clean up insecure_dor_spec

2019-11-20 09:24:24 -05:00
parent 18433833d3
commit d82ff9a66a
1 changed files with 1 additions and 1 deletions
@@ -18,7 +18,7 @@ feature "insecure direct object reference" do
    visit download_url.sub(/name=(.*?)&/, "name=config/database.yml&")

    expect(page.status_code).not_to eq(200)
-    expect(page.response_headers["Content-Disposition"]).not_to include("database.yml")
+    expect(page.response_headers["Content-Disposition"].to_a).not_to include("database.yml")
  end

  scenario "attack two\nTutorial: https://github.com/OWASP/railsgoat/wiki/A4-Insecure-Direct-Object-Reference" do