mirror of
https://github.com/django/django.git
synced 2025-08-03 02:23:12 +00:00
Refs #16010 -- Required CSRF_TRUSTED_ORIGINS setting to include the scheme.
This commit is contained in:
parent
9bf5e9418f
commit
dba44a7a7a
8 changed files with 89 additions and 7 deletions
27
tests/check_framework/test_4_0_compatibility.py
Normal file
27
tests/check_framework/test_4_0_compatibility.py
Normal file
|
@ -0,0 +1,27 @@
|
|||
from django.core.checks import Error
|
||||
from django.core.checks.compatibility.django_4_0 import (
|
||||
check_csrf_trusted_origins,
|
||||
)
|
||||
from django.test import SimpleTestCase
|
||||
from django.test.utils import override_settings
|
||||
|
||||
|
||||
class CheckCSRFTrustedOrigins(SimpleTestCase):
|
||||
|
||||
@override_settings(CSRF_TRUSTED_ORIGINS=['example.com'])
|
||||
def test_invalid_url(self):
|
||||
self.assertEqual(check_csrf_trusted_origins(None), [
|
||||
Error(
|
||||
'As of Django 4.0, the values in the CSRF_TRUSTED_ORIGINS '
|
||||
'setting must start with a scheme (usually http:// or '
|
||||
'https://) but found example.com. See the release notes for '
|
||||
'details.',
|
||||
id='4_0.E001',
|
||||
)
|
||||
])
|
||||
|
||||
@override_settings(
|
||||
CSRF_TRUSTED_ORIGINS=['http://example.com', 'https://example.com'],
|
||||
)
|
||||
def test_valid_urls(self):
|
||||
self.assertEqual(check_csrf_trusted_origins(None), [])
|
Loading…
Add table
Add a link
Reference in a new issue