Package org.openbravo.test.security

Class CSRFAttackTest

java.lang.Object

org.openbravo.test.base.MockableBaseTest

org.openbravo.test.base.OBBaseTest

org.openbravo.test.datasource.BaseDataSourceTestDal

org.openbravo.test.security.CSRFAttackTest

public class CSRFAttackTest
extends BaseDataSourceTestDal

Tries to create a new Product object using a pre-made POST request. If succeeded, that means that no CSRF control has been implemented.

Author:

jarmendariz

Field Summary

Fields inherited from class org.openbravo.test.datasource.BaseDataSourceTestDal

LOGIN, POST_METHOD, PWD

Fields inherited from class org.openbravo.test.base.OBBaseTest

DOLLAR, DOLLAR_ID, EURO, EURO_ID, QA_TEST_ADMIN_USER_ID, QA_TEST_CLIENT_ID, QA_TEST_ORG_ID, TEST_BP_CATEGORY_ID, TEST_CLIENT_ID, TEST_INVOICE_ID, TEST_LOCATION_ID, TEST_ORDER_ID, TEST_ORG_ID, TEST_ORG_TREE, TEST_PRODUCT_ID, TEST_ROLE_ID, TEST_US_ORG_ID, TEST_USER_ID, TEST_WAREHOUSE_ID, TEST2_USER_ID, userIds, watchFailures

Constructor Summary

Constructors

Constructor	Description
CSRFAttackTest()

Method Summary

Modifier and Type	Method	Description
void	removeFakeProduct()
void	testRequestAreProtectedAgainstCSRFAttack()
void	testRequestVerifiesSessionCSRFToken()

Methods inherited from class org.openbravo.test.datasource.BaseDataSourceTestDal

authenticate, changeProfile, doRequest, doRequest, doRequest, getLogin, getOpenbravoURL, getPassword, getSessionCsrfToken, logout

Methods inherited from class org.openbravo.test.base.OBBaseTest

addReadWriteAccess, classSetUp, commitTransaction, count, getConnectionProvider, getOneInstance, getRandomUser, getTestLogAppender, initializeDalLayer, initializeDisabledTestCases, initializeTestLogAppender, isErrorOccured, reportException, rollback, setLogStackTraces, setQAAdminContext, setSystemAdministratorContext, setTestAdminContext, setTestLogAppenderLevel, setTestUserContext, setUp, setUserContext, shouldMockServletContext, staticInitializeDalLayer, testDone

Methods inherited from class org.openbravo.test.base.MockableBaseTest

mockStatic

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CSRFAttackTest

public CSRFAttackTest()

Method Detail

testRequestAreProtectedAgainstCSRFAttack

public void testRequestAreProtectedAgainstCSRFAttack()

testRequestVerifiesSessionCSRFToken

public void testRequestVerifiesSessionCSRFToken()

removeFakeProduct

public void removeFakeProduct()