Merge pull request #1243 from cniedzwiedz/squash_test

Fixed XSS in markdown() method

spec/factories/events.rb

@@ -35,4 +35,8 @@ FactoryGirl.define do
       end
     end
   end
+
+  factory :event_xss, parent: :event do
+    abstract { '<div id="divInjectedElement"></div>' }
+  end
 end

spec/factories/lodgings.rb

@@ -6,4 +6,8 @@ FactoryGirl.define do
     description { Faker::Lorem.paragraph }
     website_link { Faker::Internet.url }
   end
+
+  factory :lodging_xss, parent: :lodging do
+    description { '<div id="divInjectedElement"></div>' }
+  end
 end

spec/factories/users.rb

@@ -45,4 +45,9 @@ FactoryGirl.define do
       end
     end
   end
+
+  factory :user_xss, parent: :user do
+    biography '<div id="divInjectedElement"></div>'
+  end
+
 end