silverstripe / cwp-core

CWP basic compatibility module
BSD 3-Clause "New" or "Revised" License
3 stars 12 forks source link

Use a framework-safe URL in XSS header tests when no CMS is installed #29

Closed robbieaverill closed 6 years ago

robbieaverill commented 6 years ago

This module and cwp/cwp-recipe-core recipe don't include the CMS, and the errorpage module is included by recipe-cms so this breaks the tests when it tries to render a 404 on /test. Security/* is a framework path, so is safer to use for testing

madmatt commented 6 years ago

Nice one - thanks!