com.atlassian.jira.functest.framework.security.xsrf

Interface XsrfCheck.Submission

All Known Implementing Classes:

XsrfCheck.AbstractFormSubmission, XsrfCheck.AbstractLinkSubmission, XsrfCheck.CssLocatorLinkSubmission, XsrfCheck.FormSubmission, XsrfCheck.FormSubmissionWithId, XsrfCheck.LinkWithIdSubmission, XsrfCheck.LinkWithTextSubmission, XsrfCheck.SuppliedLinkSubmission, XsrfCheck.XPathLinkSubmission

Enclosing class:

XsrfCheck

public static interface XsrfCheck.Submission

Used to define the implementation of removing a token from a request and sending a request

Method Summary

Modifier and Type	Method and Description
void	init(net.sourceforge.jwebunit.WebTester tester, Navigation navigation, Form form) Initialise the submission with state from the checker.
void	removeToken() Removes the token from the state so that we can test what happens when a "dodgy token" is submitted to an action that is expecting a good token.
void	submitRequest() Submits a request to an action that presumably is XSRF-protected and requires a token to be present.
com.meterware.httpunit.WebResponse	submitRequest(String referer) Submit a request with Referer header set to given value Tester may be not updated with a response, therefore this method returns response that may be used for assertions.

Method Detail

init

void init(net.sourceforge.jwebunit.WebTester tester,
          Navigation navigation,
          Form form)

Initialise the submission with state from the checker.

Parameters:

tester - web tester

navigation - navigation

form - form

removeToken

void removeToken()
          throws Exception

Removes the token from the state so that we can test what happens when a "dodgy token" is submitted to an action that is expecting a good token.

Throws:

Exception - e

submitRequest

void submitRequest()
            throws Exception

Submits a request to an action that presumably is XSRF-protected and requires a token to be present.

Throws:

Exception - e

submitRequest

com.meterware.httpunit.WebResponse submitRequest(String referer)
                                          throws Exception

Submit a request with Referer header set to given value Tester may be not updated with a response, therefore this method returns response that may be used for assertions.

Note: Origin header cannot be set due to an undocumented "feature" of sun.net.www.protocol.http.HttpURLConnection, see allowRestrictedHeaders static field in implementation for details.

Throws:

Exception