- acme.deferred fixture plugin over testdata/deferred (test-only), two controllers, recording Form and Relation hooks, two admins - TestRelationChildScope*: every child route answers 404 for another parent, a hidden parent and another admin's pending child, changes nothing; undeclared toolbar buttons 403 before SQL; pivot whitelist - TestProtectedFile*: foreign, pending and public files 404; only jpeg, png, gif and webp inline; nosniff, no-store and sandbox CSP everywhere
11 lines
312 B
YAML
11 lines
312 B
YAML
name: New gadget
|
|
form: ~/plugins/acme/deferred/models/gadget/fields.yaml
|
|
modelClass: Gadget
|
|
defaultRedirect: acme/deferred/gadgets
|
|
create:
|
|
redirect: acme/deferred/gadgets/update/:id
|
|
redirectClose: acme/deferred/gadgets
|
|
update:
|
|
redirect: acme/deferred/gadgets
|
|
redirectClose: acme/deferred/gadgets
|