com.atlassian.confluence.xsrf
Class CommentXsrfAcceptanceTest

java.lang.Object
  junit.framework.Assert
      junit.framework.TestCase
          com.atlassian.confluence.ThreadLocalWebTestCase
              com.atlassian.confluence.AbstractAtlassianWebTestCase
                  com.atlassian.confluence.AbstractConfluenceAcceptanceTest
                      com.atlassian.confluence.xsrf.CommentXsrfAcceptanceTest

All Implemented Interfaces:

junit.framework.Test

public class CommentXsrfAcceptanceTest
extends AbstractConfluenceAcceptanceTest

Test that comment features on a page are properly protected from xsrf attacks

Field Summary

Fields inherited from class com.atlassian.confluence.AbstractConfluenceAcceptanceTest

adminConsole, adminToken, ANONYMOUS_USER, BLOG_DATE_FORMAT, BROWSE_MENU_LINK_ID, CONFLUNECE_ADMIN_GROUP, CONFLUNECE_USERS_GROUP, context, filesToDelete, FUNCTEST_RPC_PLUGIN, log, logAdjuster, mailServices, RANDOM, rpc, SMTP_SUBJECT_PREFIX, TEST_ADMIN, TEST_ADMIN_EMAIL, TEST_ADMIN_FULLNAME, TEST_ADMIN_PASSWORD, TEST_ADMIN_USERNAME, TEST_GEN_EMAIL1, TEST_GEN_EMAIL2, TEST_GEN_FULLNAME1, TEST_GEN_FULLNAME2, TEST_GEN_PASSWORD1, TEST_GEN_PASSWORD2, TEST_GEN_USERNAME1, TEST_GEN_USERNAME2, TEST_GROUP1, TEST_PAGE, TEST_SPACE, TEST_SPACE2, TEST_USER1, TEST_USER2, TESTMAILSERVER_HOSTNAME, TESTMAILSERVER_NAME, TESTPAGE_COMMENT, TESTPAGE_CONTENT, TESTPAGE_TITLE, TESTSPACE_DESCRIPTION, TESTSPACE_KEY, TESTSPACE_TITLE, TESTSPACE2_DESCRIPTION, TESTSPACE2_KEY, TESTSPACE2_TITLE, testUser2Token, testUserToken, userHelper, VIEW_PERSONAL_SPACE_LINK, xmlrpc

Fields inherited from class com.atlassian.confluence.AbstractAtlassianWebTestCase

SITE_TITLE_SUFFIX, TITLE_SEPARATOR

Constructor Summary

CommentXsrfAcceptanceTest()

Method Summary

protected void	setUp()
protected void	tearDown() Default tearDown method.
void	testAddCommentLinkRequiresToken()
void	testDisableXsrfProtectionForComments()
void	testEditCommentLinkRequiresToken()

Methods inherited from class com.atlassian.confluence.AbstractConfluenceAcceptanceTest

