osem-fcy/spec/views/admin/lodgings/index.html.haml_spec.rb
Chris Niedzwiedz d2e177cac4 Testing if I can squash this way (#1)
* Fixed XSS resulting from markdown() method
2017-01-09 12:27:11 -06:00

22 lines
644 B
Ruby

require 'spec_helper'
describe 'admin/lodgings/index' do
it 'renders lodgings list' do
@conference = create(:conference)
@conference.venue = create(:venue)
@conference.lodgings << create(:lodging)
assign :venue, @conference.venue
render
expect(rendered).to include(CGI.escapeHTML(@conference.lodgings.first.name))
end
it 'prevents XSS in lodging description' do
@conference = create(:conference)
@conference.venue = create(:venue)
@conference.lodgings << create(:lodging_xss)
assign :venue, @conference.venue
render
expect(rendered).to_not have_selector('#divInjectedElement')
end
end