|
Lines 5-11
const branchname = "test_branchname";
Link Here
|
| 5 |
|
5 |
|
| 6 |
function cleanup() { |
6 |
function cleanup() { |
| 7 |
const sql = "DELETE FROM branches WHERE branchcode=?"; |
7 |
const sql = "DELETE FROM branches WHERE branchcode=?"; |
| 8 |
cy.query(sql, branchcode); |
8 |
cy.task("query", { sql, values: [branchcode] }); |
| 9 |
} |
9 |
} |
| 10 |
|
10 |
|
| 11 |
describe("CSRF", () => { |
11 |
describe("CSRF", () => { |
|
Lines 32-41
describe("CSRF", () => {
Link Here
|
| 32 |
.find(".alert") |
32 |
.find(".alert") |
| 33 |
.contains(/No CSRF token passed for POST/); |
33 |
.contains(/No CSRF token passed for POST/); |
| 34 |
|
34 |
|
| 35 |
cy.query( |
35 |
cy.task("query", { |
| 36 |
"SELECT COUNT(*) as count FROM branches WHERE branchcode=?", |
36 |
sql: "SELECT COUNT(*) as count FROM branches WHERE branchcode=?", |
| 37 |
branchcode |
37 |
values: [branchcode], |
| 38 |
).then(result => { |
38 |
}).then(result => { |
| 39 |
expect(result[0].count).to.equal(0); |
39 |
expect(result[0].count).to.equal(0); |
| 40 |
}); |
40 |
}); |
| 41 |
}); |
41 |
}); |
|
Lines 53-62
describe("CSRF", () => {
Link Here
|
| 53 |
.find(".alert") |
53 |
.find(".alert") |
| 54 |
.contains(/Wrong CSRF token/); |
54 |
.contains(/Wrong CSRF token/); |
| 55 |
|
55 |
|
| 56 |
cy.query( |
56 |
cy.task("query", { |
| 57 |
"SELECT COUNT(*) as count FROM branches WHERE branchcode=?", |
57 |
sql: "SELECT COUNT(*) as count FROM branches WHERE branchcode=?", |
| 58 |
branchcode |
58 |
values: [branchcode], |
| 59 |
).then(result => { |
59 |
}).then(result => { |
| 60 |
expect(result[0].count).to.equal(0); |
60 |
expect(result[0].count).to.equal(0); |
| 61 |
}); |
61 |
}); |
| 62 |
}); |
62 |
}); |
|
Lines 89-98
describe("CSRF", () => {
Link Here
|
| 89 |
// We do not want Wrong CSRF token here |
89 |
// We do not want Wrong CSRF token here |
| 90 |
cy.get(".message").should("not.exist"); |
90 |
cy.get(".message").should("not.exist"); |
| 91 |
|
91 |
|
| 92 |
cy.query( |
92 |
cy.task("query", { |
| 93 |
"SELECT COUNT(*) as count FROM branches WHERE branchcode=?", |
93 |
sql: "SELECT COUNT(*) as count FROM branches WHERE branchcode=?", |
| 94 |
branchcode |
94 |
values: [branchcode], |
| 95 |
).then(result => { |
95 |
}).then(result => { |
| 96 |
expect(result[0].count).to.equal(0); |
96 |
expect(result[0].count).to.equal(0); |
| 97 |
}); |
97 |
}); |
| 98 |
}); |
98 |
}); |
|
Lines 112-130
describe("CSRF", () => {
Link Here
|
| 112 |
cy.get("select[name='libraries_length']").select("-1"); |
112 |
cy.get("select[name='libraries_length']").select("-1"); |
| 113 |
cy.get("td").contains(branchcode); |
113 |
cy.get("td").contains(branchcode); |
| 114 |
|
114 |
|
| 115 |
cy.query( |
115 |
cy.task("query", { |
| 116 |
"SELECT COUNT(*) as count FROM branches WHERE branchcode=?", |
116 |
sql: "SELECT COUNT(*) as count FROM branches WHERE branchcode=?", |
