Testing if I can squash this way (#1)

* Fixed XSS resulting from markdown() method
This commit is contained in:
Chris Niedzwiedz 2017-01-09 12:27:11 -06:00 committed by GitHub
parent c552d08b8e
commit d2e177cac4
7 changed files with 61 additions and 1 deletions

View file

@ -0,0 +1,17 @@
require 'spec_helper'
describe 'users/show' do
let!(:conference) { create(:conference) }
let(:organizer_role) { Role.find_by(name: 'organizer', resource: conference) }
let(:organizer) { create(:user_xss, name: 'test name', email: 'test@email.osem', role_ids: [organizer_role.id]) }
it 'renders proposal information' do
sign_in organizer
assign :user, organizer
render template: 'users/show.html.haml'
expect(rendered).to_not have_selector('#divInjectedElement')
end
end