Post has precedence

klapuch · Nov 19, 2016 · 37b5664 · 37b5664
1 parent 3ea9613
commit 37b5664
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/Core/StoredCsrf.php b/Core/StoredCsrf.php
@@ -58,6 +58,6 @@ private function solid(string $token): bool {
 	 * @return string
 	 */
 	private function twin(): string {
-		return ($this->get + $this->post)[self::NAME] ?? self::INVALID_TOKEN;
+		return ($this->post + $this->get)[self::NAME] ?? self::INVALID_TOKEN;
 	}
 }
diff --git a/Tests/Unit/StoredCsrf.phpt b/Tests/Unit/StoredCsrf.phpt
@@ -128,10 +128,10 @@ final class StoredCsrf extends Tester\TestCase {
 		Assert::true($csrf->abused());
 	}
 
-	public function testMatchingGetWithPrecedence() {
+	public function testMatchingPostWithPrecedence() {
 		$this->session[Csrf\Csrf::NAME] = str_repeat('a', 22);
-		$this->get[Csrf\Csrf::NAME] = str_repeat('a', 22);
-		$this->post[Csrf\Csrf::NAME] = str_repeat('b', 30);
+		$this->get[Csrf\Csrf::NAME] = str_repeat('b', 30);
+		$this->post[Csrf\Csrf::NAME] = str_repeat('a', 22);
 		$csrf = new Csrf\StoredCsrf($this->session, $this->post, $this->get);
 		Assert::false($csrf->abused());
 	}