mirror of
https://github.com/rcourtman/Pulse.git
synced 2026-09-11 22:12:23 +00:00
c82e3d5bb3
Add comprehensive tests for the CheckCSRF function covering: - Safe methods (GET, HEAD, OPTIONS) bypass - API token authentication bypass - Basic auth bypass - No session cookie handling - Missing CSRF token rejection with new token issuance - Invalid CSRF token rejection with new token issuance - CSRF token from FormValue - Unsafe methods (POST, PUT, DELETE, PATCH) enforcement Coverage: CheckCSRF 32.0% → 96.0% Coverage: API package 30.5% → 30.7%