From c4e0a5312e066914fc487596640e19a7429ae02e Mon Sep 17 00:00:00 2001
From: Henne Vogelsang <hvogel@opensuse.org>
Date: Mon, 2 May 2016 17:39:06 +0200
Subject: [PATCH] More html escaping in factories

---
 spec/factories/conferences.rb        | 2 +-
 spec/factories/events.rb             | 4 ++--
 spec/factories/sponsors.rb           | 2 +-
 spec/factories/sponsorship_levels.rb | 2 +-
 spec/factories/tickets.rb            | 2 +-
 spec/factories/tracks.rb             | 2 +-
 spec/factories/venues.rb             | 2 +-
 7 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/spec/factories/conferences.rb b/spec/factories/conferences.rb
index 3bd59f64..2014e01a 100644
--- a/spec/factories/conferences.rb
+++ b/spec/factories/conferences.rb
@@ -2,7 +2,7 @@
 
 FactoryGirl.define do
   factory :conference do
-    title { Faker::Book.title }
+    title { CGI.escapeHTML(Faker::Book.title) }
     short_title { SecureRandom.urlsafe_base64(4) }
     timezone { Faker::Address.time_zone }
     start_date { Date.today }
diff --git a/spec/factories/events.rb b/spec/factories/events.rb
index e4cf19df..612c05cf 100644
--- a/spec/factories/events.rb
+++ b/spec/factories/events.rb
@@ -2,8 +2,8 @@
 
 FactoryGirl.define do
   factory :event do
-    title { Faker::Hipster.sentence }
-    abstract { Faker::Hipster.paragraph(2) }
+    title { CGI.escapeHTML(Faker::Hipster.sentence) }
+    abstract { CGI.escapeHTML(Faker::Hipster.paragraph(2)) }
 
     program
 
diff --git a/spec/factories/sponsors.rb b/spec/factories/sponsors.rb
index edf1bf16..39a630d6 100644
--- a/spec/factories/sponsors.rb
+++ b/spec/factories/sponsors.rb
@@ -2,7 +2,7 @@
 
 FactoryGirl.define do
   factory :sponsor do
-    name { Faker::Company.name }
+    name { CGI.escapeHTML(Faker::Company.name) }
     website_url { Faker::Internet.url }
     description { CGI.escapeHTML(Faker::Lorem.paragraph) }
 
diff --git a/spec/factories/sponsorship_levels.rb b/spec/factories/sponsorship_levels.rb
index df2e3b6d..72db7493 100644
--- a/spec/factories/sponsorship_levels.rb
+++ b/spec/factories/sponsorship_levels.rb
@@ -2,7 +2,7 @@
 
 FactoryGirl.define do
   factory :sponsorship_level do
-    title { Faker::Hipster.word }
+    title { Faker::Lorem.word }
 
     conference
   end
diff --git a/spec/factories/tickets.rb b/spec/factories/tickets.rb
index 88532b86..508e2f33 100644
--- a/spec/factories/tickets.rb
+++ b/spec/factories/tickets.rb
@@ -1,6 +1,6 @@
 FactoryGirl.define do
   factory :ticket do
-    title { "#{Faker::Hipster.word} Ticket" }
+    title { CGI.escapeHTML("#{Faker::Hipster.word} Ticket") }
     price_cents 1000
     price_currency 'USD'
   end
diff --git a/spec/factories/tracks.rb b/spec/factories/tracks.rb
index 3f35f539..95bbffd9 100644
--- a/spec/factories/tracks.rb
+++ b/spec/factories/tracks.rb
@@ -1,6 +1,6 @@
 FactoryGirl.define do
   factory :track do
-    name { Faker::Commerce.department(2, true) }
+    name { CGI.escapeHTML(Faker::Commerce.department(2, true)) }
     description { Faker::Lorem.sentence }
     color { Faker::Color.hex_color }
   end
diff --git a/spec/factories/venues.rb b/spec/factories/venues.rb
index 11f27035..a224dafb 100644
--- a/spec/factories/venues.rb
+++ b/spec/factories/venues.rb
@@ -1,7 +1,7 @@
 # Read about factories at https://github.com/thoughtbot/factory_girl
 FactoryGirl.define do
   factory :venue do
-    name { "#{Faker::Company.name} Office" }
+    name { CGI.escapeHTML("#{Faker::Company.name} Office") }
     street { Faker::Address.street_address }
     city { Faker::Address.city }
     postalcode { Faker::Address.postcode }