Merged 5.2.N (5.2.2) to HEAD (5.2)

135685 jvonka: Merged 5.1.N (5.1.3) to 5.2.N (5.2.1)
      135683 jvonka: Merged 5.0.N (5.0.5) to 5.1.N (5.1.3)
         135681 jvonka: Merged V4.2-BUG-FIX (4.2.8) to 5.0.N (5.0.5)
            135658 jvonka: Merged 5.0.N (5.0.5) to V4.2-BUG-FIX (4.2.8)
                REPO-2110 / MNT-17477: CMIS: SXSS+CSRF vulnerability (browser binding)
                     - tweak test (for unexpected NPE in 4.2)
                     - resolve backport conflict


git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@137410 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
This commit is contained in:
Andrei Rebegea
2017-06-14 17:08:19 +00:00
parent 04a0ef631c
commit 66c9e10176

View File

@@ -2424,17 +2424,17 @@ public class TestCMIS extends EnterpriseTestApi
// note: Content-Disposition will always be "attachment" for content types that are not white-listed // note: Content-Disposition will always be "attachment" for content types that are not white-listed
response = publicApiClient.get("/"+network1.getId()+"/public/cmis/versions/1.1/browser/root/Shared/"+name, null); response = publicApiClient.get("/"+network1.getId()+"/public/cmis/versions/1.1/browser/root/Shared/"+name, null);
assertTrue(response.getHeaders().get("Content-Disposition").startsWith("attachment;"));
assertEquals(200, response.getStatusCode()); assertEquals(200, response.getStatusCode());
assertTrue(response.getHeaders().get("Content-Disposition").startsWith("attachment;"));
response = publicApiClient.get("/"+network1.getId()+"/public/cmis/versions/1.1/browser/root/Shared/"+name+"?download=inline", null); response = publicApiClient.get("/"+network1.getId()+"/public/cmis/versions/1.1/browser/root/Shared/"+name+"?download=inline", null);
assertTrue(response.getHeaders().get("Content-Disposition").startsWith("attachment;"));
assertEquals(200, response.getStatusCode()); assertEquals(200, response.getStatusCode());
assertTrue(response.getHeaders().get("Content-Disposition").startsWith("attachment;"));
// note: AtomPub binding (via OpenCMIS) does not support "download" query parameter // note: AtomPub binding (via OpenCMIS) does not support "download" query parameter
response = publicApiClient.get("/"+network1.getId()+"/public/cmis/versions/1.1/atom/content?id="+docId, null); response = publicApiClient.get("/"+network1.getId()+"/public/cmis/versions/1.1/atom/content?id="+docId, null);
assertTrue(response.getHeaders().get("Content-Disposition").startsWith("attachment;"));
assertEquals(200, response.getStatusCode()); assertEquals(200, response.getStatusCode());
assertTrue(response.getHeaders().get("Content-Disposition").startsWith("attachment;"));
} }
/** /**