addAnonymousPermissionsToSpace, addComment, addCommentToBlogPost, addPageComment, addSpaceLabel, addUserToGroupViaHelper, addWatchPage, assertImagePresent, assertImageValid, assertLoggedInAs, assertMailReceived, assertNoMailReceived, attachFile, attachFile, attachFileWithName, chooseRandomBaseUrl, cleanUp, createBlog, createGroup, createGroupViaHelper, createMail, createPage, createPageWithViewRestrictions, createSpaceViaWebUi, createSpaceViaWebUI, createSpaceViaWebUI, createTemplate, createTestMailServer, createTestSpaceViaWebUI, createUserViaHelper, createUserViaHelper, disableAnonymousAccess, disableAnonymousAccessToSpace, editBlogLabels, editBlogPostContent, editPage, editPageContent, editPageContent, editPageLabels, editPageWithContent, editSpaceDescription, editSpacePermsForm, editUserViaHelper, emptyTrash, enableAnonymousAccess, enableAnonymousAccessToSpace, ensureTestUserCanViewTestSpace, ensureUserCanViewSpace, forceViewGlobalAdmin, generateBaseUrl, generateFile, getAppContext, getBaseUrl, getConfiguredBaseUrl, getCurrentMailQueueSize, getFriendlyRelativeDate, getPageId, getPluginHelper, getTestSpace, getTodaysBlogPostDate, getUserGroups, gotoPageWithError, grantAnonymousUseConfluencePermission, grantGlobalBrowsePermissionToGroup, grantGlobalPermissionToGroup, grantGlobalPermissionToUser, grantSpacePermissionToGroup, grantSpacePermissionToGroupAndDelegate, grantSpacePermissionToUser, grantSpacePermissionToUserAndDelegate, grantViewSpacePermissionToGroup, grantViewSpacePermissionToGroupAndDelegate, grantViewSpacePermissionToUser, importGlobalBackup, importGlobalBackup, importMail, importMailAndAssertNoRunningTask, importSpaceBackup, isClustered, logIn, logIn, logInAs, logInAs, loginAs, logInAsAdminAtDashboard, logInAsAtDashboard, loginAsAtDashboard, loginAsTestUser, loginAsTestUser2, loginAsTestUserAtDashboard, loginViaForm, logout, makeParams, movePage, movePage, movePageToNewParent, movePageToNewParent, movePageToNewSpace, openInsertImagePopup, openInsertLinkPopup, pause, pause, rebuildIndex, removeAnonymousPermissionToSpace, removeBlog, removeGroup, removePageOrBlogById, removePersonalSpace, removeTestUser1, removeTestUser1ViaHelper, removeUser, removeUserFromGroupViaHelper, removeUserViaHelper, renamePage, restoreBaseUrl, revokeAnonymousUseConfluencePermission, revokeGlobalPermissionFromGroup, revokeGlobalPermissionFromUser, revokeSpacePermissionFromGroup, revokeSpacePermissionFromUser, rpcAddComment, rpcAddComment, rpcAddComment, rpcAddLabelToBlog, rpcAddLabelToPage, rpcAddLabelToPage, rpcAddLabelToSpace, rpcAddTestComment, rpcClearIndex, rpcClearQueue, rpcConvertToPersonalSpace, rpcCreateBlogPost, rpcCreateBlogPost, rpcCreatePage, rpcCreatePage, rpcCreatePersonalSpace, rpcCreateSpace, rpcCreateSpace, rpcCreateSpaceGroup, rpcCreateTestSpace, rpcCreateTestSpace2, rpcEditBlogPost, rpcEditComment, rpcEditPage, rpcFlushAllCaches, rpcFlushIndexQueue, rpcFlushMailQueue, rpcGetAdminToken, rpcGetBlogPostId, rpcGetChildren, rpcGetComments, rpcGetLocalisedText, rpcGetMailQueueSize, rpcGetPageId, rpcGetPageLabels, rpcGetPageLabels, rpcGetTestUser2Token, rpcGetTestUserToken, rpcGetTopLevelPages, rpcGetUserGroups, rpcGetUsersForActivity, rpcGetUserToken, rpcGetUserToken, rpcGetVersionForPage, rpcGrantAnonymousSpacePermission, rpcGrantGlobalPermission, rpcGrantSpacePermission, rpcGrantViewSpacePermission, rpcHasGroup, rpcHasUser, rpclogCommandOutput, rpcLogOut, rpcLogOutAdmin, rpcMovePage, rpcMovePageToTopLevel, rpcPauseJob, rpcRemoveAllSpaceGroups, rpcRemoveAnonymousSpacePermission, rpcRemoveAttachment, rpcRemoveComment, rpcRemoveComment, rpcRemoveGlobalPermissions, rpcRemoveGroup, rpcRemoveLabelFromPage, rpcRemoveLabelFromPage, rpcRemoveLabelFromSpace, rpcRemovePage, rpcRemoveSpace, rpcRemoveSpacePermission, rpcRemoveUserUncleanly, rpcRenderContent, rpcRestoreAbstractPage, rpcResumeJob, rpcStartActivity, rpcStoreBlogEntry, rpcTrashPage, rpcTrashPage, rpcTrashPage, rpcTriggerJob, search, setAllowCamelCase, setApplicationConfigProperty, setAttachmentMaxUploadSize, setCheckbox, setEditPermissionsForGroups, setEditPermissionsForUsers, setElevatedSecurityCheck, setEnableWysiwyg, setMaxAttachmentsInUI, setPageLabels, setRemoteApi, setSharedMode, setThreadedComments, setUp, setUpTestNG, setViewPermissionsForGroups, setViewPermissionsForUsers, showAllUsers, shutdownQuartz, stopTestMailServer, stripContext, tearDownTestNG, viewAbstractPage, viewBlog, viewEditBlogPostPage, viewGlobalAdmin, viewGlobalPermissions, viewHomepage, viewLabel, viewLanguages, viewPage, viewPeopleDirectory, viewSpaceAdmin, viewSpaceAdvanced, viewSpaceContent, viewSpacePermissions, viewSpaceSummary, viewSpaceSummary, viewTodaysBlog, viewTrash, viewUser, waitForLongRunningTaskToComplete, watchPage, watchSpace, watchSpace, xmlRpcExecute

