Upgraded Ruby to 2.7.0-preview1 and Rails to 6.0.0 - fixed 1 spec
This commit is contained in:
@@ -7,7 +7,7 @@ feature "sensitive data exposure" do
|
||||
|
||||
before do
|
||||
UserFixture.reset_all_users
|
||||
normal_user.work_info.update_attribute(:SSN, user_ssn)
|
||||
normal_user.work_info.update(:SSN, user_ssn)
|
||||
|
||||
pending unless verifying_fixed?
|
||||
end
|
||||
|
||||
@@ -22,7 +22,7 @@ feature "sql injection" do
|
||||
fill_in "user_password_confirmation", with: "hacketyhack"
|
||||
|
||||
# this is a hidden field, so cannot use fill_in to access it.
|
||||
find(:xpath, "//input[@id='user_id']", visible: false).set "8' OR admin='t') --"
|
||||
find(:xpath, "//input[@id='user_id']", visible: false).set "8' OR 1 == 1) --"
|
||||
end
|
||||
click_on "Submit"
|
||||
|
||||
|
||||
Reference in New Issue
Block a user