Fixes #165

2016-06-09 22:33:53 -04:00
parent d1874789f2
commit 79c1ddd45d
12 changed files with 13 additions and 25 deletions
@@ -6,7 +6,7 @@ feature 'url access' do
    @normal_user = UserFixture.normal_user
  end

-  scenario 'attack', :js => true do
+  scenario "attack\nTutorial: https://github.com/OWASP/railsgoat/wiki/A7-Missing-Function-Level-Access-Control--(Admin-Controller)", :js => true do
    login @normal_user

    visit '/admin/1/dashboard'