Files
railsgoat/spec/vulnerabilities/url_access_spec.rb
T
2016-04-14 17:34:27 -04:00

17 lines
327 B
Ruby

require 'spec_helper'
feature 'url access' do
before do
UserFixture.reset_all_users
@normal_user = UserFixture.normal_user
end
scenario 'attack', :js => true do
login @normal_user
visit '/admin/1/dashboard'
pending if verifying_fixed?
expect(current_path).to eq('/admin/1/dashboard')
end
end