Methods inherited from class com.atlassian.confluence.AbstractAtlassianWebTestCase

assertCollectionContainsKeyWithValue, assertContains, assertDoesNotContain, assertElementNotPresentByXPath, assertElementPresentByXPath, assertEndsWith, assertLinkNotPresentWithHrefContaining, assertLinkPresent, assertLinkPresentWithHref, assertLinkPresentWithHrefContaining, assertLinkPresentWithImage, assertLinkPresentWithText, assertLinkPresentWithTextAndHref, assertPageTitleEquals, assertServerResponseContains, assertServerResponseDoesNotContain, assertStartsWith, assertStatusCode, assertSubmitButtonNotPresent, assertTextInElement, assertTextNotPresent, assertTextPresent, assertTextPresentInPageSource, assertTextsPresentInOrder, assertTextsPresentInOrder, assertTitleEquals, assertTitleEquals, clickLinkWithText, getGroupFromResponse, selectOptionByValue, setTextField, setTextFieldUnlessBlank

Methods inherited from class com.atlassian.confluence.ThreadLocalWebTestCase

assertButtonNotPresent, assertButtonNotPresentWithText, assertButtonPresent, assertButtonPresentWithText, assertCheckboxNotPresent, assertCheckboxNotPresent, assertCheckboxNotSelected, assertCheckboxNotSelected, assertCheckboxPresent, assertCheckboxPresent, assertCheckboxSelected, assertCheckboxSelected, assertCookiePresent, assertCookieValueEquals, assertCookieValueMatch, assertDownloadedFileEquals, assertElementNotPresent, assertElementPresent, assertFormElementEmpty, assertFormElementEquals, assertFormElementMatch, assertFormElementNotPresent, assertFormElementPresent, assertFormNotPresent, assertFormNotPresent, assertFormPresent, assertFormPresent, assertFramePresent, assertHiddenFieldPresent, assertImagePresent, assertImageValidAndStore, assertKeyInTable, assertKeyInTable, assertKeyNotInTable, assertKeyNotPresent, assertKeyNotPresent, assertKeyPresent, assertKeyPresent, assertKeysInTable, assertKeysInTable, assertLinkNotPresent, assertLinkNotPresentWithExactText, assertLinkNotPresentWithExactText, assertLinkNotPresentWithImage, assertLinkNotPresentWithText, assertLinkNotPresentWithText, assertLinkPresentWithExactText, assertLinkPresentWithExactText, assertLinkPresentWithText, assertMatch, assertMatchInElement, assertMatchInTable, assertMatchInTable, assertNoMatch, assertNoMatchInElement, assertNoMatchInTable, assertNoMatchInTable, assertRadioOptionNotPresent, assertRadioOptionNotSelected, assertRadioOptionPresent, assertRadioOptionSelected, assertResetButtonNotPresent, assertResetButtonNotPresent, assertResetButtonPresent, assertResetButtonPresent, assertSelectedOptionEquals, assertSelectedOptionMatches, assertSelectedOptionsEqual, assertSelectedOptionsMatch, assertSelectedOptionValueEquals, assertSelectedOptionValuesEqual, assertSelectOptionNotPresent, assertSelectOptionPresent, assertSelectOptionsEqual, assertSelectOptionsNotEqual, assertSelectOptionsPresent, assertSelectOptionValueNotPresent, assertSelectOptionValuePresent, assertSelectOptionValuesEqual, assertSelectOptionValuesNotEqual