What happens with the Action Controller::InvalidCrossOriginRequest only in the Rails test case?

class SubmissionsControllerTest < ActionController::TestCase
    ...
    test "You can get a submission list" do
        get :index, tryout_id: @tryout.id,  format: :js
    end
end

Minitest::UnexpectedError: ActionController::InvalidCrossOriginRequest: Security warning: an embedded <script> tag on another site requested protected JavaScript. If you know what you're doing, go ahead and disable forgery protection on this action to permit cross-origin JavaScript embedding.