team-alpha/railsgoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

clean up insecure_dor_spec

Browse Source
This commit is contained in:
Nicole Rifkin
2019-11-20 09:24:24 -05:00
parent 18433833d3
commit d82ff9a66a
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
spec/vulnerabilities/insecure_dor_spec.rb
+1 -1
View File
@@ -18,7 +18,7 @@ feature "insecure direct object reference" do
visit download_url.sub(/name=(.*?)&/, "name=config/database.yml&") visit download_url.sub(/name=(.*?)&/, "name=config/database.yml&")
expect(page.status_code).not_to eq(200) expect(page.status_code).not_to eq(200)
expect(page.response_headers["Content-Disposition"]).not_to include("database.yml") expect(page.response_headers["Content-Disposition"].to_a).not_to include("database.yml")
end end
scenario "attack two\nTutorial: https://github.com/OWASP/railsgoat/wiki/A4-Insecure-Direct-Object-Reference" do scenario "attack two\nTutorial: https://github.com/OWASP/railsgoat/wiki/A4-Insecure-Direct-Object-Reference" do