tests are working again, I will work on surpressing the errors. Also merged @jasnow work
This commit is contained in:
@@ -15,7 +15,7 @@ feature 'command injection' do
|
||||
|
||||
visit "/users/#{@normal_user.user_id}/benefit_forms"
|
||||
Dir.mktmpdir do |dir|
|
||||
hackety_file = File.join(dir, 'etc/passwd; cd public && cd data && rm -f * ;')
|
||||
hackety_file = File.join(dir, 'test; cd public && cd data && rm -f * ;')
|
||||
File.open(hackety_file, 'w') { |f| f.print 'mwahaha' }
|
||||
within('.new_benefits') do
|
||||
attach_file 'benefits_upload', hackety_file
|
||||
@@ -25,4 +25,4 @@ feature 'command injection' do
|
||||
end
|
||||
pending(:if => verifying_fixed?) { File.exists?(legit_file).should be_false }
|
||||
end
|
||||
end
|
||||
end
|
||||
Reference in New Issue
Block a user