This commit is contained in:
@@ -159,6 +159,15 @@ def test_job_profile_source_and_application_views(client, user, profile, job, so
|
||||
assert response.status_code == 302
|
||||
assert Feedback.objects.filter(user=user, job=job).exists()
|
||||
|
||||
unsafe_redirect = client.post(
|
||||
reverse("jobs:feedback", kwargs={"pk": job.pk}),
|
||||
{
|
||||
"action": Feedback.Action.INTERESTING,
|
||||
"next": "https://malicious.example/steal-session",
|
||||
},
|
||||
)
|
||||
assert unsafe_redirect.url == reverse("jobs:detail", kwargs={"pk": job.pk})
|
||||
|
||||
assert client.get(reverse("profiles:list")).status_code == 200
|
||||
assert client.get(reverse("profiles:edit", kwargs={"pk": profile.pk})).status_code == 200
|
||||
assert client.get(reverse("sources:list")).status_code == 200
|
||||
|
||||
Reference in New Issue
Block a user