Fixes #165

2016-06-09 22:33:53 -04:00
parent d1874789f2
commit 79c1ddd45d
12 changed files with 13 additions and 25 deletions
@@ -19,7 +19,7 @@ feature 'insecure direct object reference' do
    expect(page.response_headers['Content-Length']).to eq('709')
  end

-  scenario 'attack two' do
+  scenario "attack two\nTutorial: https://github.com/OWASP/railsgoat/wiki/A4-Insecure-Direct-Object-Reference" do
    login(@normal_user)

    expect(@normal_user.user_id).not_to eq(2)