com.atlassian.jira.functest.framework.security.xsrf

Class XsrfCheck.AbstractFormSubmission

java.lang.Object

com.atlassian.jira.functest.framework.security.xsrf.XsrfCheck.AbstractFormSubmission

All Implemented Interfaces:

XsrfCheck.Submission

Direct Known Subclasses:

XsrfCheck.FormSubmission, XsrfCheck.FormSubmissionWithId

Enclosing class:

XsrfCheck

public abstract static class XsrfCheck.AbstractFormSubmission
extends Object
implements XsrfCheck.Submission

Base class for form-based submission

Constructor Summary

Constructors

Constructor and Description
AbstractFormSubmission()

Method Summary

Modifier and Type	Method and Description
protected abstract com.meterware.httpunit.SubmitButton	getButton()
void	init(net.sourceforge.jwebunit.WebTester tester, Navigation navigation, Form form) Initialise the submission with state from the checker.
void	removeToken() Removes the token from the state so that we can test what happens when a "dodgy token" is submitted to an action that is expecting a good token.
com.meterware.httpunit.WebResponse	submitRequest(String referer) Submit a request with Referer header set to given value Tester may be not updated with a response, therefore this method returns response that may be used for assertions.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface com.atlassian.jira.functest.framework.security.xsrf.XsrfCheck.Submission

init, submitRequest

Constructor Detail

AbstractFormSubmission

public AbstractFormSubmission()

Method Detail

removeToken

public void removeToken()

Description copied from interface: XsrfCheck.Submission

Removes the token from the state so that we can test what happens when a "dodgy token" is submitted to an action that is expecting a good token.

Specified by:

removeToken in interface XsrfCheck.Submission

getButton

protected abstract com.meterware.httpunit.SubmitButton getButton()

submitRequest

public com.meterware.httpunit.WebResponse submitRequest(String referer)

Description copied from interface: XsrfCheck.Submission

Submit a request with Referer header set to given value Tester may be not updated with a response, therefore this method returns response that may be used for assertions.

Note: Origin header cannot be set due to an undocumented "feature" of sun.net.www.protocol.http.HttpURLConnection, see allowRestrictedHeaders static field in implementation for details.

Specified by:

submitRequest in interface XsrfCheck.Submission

init

public void init(net.sourceforge.jwebunit.WebTester tester,
                 Navigation navigation,
                 Form form)

Description copied from interface: XsrfCheck.Submission

Initialise the submission with state from the checker.

Specified by:

init in interface XsrfCheck.Submission

Parameters:

tester - web tester

navigation - navigation

form - form