From b570cd5a1ea8917f44e5640c8ad8d0dae404007e Mon Sep 17 00:00:00 2001
From: Oleksandr Redko <oleksandr.red+github@gmail.com>
Date: Thu, 20 Mar 2025 14:34:45 +0200
Subject: [PATCH] =?UTF-8?q?=F0=9F=9A=A8=20test:=20uncomment=20test=20and?=
 =?UTF-8?q?=20mark=20it=20with=20t.SkipNow?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 middleware/csrf/csrf_test.go | 83 ++++++++++++++++++------------------
 1 file changed, 42 insertions(+), 41 deletions(-)

diff --git a/middleware/csrf/csrf_test.go b/middleware/csrf/csrf_test.go
index 090082f4..e68c6637 100644
--- a/middleware/csrf/csrf_test.go
+++ b/middleware/csrf/csrf_test.go
@@ -1331,56 +1331,57 @@ func Test_CSRF_Cookie_Injection_Exploit(t *testing.T) {
 }
 
 // TODO: use this test case and make the unsafe header value bug from https://github.com/gofiber/fiber/issues/2045 reproducible and permanently fixed/tested by this testcase
-// func Test_CSRF_UnsafeHeaderValue(t *testing.T) {
-//  t.Parallel()
-// 	app := fiber.New()
+func Test_CSRF_UnsafeHeaderValue(t *testing.T) {
+	t.SkipNow()
+	t.Parallel()
+	app := fiber.New()
 
-// 	app.Use(New())
-// 	app.Get("/", func(c fiber.Ctx) error {
-// 		return c.SendStatus(fiber.StatusOK)
-// 	})
-// 	app.Get("/test", func(c fiber.Ctx) error {
-// 		return c.SendStatus(fiber.StatusOK)
-// 	})
-// 	app.Post("/", func(c fiber.Ctx) error {
-// 		return c.SendStatus(fiber.StatusOK)
-// 	})
+	app.Use(New())
+	app.Get("/", func(c fiber.Ctx) error {
+		return c.SendStatus(fiber.StatusOK)
+	})
+	app.Get("/test", func(c fiber.Ctx) error {
+		return c.SendStatus(fiber.StatusOK)
+	})
+	app.Post("/", func(c fiber.Ctx) error {
+		return c.SendStatus(fiber.StatusOK)
+	})
 
-// 	resp, err := app.Test(httptest.NewRequest(fiber.MethodGet, "/", nil))
-// 	require.NoError(t, err)
-// 	require.Equal(t, fiber.StatusOK, resp.StatusCode)
+	resp, err := app.Test(httptest.NewRequest(fiber.MethodGet, "/", nil))
+	require.NoError(t, err)
+	require.Equal(t, fiber.StatusOK, resp.StatusCode)
 
-// 	var token string
-// 	for _, c := range resp.Cookies() {
-// 		if c.Name != ConfigDefault.CookieName {
-// 			continue
-// 		}
-// 		token = c.Value
-// 		break
-// 	}
+	var token string
+	for _, c := range resp.Cookies() {
+		if c.Name != ConfigDefault.CookieName {
+			continue
+		}
+		token = c.Value
+		break
+	}
 
-// 	fmt.Println("token", token)
+	t.Log("token", token)
 
-// 	getReq := httptest.NewRequest(fiber.MethodGet, "/", nil)
-// 	getReq.Header.Set(HeaderName, token)
-// 	resp, err = app.Test(getReq)
+	getReq := httptest.NewRequest(fiber.MethodGet, "/", nil)
+	getReq.Header.Set(HeaderName, token)
+	resp, err = app.Test(getReq)
 
-// 	getReq = httptest.NewRequest(fiber.MethodGet, "/test", nil)
-// 	getReq.Header.Set("X-Requested-With", "XMLHttpRequest")
-// 	getReq.Header.Set(fiber.HeaderCacheControl, "no")
-// 	getReq.Header.Set(HeaderName, token)
+	getReq = httptest.NewRequest(fiber.MethodGet, "/test", nil)
+	getReq.Header.Set("X-Requested-With", "XMLHttpRequest")
+	getReq.Header.Set(fiber.HeaderCacheControl, "no")
+	getReq.Header.Set(HeaderName, token)
 
-// 	resp, err = app.Test(getReq)
+	resp, err = app.Test(getReq)
 
-// 	getReq.Header.Set(fiber.HeaderAccept, "*/*")
-// 	getReq.Header.Del(HeaderName)
-// 	resp, err = app.Test(getReq)
+	getReq.Header.Set(fiber.HeaderAccept, "*/*")
+	getReq.Header.Del(HeaderName)
+	resp, err = app.Test(getReq)
 
-// 	postReq := httptest.NewRequest(fiber.MethodPost, "/", nil)
-// 	postReq.Header.Set("X-Requested-With", "XMLHttpRequest")
-// 	postReq.Header.Set(HeaderName, token)
-// 	resp, err = app.Test(postReq)
-// }
+	postReq := httptest.NewRequest(fiber.MethodPost, "/", nil)
+	postReq.Header.Set("X-Requested-With", "XMLHttpRequest")
+	postReq.Header.Set(HeaderName, token)
+	resp, err = app.Test(postReq)
+}
 
 // go test -v -run=^$ -bench=Benchmark_Middleware_CSRF_Check -benchmem -count=4
 func Benchmark_Middleware_CSRF_Check(b *testing.B) {