| Commit message (Collapse) | Author | Age | Lines |
|---|
| |
|
|
|
|
|
|
|
|
| |
Now that we use global CSRF authenticity checks, searches were logging
logged-in users out as the form is an HTML form, not a Rails-generated
form with a CSRF token. So form submission raised an InvalidAuthenticityToken
error and reset their session. We could generate the form in Rails, but we
also want to minimise the number of non-logged in people who have a
session cookie, so that varnish can cache pages extensively. So we don't
want to put the CSRF token for the search form in everyone's session.
|
| | |
|
| |
|
|
|
|
|
|
| |
Fills in the first “Your e-mail:” field it finds, which could be
the sign _up_ form if the view is overridden to swap the order
of the sign in and sign up forms.
Also compacts a simple conditional on to one line.
|
| | |
|
| |
|
|
|
| |
The third (and any subsequent) session created shares a session id with
the second without this explicit reset.
|
| | |
|
| |
|
|
|
| |
Make specs that depend on multiple controllers and models interacting
integration specs.
|
|
|
Add a failing test for what should happen on request hiding.
|
