from pyramid import httpexceptions as exc
from pyramid.view import view_config

### True positives ###


@view_config(route_name='my_view')
def my_bad_view1(request):
    response = request.response
    response.set_cookie('MY_COOKIE', value='MY_COOKIE_VALUE',
                        # ruleid: pyramid-set-cookie-httponly-unsafe-value
                        httponly=True, secure=True)
    return {'foo': 'bar'}


@view_config(route_name='my_view')
def my_bad_view3(request):
    resp = exc.HTTPFound(location=request.referer or request.application_url)
    resp.set_cookie('MY_COOKIE', value='MY_COOKIE_VALUE',
                    # ruleid: pyramid-set-cookie-httponly-unsafe-value
                    secure=True, httponly=True)
    return resp


### True negatives ###

@view_config(route_name='my_view')
def my_good_view1(request):
    response = request.response
    # ok: pyramid-set-cookie-httponly-unsafe-value
    response.set_cookie('MY_COOKIE', value='MY_COOKIE_VALUE',
                        secure=True, httponly=True)
    return {'foo': 'bar'}


@view_config(route_name='my_view')
def my_good_view2(request):
    resp = exc.HTTPFound(location=request.referer or request.application_url)
    # ok: pyramid-set-cookie-httponly-unsafe-value
    resp.set_cookie('MY_COOKIE', secure=True,
                    httponly=True, value='MY_COOKIE_VALUE')
    return resp


@view_config(route_name='my_view')
def my_good_view3(request):
    resp = exc.HTTPFound(location=request.referer or request.application_url)
    # ok: pyramid-set-cookie-httponly-unsafe-value
    resp.set_cookie('MY_COOKIE', value='MY_COOKIE_VALUE',
                    **global_cookie_flags)
    return resp