Skip to content

LG-6992: resolve secure header issues#6625

Merged
mitchellhenke merged 8 commits intomainfrom
LG-6992-allow-redirect-back-safely
Jul 27, 2022
Merged

LG-6992: resolve secure header issues#6625
mitchellhenke merged 8 commits intomainfrom
LG-6992-allow-redirect-back-safely

Conversation

@mdiarra3
Copy link
Copy Markdown
Contributor

@mdiarra3 mdiarra3 commented Jul 25, 2022

@mdiarra3 mdiarra3 requested review from a team and mitchellhenke July 25, 2022 19:00
@mdiarra3 mdiarra3 force-pushed the LG-6992-allow-redirect-back-safely branch from 9f7e4c2 to c51c911 Compare July 25, 2022 19:15
Copy link
Copy Markdown
Contributor

@zachmargolis zachmargolis left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. Did something silently fail by not including these mixins? Can we turn that into an error so we catch that earlier?

require 'rails_helper'

describe Users::AdditionalMfaRequiredController do
render_views
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

render_views can slow down tests a bunch, is it possible to add this only in certain contexts or certain specs? ex the ones that check for redirects?

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yep!

@mitchellhenke mitchellhenke force-pushed the LG-6992-allow-redirect-back-safely branch from 0715968 to c23082f Compare July 27, 2022 14:21
@mitchellhenke mitchellhenke merged commit 6650d8e into main Jul 27, 2022
@mitchellhenke mitchellhenke deleted the LG-6992-allow-redirect-back-safely branch July 27, 2022 15:19
mitchellhenke pushed a commit that referenced this pull request Jul 27, 2022
* changelog: Bug Fixes, Authentication, Fix redirect bugs related to regenerating backup codes and add Content Security Policy headers to when user skips adding MFA (LG-6992)

Co-authored-by: Mitchell Henke <mitchell.henke@gsa.gov>
@solipet solipet mentioned this pull request Aug 9, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants