summercms/modules/cabana/testdata/deferred/controllers/locked/config_form.yaml at master - summercms - Golem15 Repositories

golem15/summercms

Files

Jakub Zych 9d2b1c1848 test(12.2-05): prove relation child and protected file scoping through the router

- acme.deferred fixture plugin over testdata/deferred (test-only), two
  controllers, recording Form and Relation hooks, two admins
- TestRelationChildScope*: every child route answers 404 for another
  parent, a hidden parent and another admin's pending child, changes
  nothing; undeclared toolbar buttons 403 before SQL; pivot whitelist
- TestProtectedFile*: foreign, pending and public files 404; only jpeg,
  png, gif and webp inline; nosniff, no-store and sandbox CSP everywhere

2026-10-02 20:10:10 +02:00

9 lines

234 B

YAML

Raw Permalink Blame History

 name: New gadget
 form: ~/plugins/acme/deferred/models/gadget/locked_fields.yaml
 modelClass: Gadget
 defaultRedirect: acme/deferred/locked
 create:
     redirect: acme/deferred/locked/update/:id
 update:
     redirect: acme/deferred/locked