1
0
Fork 0
mirror of https://github.com/rails/rails.git synced 2022-11-09 12:12:34 -05:00
rails--rails/actioncable/test/connection
Daniel Colson d092c133c7
Do not allow subscribing to Base channel
Closes #40482

Prior to this commit it was possible to subscribe with
`ActionCable::Channel::Base` as the subscription class. While it doesn't
seem possible to exploit this in away way, it also doesn't seem like
something we need to allow.

This commit swaps [Module#>=][gte] with [Module#>][gt] to prevent
subscribing to a channel when `ActionCable::Channel::Base` is the
subscription class.

[gte]: https://ruby-doc.org/core-2.5.3/Module.html#method-i-3E-3D
[gt]: https://ruby-doc.org/core-2.5.3/Module.html#method-i-3E
2020-11-24 22:30:03 -05:00
..
authorization_test.rb
base_test.rb
client_socket_test.rb
cross_site_forgery_test.rb
identifier_test.rb
multiple_identifiers_test.rb
stream_test.rb
string_identifier_test.rb
subscriptions_test.rb Do not allow subscribing to Base channel 2020-11-24 22:30:03 -05:00
test_case_test.rb