Spring/spring-security
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Suppress ArrayIndexOutOfBoundsException in XorCsrfTokenRequestAttributeHandler

Browse Source 
Closes gh-13310
This commit is contained in:
Kevin2Jordan
2023-07-17 09:13:30 +05:30
committed by Josh Cummings
parent 75e0068925
commit e21da061d3
2 changed files with 12 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
web/src/test/java/org/springframework/security/web/csrf/XorCsrfTokenRequestAttributeHandlerTests.java
View File

@@ -208,6 +208,14 @@ public class XorCsrfTokenRequestAttributeHandlerTests {
assertThat(tokenValue).isEqualTo(this.token.getToken());
}
@Test
public void resolveCsrfTokenIsInvalidThenReturnsNull() {
this.request.setParameter(this.token.getParameterName(), XOR_CSRF_TOKEN_VALUE);
CsrfToken csrfToken = new DefaultCsrfToken("headerName", "paramName", "a");
String tokenValue = this.handler.resolveCsrfTokenValue(this.request, csrfToken);
assertThat(tokenValue).isNull();
}
private static Answer<Void> fillByteArray() {
return (invocation) -> {
byte[] bytes = invocation.getArgument(0);