2014-06-14 21:48:43 +05:30
|
|
|
require 'spec_helper'
|
|
|
|
|
|
|
|
|
|
describe 'admin/lodgings/index' do
|
|
|
|
|
it 'renders lodgings list' do
|
|
|
|
|
@conference = create(:conference)
|
|
|
|
|
@conference.venue = create(:venue)
|
2014-11-20 14:57:03 +01:00
|
|
|
@conference.lodgings << create(:lodging)
|
2014-06-14 21:48:43 +05:30
|
|
|
assign :venue, @conference.venue
|
|
|
|
|
render
|
2016-05-02 17:39:06 +02:00
|
|
|
expect(rendered).to include(CGI.escapeHTML(@conference.lodgings.first.name))
|
2014-06-14 21:48:43 +05:30
|
|
|
end
|
2017-01-09 12:27:11 -06:00
|
|
|
|
|
|
|
|
it 'prevents XSS in lodging description' do
|
|
|
|
|
@conference = create(:conference)
|
|
|
|
|
@conference.venue = create(:venue)
|
|
|
|
|
@conference.lodgings << create(:lodging_xss)
|
|
|
|
|
assign :venue, @conference.venue
|
|
|
|
|
render
|
|
|
|
|
expect(rendered).to_not have_selector('#divInjectedElement')
|
|
|
|
|
end
|
|
|
|
|
|
2014-06-14 21:48:43 +05:30
|
|
|
end
|