testfunc/test/jstests/test_ajax.html
author David Douard <david.douard@logilab.fr>
Tue, 27 Nov 2012 14:48:03 +0100
branchstable
changeset 8605 797fc2e2fb78
parent 7363 2293c49b290a
permissions -rw-r--r--
[web] add a digital signature to error form (closes #2522526) Simple (and quite weak) implementation of a digital signature of the content to be submited by email in the error report view generated by ErrorView. The signature is a simple hmac hash computed using a secret key (generated at repository startup) and the "secret" form content to be included in the notification email. The controller can then check this content has not been modified or forged by a malicious user.

<html>
  <head>
    <!-- dependencies -->
    <script type="text/javascript" src="../../data/jquery.js"></script>
    <script src="../../data/cubicweb.python.js" type="text/javascript"></script>
    <script src="../../data/cubicweb.js" type="text/javascript"></script>
    <script src="../../data/cubicweb.compat.js" type="text/javascript"></script>
    <script src="../../data/cubicweb.dom.js" type="text/javascript"></script>
    <script src="../../data/cubicweb.htmlhelpers.js" type="text/javascript"></script>
    <script src="../../data/cubicweb.ajax.js" type="text/javascript"></script>
    <!-- qunit files -->
    <script type="text/javascript" src="../../../devtools/data/qunit.js"></script>
    <link rel="stylesheet" type="text/css" media="all" href="../../../devtools/data/qunit.css" />
    <!-- test suite -->
    <script src="cwmock.js" type="text/javascript"></script>
    <script src="test_ajax.js" type="text/javascript"></script>
  </head>
  <body>
    <div id="main"> </div>
    <h1 id="qunit-header">cubicweb.ajax.js functions tests</h1>
    <h2 id="qunit-banner"></h2>
    <ol id="qunit-tests">
  </body>
</html>