'This covers the case where there is a token but for some reason it
is NOT verified by the web application.'

@attr('ci_fails')
def test_is_token_checked_false(self):

    generator = URL('http://moth/w3af/audit/csrf/vulnerable-token-ignored/')
    http_response = self.uri_opener.GET(generator)
    cookie = Cookie.from_http_response(http_response)
    freq = FuzzableRequest(generator, cookie=cookie)
    original_response = self.uri_opener.send_mutant(freq)
    token = {'token': 'cc2544ba4af772c31bc3da928e4e33a8'}
    checked = self.csrf_plugin._is_token_checked(freq, token, original_response)
    self.assertFalse(checked)
