thecodingmachine / csrf-header-check-middleware

        $this->assertSame(['alice.com'], $hosts);

    }

    public function testForwardedHostIgnored()

    {

        $request = new ServerRequest([], [], "http://alice.com:8080/hello", "Post");

        $request = $request->withHeader('X-Forwarded-Host', 'eve.com');

        $hostHeader = new HostHeader();

        $hosts = $hostHeader($request);

        $this->assertSame(['alice.com'], $hosts);

    }

    public function testMultipleHostHeaders()

    {

        $headerFetcher($request);

    }

    public function testOriginFetch()

    {

        $request = new ServerRequest([], [], "http://alice.com/hello", "Post");

        $request = $request->withHeader('Origin', 'http://eve.com');

        $headerFetcher = new OriginOrRefererHeader();

        $this->assertSame('eve.com', $headerFetcher($request));

    }

    public function testRefererFetch()

    {

        $this->assertSame('eve.com', $headerFetcher($request));

    }

    public function testRefererFetch()

    {

        $request = new ServerRequest([], [], "http://alice.com/hello", "Post");

        $request = $request->withHeader('Referer', 'http://eve.com/foobar?id=42');

        $headerFetcher = new OriginOrRefererHeader();

        $this->assertSame('eve.com', $headerFetcher($request));

    }

}