team-alpha/railsgoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fixed broken spec test by changing the reference to an incorrect location when downloading the database.yml file

Browse Source
This commit is contained in:
cktricky
2014-04-17 20:17:33 -04:00
parent 4bff205e81
commit c157496b1e
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
spec/vulnerabilities/insecure_dor_spec.rb
+1 -1
View File
@@ -11,7 +11,7 @@ feature 'insecure direct object reference' do
visit "/users/#{@normal_user.user_id}/benefit_forms" visit "/users/#{@normal_user.user_id}/benefit_forms"
download_url = first('.widget-body a')[:href] download_url = first('.widget-body a')[:href]
visit download_url.sub(/name=(.*?)&/, 'name=../../config/database.yml&') visit download_url.sub(/name=(.*?)&/, 'name=config/database.yml&')
pending(:if => verifying_fixed?) { pending(:if => verifying_fixed?) {
page.status_code.should == 200 page.status_code.should == 200