Fix Config::setExtraConfig Config controller csrf issue

Author: cedricalfonsi

composer.json

@@ -2,7 +2,7 @@
   "name": "passbolt/passbolt_selenium_api",
   "description": "Passbolt selenium testing helper endpoints",
   "type": "cakephp-plugin",
-  "version": "2.0",
+  "version": "2.2.0",
   "keywords": [
     "password",
     "passbolt",

config/bootstrap.php

@@ -20,6 +20,7 @@
  * This allow redefining server config on the fly when running integration tests
  */
 if (Configure::read('debug') && Configure::read('passbolt.selenium.active')) {
+    Configure::load('PassboltSeleniumApi.config', 'default', true);
     if (file_exists(TMP . 'selenium' . DS . 'core_extra_config.php')) {
         Configure::config('extra_config', new PhpConfig(TMP . 'selenium' . DS));
         Configure::load('core_extra_config', 'extra_config', true);

config/config.php

@@ -0,0 +1,17 @@
+<?php
+return [
+    'passbolt' => [
+        'plugins' => [
+            'selenium_api' => [
+                'version' => '2.2.0',
+                'security' => [
+                    'csrfProtection' => [
+                        'unlockedActions' => [
+                            'Config' => ['setExtraConfig']
+                        ]
+                    ]
+                ],
+            ]
+        ]
+    ]
+];