Fixes #165

2016-06-09 22:33:53 -04:00
parent d1874789f2
commit 79c1ddd45d
12 changed files with 13 additions and 25 deletions
@@ -21,7 +21,7 @@ feature 'mass assignment' do
    expect(@normal_user.reload.admin).to be_truthy
  end

-  scenario 'attack two' do
+  scenario 'attack two, Tutorial: https://github.com/OWASP/railsgoat/wiki/R4-Extras-Mass-Assignment-Admin-Role' do
    params = {:user => {:admin => 't',
                        :email => 'hackety@h4x0rs.c0m',
                        :first_name => 'hackety',