golem15/summercms
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

test(12.2-05): prove relation child and protected file scoping through the router

Browse Source 
- acme.deferred fixture plugin over testdata/deferred (test-only), two
  controllers, recording Form and Relation hooks, two admins
- TestRelationChildScope*: every child route answers 404 for another
  parent, a hidden parent and another admin's pending child, changes
  nothing; undeclared toolbar buttons 403 before SQL; pivot whitelist
- TestProtectedFile*: foreign, pending and public files 404; only jpeg,
  png, gif and webp inline; nosniff, no-store and sandbox CSP everywhere
This commit is contained in:
Jakub Zych
2026-10-02 20:10:10 +02:00
parent 162a8ec5a1
commit 9d2b1c1848
15 changed files with 1336 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
modules/cabana/testdata/deferred/controllers/gadgets/config_form.yaml vendored Normal file
View File

@@ -0,0 +1,10 @@
name: New gadget
form: ~/plugins/acme/deferred/models/gadget/fields.yaml
modelClass: Gadget
defaultRedirect: acme/deferred/gadgets
create:
redirect: acme/deferred/gadgets/update/:id
redirectClose: acme/deferred/gadgets
update:
redirect: acme/deferred/gadgets
redirectClose: acme/deferred/gadgets