rubygems / rubygems.org

The Ruby community's gem hosting service.
https://rubygems.org
MIT License
2.31k stars 905 forks source link

Ensure verified session for adoption actions #4828

Open martinemde opened 1 week ago

martinemde commented 1 week ago

These actions are protected at the adpotions controller view, but the actual POST and PATCH actions were not protected by the verified session check.

This is based on #4826. I tried to commit this so it wouldn't make an unreadable mess of test indentation changes.

codecov[bot] commented 1 week ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 97.02%. Comparing base (e70188d) to head (4c02050).

Additional details and impacted files ```diff @@ Coverage Diff @@ ## master #4828 +/- ## ======================================= Coverage 97.02% 97.02% ======================================= Files 406 406 Lines 8526 8530 +4 ======================================= + Hits 8272 8276 +4 Misses 254 254 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.