Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jcerjak plip10359 security controlpanel #329

Merged
merged 5 commits into from
Dec 14, 2014

Conversation

tisto
Copy link
Member

@tisto tisto commented Dec 14, 2014

No description provided.

>>> self.assertFalse('Changes saved.' in browser.contents)
>>> browser.open('http://nohost/plone/logout')

A >>> browser.open('http://nohost/plone/@@personal-information')
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@vangheem We moved the security control panel to use the plone.app.registry-based control panels (#216). It seems this breaks the csrf protection, so I had to comment out that test. The _authenticator form field is present. Though, it seems it does not have any effect what value it holds. Would you mind having a look or give us some pointers how we could fix that? cc @jcerjak

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@vangheem Is it possible that the csrf protection never has been implemented for plone.app.registry?

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@tisto , are you talking about this test? These lines that we're commenting on seem to work now: 5976ace

tisto added a commit that referenced this pull request Dec 14, 2014
…panel

Jcerjak plip10359 security controlpanel
@tisto tisto merged commit 659fa5c into master Dec 14, 2014
@tisto tisto deleted the jcerjak-plip10359-security-controlpanel branch December 14, 2014 20:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants