From 40ed0deb658d89172d072f07633358f65fcf73e5 Mon Sep 17 00:00:00 2001 From: Jonathan Druart Date: Tue, 10 Feb 2026 21:14:57 +0100 Subject: [PATCH] Bug 41812: Adjust find-missing-csrf.t test to ignore csrf input from JS This code injected the csrf token using the TT include file, that made pass xt/find-missing-csrf.t This bug removed the TT tags from the script tags, and we now need to use a JS variable and retrieve the csrf token from the meta tag. This patch suggests to adjust the script to ignore this case. We could also rewrite the whole JS code and use built the HTML elements using vanilla JS but that's for another day... Signed-off-by: Lucas Gass Signed-off-by: Nick Clemens --- xt/find-missing-csrf.t | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/xt/find-missing-csrf.t b/xt/find-missing-csrf.t index dd229e6eed9..5e08fce88d1 100755 --- a/xt/find-missing-csrf.t +++ b/xt/find-missing-csrf.t @@ -50,7 +50,9 @@ sub check_csrf_in_forms { for my $line (@lines) { $line_number++; $open = $line_number if $line =~ m{}; if ( $open && $line =~ m{