mirror of
https://github.com/TryGhost/Ghost.git
synced 2025-02-03 23:00:14 -05:00
f08a55c21f
refs: https://github.com/TryGhost/Team/issues/856 refs: https://github.com/TryGhost/Team/issues/756 - The .test.js extension is better than _spec.js as it's more obvious that it's an extension - It also meaans we can use the --extension parameter in mocha, which should result in a better default behaviour for `yarn test` - It also highlights that some of our tests were named incorrectly and were not (and still will not be) run (see https://github.com/TryGhost/Team/issues/856) - Note: even with this change, `yarn test` is throwing errors, I believe because of this issue https://github.com/TryGhost/Team/issues/756
45 lines
1.4 KiB
JavaScript
45 lines
1.4 KiB
JavaScript
require('should');
|
|
const sinon = require('sinon');
|
|
const configUtils = require('../../../utils/configUtils');
|
|
const controller = require('../../../../core/server/web/admin/controller');
|
|
|
|
describe('Admin App', function () {
|
|
describe('controller', function () {
|
|
const req = {};
|
|
let res;
|
|
|
|
beforeEach(function () {
|
|
res = {
|
|
sendFile: sinon.spy()
|
|
};
|
|
|
|
configUtils.restore();
|
|
});
|
|
|
|
afterEach(function () {
|
|
sinon.restore();
|
|
});
|
|
|
|
it('adds x-frame-options header when adminFrameProtection is enabled (default)', function () {
|
|
// default config: configUtils.set('adminFrameProtection', true);
|
|
controller(req, res);
|
|
|
|
res.sendFile.called.should.be.true();
|
|
res.sendFile.calledWith(
|
|
sinon.match.string,
|
|
sinon.match.hasNested('headers.X-Frame-Options', sinon.match('sameorigin'))
|
|
).should.be.true();
|
|
});
|
|
|
|
it('doesn\'t add x-frame-options header when adminFrameProtection is disabled', function () {
|
|
configUtils.set('adminFrameProtection', false);
|
|
controller(req, res);
|
|
|
|
res.sendFile.called.should.be.true();
|
|
res.sendFile.calledWith(
|
|
sinon.match.string,
|
|
sinon.match.hasNested('headers.X-Frame-Options')
|
|
).should.be.false();
|
|
});
|
|
});
|
|
});
|