lee/changedetection.io
1
0
Fork 0
mirror of https://github.com/dgtlmoon/changedetection.io.git synced 2026-08-25 07:37:14 +00:00
Code Issues Actions 11 Packages Projects Releases Wiki Activity

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

Browse Source
This commit is contained in:
dgtlmoon
2026-08-20 10:59:38 +02:00
parent acc4533f51
commit 89a41c0dda
72 changed files with 407 additions and 358 deletions
Download Patch File Download Diff File Expand all files Collapse all files
changedetectionio/tests/plugins/test_processor.py
+2 -2
View File
@@ -22,7 +22,7 @@ def test_check_plugin_processor(client, live_server, measure_memory_usage, datas
follow_redirects=True
)
assert b"Watch added" in res.data
client.get(url_for("ui.form_watch_checknow"), follow_redirects=True)
client.post(url_for("ui.form_watch_checknow"), follow_redirects=True)
wait_for_all_checks(client)
@@ -39,7 +39,7 @@ def test_check_plugin_processor(client, live_server, measure_memory_usage, datas
# Now change it to something that doesnt exist
uuid = next(iter(live_server.app.config['DATASTORE'].data['watching']))
live_server.app.config['DATASTORE'].data['watching'][uuid]['processor'] = "now_missing"
client.get(url_for("ui.form_watch_checknow"), follow_redirects=True)
client.post(url_for("ui.form_watch_checknow"), follow_redirects=True)
wait_for_all_checks(client)
res = client.get(url_for("watchlist.index"))
assert b"Exception: Processor module" in res.data and b'now_missing' in res.data, f'Should register that the plugin is missing for {uuid}'