Bharat Mediratta
f906210147
Verified and updated
2010-01-27 09:55:49 -08:00
Bharat Mediratta
fecac4a859
Merge branch 'master' of git@github.com:gallery/gallery3 into bharat_dev
...
Conflicts:
modules/gallery/tests/xss_data.txt
2010-01-23 16:29:10 -08:00
Tim Almdal
3b8636e529
Update the Xss_Security_Test and the Controller_Auth_Test.
2010-01-23 23:53:16 -08:00
Bharat Mediratta
8788880065
We don't need CSRF in Rest_Controller::__call() because we use access tokens.
2010-01-21 20:18:19 -08:00
Tim Almdal
188f418a54
Correct the controller_auth_data golden file to reflect that the csrf is not longer considered dirty in the logout controller.
2010-01-06 11:42:44 -08:00
Tim Almdal
64e5efd57b
Add rest_controller::__call to the authorized controller methods
2010-01-02 17:09:40 -08:00
Bharat Mediratta
8e4c48837c
Verified and updated.
2010-01-02 13:56:01 -08:00
Bharat Mediratta
0bc92614d3
Checkpoint
2009-12-22 16:48:18 -08:00
Tim Almdal
dc67cf6481
Remove the REST_Controller and assorted baggage. Completes ticket #917
2009-11-25 13:02:14 -08:00
Tim Almdal
2d5c232c42
Refactor the album, movie and photo handling to remove the REST_Controller. Partial fix for ticket #917
2009-11-25 12:46:04 -08:00
Tim Almdal
454a96f48f
Refactor the tags to remove the REST_Controller. Partial fix for ticket #917
2009-11-25 09:08:33 -08:00
Tim Almdal
4c3b9e363a
Refactor the comment module as part of ticket: #917 "Remove Rest Controller"
...
* Remove the methods create, update, delete, get_edit_form as there are not used
* Change the return when a comment is created to return the html for the new comment.
This saves a second get request to down load the comment.
2009-11-25 08:12:50 -08:00
Tim Almdal
703f22abcb
Only look for tests that are in the active modules. Update the controller golden file to reflect the current location of files.
2009-10-23 09:41:33 -07:00
Andy Staudacher
39632c4689
Also check for rss feeds in controller auth check
2009-09-15 23:01:26 -07:00
Andy Staudacher
7608870537
Controller auth / CSRF fixes
2009-09-15 22:51:49 -07:00
Andy Staudacher
e168e0dfae
CSRF / auth fixes, golden data file checkpoint
2009-09-15 21:50:48 -07:00
Andy Staudacher
17254799d1
Initial skeleton of Controller_Auth code audit test (non functional).
2009-09-15 20:27:04 -07:00
