
@ -73,7 +77,7 @@ class CsrfViewTests(SimpleTestCase):
|
|||||||
The CSRF view doesn't depend on the TEMPLATES configuration (#24388).
|
The CSRF view doesn't depend on the TEMPLATES configuration (#24388).
|
||||||
"""
|
"""
|
||||||
response = self.client.post('/')
|
response = self.client.post('/')
|
||||||
self.assertContains(response, "Forbidden", status_code=403)
|
self.assertContains(response, 'Forbidden', status_code=403)
|
||||||
|
|
||||||
@override_settings(TEMPLATES=[{
|
@override_settings(TEMPLATES=[{
|
||||||
'BACKEND': 'django.template.backends.django.DjangoTemplates',
|
'BACKEND': 'django.template.backends.django.DjangoTemplates',
|
||||||
@ -86,17 +90,13 @@ class CsrfViewTests(SimpleTestCase):
|
|||||||
},
|
},
|
||||||
}])
|
}])
|
||||||
def test_custom_template(self):
|
def test_custom_template(self):
|
||||||
"""
|
"""A custom CSRF_FAILURE_TEMPLATE_NAME is used."""
|
||||||
A custom CSRF_FAILURE_TEMPLATE_NAME is used.
|
|
||||||
"""
|
|
||||||
response = self.client.post('/')
|
response = self.client.post('/')
|
||||||
self.assertContains(response, "Test template for CSRF failure", status_code=403)
|
self.assertContains(response, 'Test template for CSRF failure', status_code=403)
|
||||||
|
|
||||||
def test_custom_template_does_not_exist(self):
|
def test_custom_template_does_not_exist(self):
|
||||||
"""
|
"""An exception is raised if a nonexistent template is supplied."""
|
||||||
An exception is raised if a nonexistent template is supplied.
|
|
||||||
"""
|
|
||||||
factory = RequestFactory()
|
factory = RequestFactory()
|
||||||
request = factory.post('/')
|
request = factory.post('/')
|
||||||
with self.assertRaises(TemplateDoesNotExist):
|
with self.assertRaises(TemplateDoesNotExist):
|
||||||
csrf_failure(request, template_name="nonexistent.html")
|
csrf_failure(request, template_name='nonexistent.html')
|
||||||
|
Loading…
x
Reference in New Issue
Block a user