A POST HTTPS request with a missing referer is rejected.
(self)
| 648 | |
| 649 | @override_settings(DEBUG=True) |
| 650 | def test_https_no_referer(self): |
| 651 | """A POST HTTPS request with a missing referer is rejected.""" |
| 652 | req = self._get_POST_request_with_token() |
| 653 | req._is_secure_override = True |
| 654 | mw = CsrfViewMiddleware(post_form_view) |
| 655 | self._check_referer_rejects(mw, req) |
| 656 | response = mw.process_view(req, post_form_view, (), {}) |
| 657 | self.assertContains( |
| 658 | response, |
| 659 | "Referer checking failed - no Referer.", |
| 660 | status_code=403, |
| 661 | ) |
| 662 | |
| 663 | def test_https_malformed_host(self): |
| 664 | """ |
nothing calls this directly
no test coverage detected