| 117 |
branchcode |
117 |
values: [branchcode], |
| 118 |
).then(result => { |
118 |
}).then(result => { |
| 119 |
expect(result[0].count).to.equal(1); |
119 |
expect(result[0].count).to.equal(1); |
| 120 |
}); |
120 |
}); |
| 121 |
}); |
121 |
}); |
| 122 |
|
122 |
|
| 123 |
it("Delete without CSRF", () => { |
123 |
it("Delete without CSRF", () => { |
| 124 |
cy.query("INSERT INTO branches(branchcode, branchname) VALUES (?, ?)", [ |
124 |
cy.task("query", { |
| 125 |
branchcode, |
125 |
sql: "INSERT INTO branches(branchcode, branchname) VALUES (?, ?)", |
| 126 |
branchname, |
126 |
values: [branchcode, branchname], |
| 127 |
]); |
127 |
}); |
| 128 |
|
128 |
|
| 129 |
cy.visit("/cgi-bin/koha/admin/branches.pl"); |
129 |
cy.visit("/cgi-bin/koha/admin/branches.pl"); |
| 130 |
cy.get("select[name='libraries_length']").select("-1"); |
130 |
cy.get("select[name='libraries_length']").select("-1"); |
|
Lines 141-159
describe("CSRF", () => {
Link Here
|
| 141 |
.find(".alert") |
141 |
.find(".alert") |
| 142 |
.contains(/No CSRF token passed for POST/); |
142 |
.contains(/No CSRF token passed for POST/); |
| 143 |
|
143 |
|
| 144 |
cy.query( |
144 |
cy.task("query", { |
| 145 |
"SELECT COUNT(*) as count FROM branches WHERE branchcode=?", |
145 |
sql: "SELECT COUNT(*) as count FROM branches WHERE branchcode=?", |
| 146 |
branchcode |
146 |
values: [branchcode], |
| 147 |
).then(result => { |
147 |
}).then(result => { |
| 148 |
expect(result[0].count).to.equal(1); |
148 |
expect(result[0].count).to.equal(1); |
| 149 |
}); |
149 |
}); |
| 150 |
}); |
150 |
}); |
| 151 |
|
151 |
|
| 152 |
it("Delete", () => { |
152 |
it("Delete", () => { |
| 153 |
cy.query("INSERT INTO branches(branchcode, branchname) VALUES (?, ?)", [ |
153 |
cy.task("query", { |
| 154 |
branchcode, |
154 |
sql: "INSERT INTO branches(branchcode, branchname) VALUES (?, ?)", |
| 155 |
branchname, |
155 |
values: [branchcode, branchname], |
| 156 |
]); |
156 |
}); |
| 157 |
|
157 |
|
| 158 |
cy.visit("/cgi-bin/koha/admin/branches.pl"); |
158 |
cy.visit("/cgi-bin/koha/admin/branches.pl"); |
| 159 |
cy.get("select[name='libraries_length']").select("-1"); |
159 |
cy.get("select[name='libraries_length']").select("-1"); |
|
Lines 165-174
describe("CSRF", () => {
Link Here
|
| 165 |
.find(".alert") |
165 |
.find(".alert") |
| 166 |
.contains(/Library deleted successfully/); |
166 |
.contains(/Library deleted successfully/); |
| 167 |
|
167 |
|
| 168 |
cy.query( |
168 |
cy.task("query", { |
| 169 |
"SELECT COUNT(*) as count FROM branches WHERE branchcode=?", |
169 |
sql: "SELECT COUNT(*) as count FROM branches WHERE branchcode=?", |
| 170 |
branchcode |
170 |
values: [branchcode], |
| 171 |
).then(result => { |
171 |
}).then(result => { |
| 172 |
expect(result[0].count).to.equal(0); |
172 |
expect(result[0].count).to.equal(0); |
| 173 |
}); |
173 |
}); |
| 174 |
}); |
174 |
}); |