this reduces the error but we still need to rescue the file not found error. for another day.

2013-10-23 18:27:11 -04:00
parent 7c1d52320a
commit 01458fb0f5
1 changed files with 1 additions and 1 deletions
@@ -15,7 +15,7 @@ feature 'command injection' do

    visit "/users/#{@normal_user.user_id}/benefit_forms"
    Dir.mktmpdir do |dir|
-      hackety_file = File.join(dir, 'test.txt; cd public && cd data && rm -f * ;')
+      hackety_file = File.join(dir, 'etc/passwd; cd public && cd data && rm -f * ;')
      File.open(hackety_file, 'w') { |f| f.print 'mwahaha' }
      within('.new_benefits') do
        attach_file 'benefits_upload', hackety_file