Upgraded Ruby to 2.7.0-preview1 and Rails to 6.0.0 - fixed 1 spec

2019-09-09 15:13:29 -04:00
parent 0dcadc065f
commit 23d145129d
12 changed files with 87 additions and 59 deletions
@@ -22,7 +22,7 @@ feature "sql injection" do
      fill_in "user_password_confirmation", with: "hacketyhack"

      # this is a hidden field, so cannot use fill_in to access it.
-      find(:xpath, "//input[@id='user_id']", visible: false).set "8' OR admin='t') --"
+      find(:xpath, "//input[@id='user_id']", visible: false).set "8' OR 1 == 1) --"
    end
    click_on "Submit"