From 2030fd881aa08347931c638a90548b16bc188f86 Mon Sep 17 00:00:00 2001 From: Jakub Zych Date: Sun, 11 Oct 2026 02:20:55 +0200 Subject: [PATCH] fix(16.3-03): expect 32 CSRF-gated admin routes after token API Account token create/revoke added two state-changing mounts; update the Phase 10 CSRF walk count so the release gate inventory stays green. Co-authored-by: Cursor --- modules/cabana/phase10_csrf_test.go | 17 +++++++++-------- 1 file changed, 9 insertions(+), 8 deletions(-) diff --git a/modules/cabana/phase10_csrf_test.go b/modules/cabana/phase10_csrf_test.go index 009616b7..8e0306af 100644 --- a/modules/cabana/phase10_csrf_test.go +++ b/modules/cabana/phase10_csrf_test.go @@ -66,14 +66,15 @@ func TestPhase10CSRF(t *testing.T) { } }) } - // refresh, logout, account update, avatar upload and remove, markdown preview, settings put, create, bulk-delete, bulk action, - // widget action, toolbar action, update, delete, record action, link, - // unlink, file - // upload, file reorder, file caption, file remove, relation child - // create, update and delete, pivot update, child file upload, reorder, - // caption and remove, plugin field type upload - if unsafe != 30 { - t.Fatalf("walked %d state-changing routes, want 30: %v", unsafe, router.order) + // refresh, logout, account update, avatar upload and remove, account + // token create and revoke, markdown preview, settings put, create, + // bulk-delete, bulk action, widget action, toolbar action, update, + // delete, record action, link, unlink, file upload, file reorder, file + // caption, file remove, relation child create, update and delete, pivot + // update, child file upload, reorder, caption and remove, plugin field + // type upload + if unsafe != 32 { + t.Fatalf("walked %d state-changing routes, want 32: %v", unsafe, router.order) } loginHandler := router.handlers[login]