Escape HTML some factory strings

spec/views/admin/conference/index.html.haml_spec.rb

@@ -8,6 +8,6 @@ describe 'admin/conference/index' do
     assign(:conferences, [conference, second_conference])
     render
     expect(rendered).to include('openSUSE Conference 2016')
-    expect(rendered).to include(second_conference.title)
+    expect(rendered).to include(CGI.escapeHTML(second_conference.title))
   end
 end

spec/views/admin/conference/new.html.haml_spec.rb

@@ -9,6 +9,6 @@ describe 'admin/conference/new' do
     expect(rendered).to include('Basic Information')
     assign(:conference, conference)
     render
-    expect(rendered).to include(conference.title)
+    expect(rendered).to include(CGI.escapeHTML(conference.title))
   end
 end

spec/views/admin/lodgings/index.html.haml_spec.rb

@@ -7,6 +7,6 @@ describe 'admin/lodgings/index' do
     @conference.lodgings << create(:lodging)
     assign :venue, @conference.venue
     render
-    expect(rendered).to include(@conference.lodgings.first.name)
+    expect(rendered).to include(CGI.escapeHTML(@conference.lodgings.first.name))
   end
 end

spec/views/admin/sponsors/index.html.haml_spec.rb

@@ -9,9 +9,9 @@ describe 'admin/sponsors/index' do
                                              )
     assign :conference, @conference
     render
-    expect(rendered).to include(@conference.sponsors.first.name)
+    expect(rendered).to include(CGI.escapeHTML(@conference.sponsors.first.name))
     expect(rendered).to include(@conference.sponsors.first.website_url)
-    expect(rendered).to include(truncate(@conference.sponsors.first.description))
-    expect(rendered).to include(@conference.sponsorship_levels.first.title)
+    expect(rendered).to include(truncate(CGI.escapeHTML(@conference.sponsors.first.description)))
+    expect(rendered).to include(CGI.escapeHTML(@conference.sponsorship_levels.first.title))
   end
 end

spec/views/admin/sponsorship_levels/index.html.haml_spec.rb

@@ -5,6 +5,6 @@ describe 'admin/sponsorship_levels/index' do
     @sponsorship_level = create(:sponsorship_level)
     assign :conference, @sponsorship_level.conference
     render
-    expect(rendered).to include(@sponsorship_level.title)
+    expect(rendered).to include(CGI.escapeHTML(@sponsorship_level.title))
   end
 end

spec/views/conference/show.html.haml_spec.rb

@@ -9,7 +9,7 @@ describe 'conference/show.html.haml' do
   end
 
   it 'renders banner component' do
-    expect(rendered).to match(conference.description)
+    expect(rendered).to match(CGI.escapeHTML(conference.description))
   end
 
   it 'renders program partial' do
@@ -28,7 +28,7 @@ describe 'conference/show.html.haml' do
     expect(view).to render_template(partial: 'conference/_sponsors')
     expect(rendered).to match(conference.contact.email)
     expect(rendered).to match(conference.sponsors.first.website_url)
-    expect(rendered).to match(conference.sponsors.first.description)
+    expect(rendered).to match(CGI.escapeHTML(conference.sponsors.first.description))
     expect(rendered).to match(conference.sponsors.first.logo_file_name)
   end
 
@@ -42,16 +42,16 @@ describe 'conference/show.html.haml' do
 
   it 'renders venue partial' do
     expect(view).to render_template(partial: 'conference/_venue')
-    expect(rendered).to match(conference.venue.name)
+    expect(rendered).to match(CGI.escapeHTML(conference.venue.name))
     expect(rendered).to match(conference.venue.street)
     expect(rendered).to match(conference.venue.website)
-    expect(rendered).to match(conference.venue.description)
+    expect(rendered).to match(CGI.escapeHTML(conference.venue.description))
   end
 
   it 'renders lodging partial' do
     expect(view).to render_template(partial: 'conference/_lodging')
-    expect(rendered).to match(conference.lodgings.first.name)
-    expect(rendered).to match(conference.lodgings.first.description)
+    expect(rendered).to match(CGI.escapeHTML(conference.lodgings.first.name))
+    expect(rendered).to match(CGI.escapeHTML(conference.lodgings.first.description))
     # FIXME: Lodging without image doesn't show link
     # expect(rendered).to match(conference.lodgings.first.website_link)
   end