Bharat Mediratta
44da46abd4
Golden file updates for xss and controller authentication.
2011-01-15 15:11:37 -08:00
Bharat Mediratta
3c40476b34
Not sure why digibug::close_window() changed in the listing, but it looks fine here.
2010-10-04 23:42:07 -07:00
Bharat Mediratta
8135429430
Checkpoint.
2010-09-17 13:39:48 -07:00
Bharat Mediratta
509b647c65
upgrader/index does not require CSRF
2010-09-11 01:48:26 -07:00
Bharat Mediratta
ec2c9dad64
Verified checkpoint.
2010-09-06 15:20:04 -07:00
Bharat Mediratta
a1be33f6ab
Verified.
2010-08-15 00:46:02 -07:00
Bharat Mediratta
8da37d595c
Verified.
2010-08-08 15:25:21 -07:00
Bharat Mediratta
f9137c756e
Updated
2010-07-27 10:53:31 -07:00
Tim Almdal
eee8c27f26
Correct the controller auth golden file from when the simple_uploader was renamed to flash_uploader
2010-07-06 08:43:02 -07:00
Bharat Mediratta
6ebbb4fbf5
Updated golden files.
2010-06-20 09:51:39 -07:00
Tim Almdal
fd437aec2b
Correct XSS Security Test golden file for recent changes. Update the controller_auth data file for the rename
...
of admin_comments to admin_manage_comments.
2010-06-04 14:05:26 -07:00
Bharat Mediratta
f906210147
Verified and updated
2010-01-27 09:55:49 -08:00
Bharat Mediratta
fecac4a859
Merge branch 'master' of git@github.com:gallery/gallery3 into bharat_dev
...
Conflicts:
modules/gallery/tests/xss_data.txt
2010-01-23 16:29:10 -08:00
Tim Almdal
3b8636e529
Update the Xss_Security_Test and the Controller_Auth_Test.
2010-01-23 23:53:16 -08:00
Bharat Mediratta
8788880065
We don't need CSRF in Rest_Controller::__call() because we use access tokens.
2010-01-21 20:18:19 -08:00
Tim Almdal
188f418a54
Correct the controller_auth_data golden file to reflect that the csrf is not longer considered dirty in the logout controller.
2010-01-06 11:42:44 -08:00
Tim Almdal
64e5efd57b
Add rest_controller::__call to the authorized controller methods
2010-01-02 17:09:40 -08:00
Bharat Mediratta
8e4c48837c
Verified and updated.
2010-01-02 13:56:01 -08:00
Bharat Mediratta
0bc92614d3
Checkpoint
2009-12-22 16:48:18 -08:00
Tim Almdal
dc67cf6481
Remove the REST_Controller and assorted baggage. Completes ticket #917
2009-11-25 13:02:14 -08:00
Tim Almdal
2d5c232c42
Refactor the album, movie and photo handling to remove the REST_Controller. Partial fix for ticket #917
2009-11-25 12:46:04 -08:00
Tim Almdal
454a96f48f
Refactor the tags to remove the REST_Controller. Partial fix for ticket #917
2009-11-25 09:08:33 -08:00
Tim Almdal
4c3b9e363a
Refactor the comment module as part of ticket: #917 "Remove Rest Controller"
...
* Remove the methods create, update, delete, get_edit_form as there are not used
* Change the return when a comment is created to return the html for the new comment.
This saves a second get request to down load the comment.
2009-11-25 08:12:50 -08:00
Tim Almdal
703f22abcb
Only look for tests that are in the active modules. Update the controller golden file to reflect the current location of files.
2009-10-23 09:41:33 -07:00
Andy Staudacher
39632c4689
Also check for rss feeds in controller auth check
2009-09-15 23:01:26 -07:00
Andy Staudacher
7608870537
Controller auth / CSRF fixes
2009-09-15 22:51:49 -07:00
Andy Staudacher
e168e0dfae
CSRF / auth fixes, golden data file checkpoint
2009-09-15 21:50:48 -07:00
Andy Staudacher
17254799d1
Initial skeleton of Controller_Auth code audit test (non functional).
2009-09-15 20:27:04 -07:00