, assertSelectOptionValuesPresent, assertSubmitButtonNotPresent, assertSubmitButtonPresent, assertSubmitButtonPresent, assertSubmitButtonPresent, assertTableEquals, assertTableEquals, assertTableMatch, assertTableMatch, assertTableNotPresent, assertTablePresent, assertTableRowCountEquals, assertTableRowsEqual, assertTableRowsEqual, assertTableRowsMatch, assertTableRowsMatch, assertTextFieldEquals, assertTextInTable, assertTextInTable, assertTextNotInElement, assertTextNotInTable, assertTextNotInTable, assertTitleEqualsKey, assertTitleEqualsKey, assertTitleMatch, assertWindowCountEquals, assertWindowPresent, assertWindowPresent, assertWindowPresentWithTitle, beginAt, checkCheckbox, checkCheckbox, clickButton, clickButtonWithText, clickElementByXPath, clickLink, clickLinkWithExactText, clickLinkWithExactText, clickLinkWithImage, clickLinkWithText, clickRadioOption, closeBrowser, closeWindow, dumpCookies, dumpHtml, dumpHtml, dumpTable, dumpTable, getDialog, getElementAttributByXPath, getElementTextByXPath, getFormElementValue, getImage, getMessage, getMessage, getPageSource, getServeurResponse, getTable, getTestContext, getTester, getTestingEngineKey, gotoFrame, gotoPage, gotoRootWindow, gotoWindow, gotoWindow, gotoWindowByTitle, removeThreadLocal, reset, runBare, saveAs, selectOption, selectOptions, selectOptionsByValues, setDialog, setExpectedJavaScriptAlert, setExpectedJavaScriptAlert, setExpectedJavaScriptConfirm, setExpectedJavaScriptConfirm, setExpectedJavaScriptPrompt, setExpectedJavaScriptPrompt, setFormElement, setScriptingEnabled, setTestContext, setTester, setTestingEngineKey, setWorkingForm, setWorkingForm, setWorkingForm, submit, submit, submit, uncheckCheckbox, uncheckCheckbox

Methods inherited from class junit.framework.TestCase

countTestCases, createResult, getName, run, run, runTest, setName, toString

Methods inherited from class junit.framework.Assert

assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertFalse, assertFalse, assertNotNull, assertNotNull, assertNotSame, assertNotSame, assertNull, assertNull, assertSame, assertSame, assertTrue, assertTrue, fail, fail

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

CommentXsrfAcceptanceTest

public CommentXsrfAcceptanceTest()

Method Detail

setUp

protected void setUp()
              throws Exception

Overrides:

setUp in class AbstractConfluenceAcceptanceTest

Throws:

Exception

tearDown

protected void tearDown()
                 throws Exception

Description copied from class: AbstractConfluenceAcceptanceTest

Default tearDown method. Removes any files which were added to the AbstractConfluenceAcceptanceTest.filesToDelete list.

Overrides:

tearDown in class AbstractConfluenceAcceptanceTest

Throws:

Exception

testAddCommentLinkRequiresToken

public void testAddCommentLinkRequiresToken()

testEditCommentLinkRequiresToken

public void testEditCommentLinkRequiresToken()

testDisableXsrfProtectionForComments

public void testDisableXsrfProtectionForComments()