Lines 5-11
const branchname = "test_branchname";
Link Here
|
5 |
|
5 |
|
6 |
function cleanup() { |
6 |
function cleanup() { |
7 |
const sql = "DELETE FROM branches WHERE branchcode=?"; |
7 |
const sql = "DELETE FROM branches WHERE branchcode=?"; |
8 |
cy.query(sql, branchcode); |
8 |
cy.task("query", { sql, values: [branchcode] }); |
9 |
} |
9 |
} |
10 |
|
10 |
|
11 |
describe("CSRF", () => { |
11 |
describe("CSRF", () => { |
Lines 32-41
describe("CSRF", () => {
Link Here
|
32 |
.find(".alert") |
32 |
.find(".alert") |
33 |
.contains(/No CSRF token passed for POST/); |
33 |
.contains(/No CSRF token passed for POST/); |
34 |
|
34 |
|
35 |
cy.query( |
35 |
cy.task("query", { |
36 |
"SELECT COUNT(*) as count FROM branches WHERE branchcode=?", |
36 |
sql: "SELECT COUNT(*) as count FROM branches WHERE branchcode=?", |
37 |
branchcode |
37 |
values: [branchcode], |
38 |
).then(result => { |
38 |
}).then(result => { |
39 |
expect(result[0].count).to.equal(0); |
39 |
expect(result[0].count).to.equal(0); |
40 |
}); |
40 |
}); |
41 |
}); |
41 |
}); |
Lines 53-62
describe("CSRF", () => {
Link Here
|
53 |
.find(".alert") |
53 |
.find(".alert") |
54 |
.contains(/Wrong CSRF token/); |
54 |
.contains(/Wrong CSRF token/); |
55 |
|
55 |
|
56 |
cy.query( |
56 |
cy.task("query", { |
57 |
"SELECT COUNT(*) as count FROM branches WHERE branchcode=?", |
57 |
sql: "SELECT COUNT(*) as count FROM branches WHERE branchcode=?", |
58 |
branchcode |
58 |
values: [branchcode], |
59 |
).then(result => { |
59 |
}).then(result => { |
60 |
expect(result[0].count).to.equal(0); |
60 |
expect(result[0].count).to.equal(0); |
61 |
}); |
61 |
}); |
62 |
}); |
62 |
}); |
Lines 89-98
describe("CSRF", () => {
Link Here
|
89 |
// We do not want Wrong CSRF token here |
89 |
// We do not want Wrong CSRF token here |
90 |
cy.get(".message").should("not.exist"); |
90 |
cy.get(".message").should("not.exist"); |
91 |
|
91 |
|
92 |
cy.query( |
92 |
cy.task("query", { |
93 |
"SELECT COUNT(*) as count FROM branches WHERE branchcode=?", |
93 |
sql: "SELECT COUNT(*) as count FROM branches WHERE branchcode=?", |
94 |
branchcode |
94 |
values: [branchcode], |
95 |
).then(result => { |
95 |
}).then(result => { |
96 |
expect(result[0].count).to.equal(0); |
96 |
expect(result[0].count).to.equal(0); |
97 |
}); |
97 |
}); |
98 |
}); |
98 |
}); |
Lines 112-130
describe("CSRF", () => {
Link Here
|
112 |
cy.get("select[name='libraries_length']").select("-1"); |
112 |
cy.get("select[name='libraries_length']").select("-1"); |
113 |
cy.get("td").contains(branchcode); |
113 |
cy.get("td").contains(branchcode); |
114 |
|
114 |
|
115 |
cy.query( |
115 |
cy.task("query", { |
116 |
"SELECT COUNT(*) as count FROM branches WHERE branchcode=?", |
116 |
sql: "SELECT COUNT(*) as count FROM branches WHERE branchcode=?", |
117 |
branchcode |
117 |
values: [branchcode], |
118 |
).then(result => { |
118 |
}).then(result => { |
119 |
expect(result[0].count).to.equal(1); |
119 |
expect(result[0].count).to.equal(1); |
120 |
}); |
120 |
}); |
121 |
}); |
121 |
}); |
122 |
|
122 |
|
123 |
it("Delete without CSRF", () => { |
123 |
it("Delete without CSRF", () => { |
124 |
cy.query("INSERT INTO branches(branchcode, branchname) VALUES (?, ?)", [ |
124 |
cy.task("query", { |
125 |
branchcode, |
125 |
sql: "INSERT INTO branches(branchcode, branchname) VALUES (?, ?)", |
126 |
branchname, |
126 |
values: [branchcode, branchname], |
127 |
]); |
127 |
}); |
128 |
|
128 |
|
129 |
cy.visit("/cgi-bin/koha/admin/branches.pl"); |
129 |
cy.visit("/cgi-bin/koha/admin/branches.pl"); |
130 |
cy.get("select[name='libraries_length']").select("-1"); |
130 |
cy.get("select[name='libraries_length']").select("-1"); |
Lines 141-159
describe("CSRF", () => {
Link Here
|
141 |
.find(".alert") |
141 |
.find(".alert") |
142 |
.contains(/No CSRF token passed for POST/); |
142 |
.contains(/No CSRF token passed for POST/); |
143 |
|
143 |
|
144 |
cy.query( |
144 |
cy.task("query", { |
145 |
"SELECT COUNT(*) as count FROM branches WHERE branchcode=?", |
145 |
sql: "SELECT COUNT(*) as count FROM branches WHERE branchcode=?", |
146 |
branchcode |
146 |
values: [branchcode], |
147 |
).then(result => { |
147 |
}).then(result => { |
148 |
expect(result[0].count).to.equal(1); |
148 |
expect(result[0].count).to.equal(1); |
149 |
}); |
149 |
}); |
150 |
}); |
150 |
}); |
151 |
|
151 |
|
152 |
it("Delete", () => { |
152 |
it("Delete", () => { |
153 |
cy.query("INSERT INTO branches(branchcode, branchname) VALUES (?, ?)", [ |
153 |
cy.task("query", { |
154 |
branchcode, |
154 |
sql: "INSERT INTO branches(branchcode, branchname) VALUES (?, ?)", |
155 |
branchname, |
155 |
values: [branchcode, branchname], |
156 |
]); |
156 |
}); |
157 |
|
157 |
|
158 |
cy.visit("/cgi-bin/koha/admin/branches.pl"); |
158 |
cy.visit("/cgi-bin/koha/admin/branches.pl"); |
159 |
cy.get("select[name='libraries_length']").select("-1"); |
159 |
cy.get("select[name='libraries_length']").select("-1"); |
Lines 165-174
describe("CSRF", () => {
Link Here
|
165 |
.find(".alert") |
165 |
.find(".alert") |
166 |
.contains(/Library deleted successfully/); |
166 |
.contains(/Library deleted successfully/); |
167 |
|
167 |
|
168 |
cy.query( |
168 |
cy.task("query", { |
169 |
"SELECT COUNT(*) as count FROM branches WHERE branchcode=?", |
169 |
sql: "SELECT COUNT(*) as count FROM branches WHERE branchcode=?", |
170 |
branchcode |
170 |
values: [branchcode], |
171 |
).then(result => { |
171 |
}).then(result => { |
172 |
expect(result[0].count).to.equal(0); |
172 |
expect(result[0].count).to.equal(0); |
173 |
}); |
173 |
}); |
174 |
}); |
174 |
}); |