Fix SQL injections

This commit is contained in:
Mathieu Magnin 2017-07-20 14:51:57 +02:00
parent e19410ed75
commit ed11ee4fb4
3 changed files with 4 additions and 3 deletions

View file

@ -1,4 +1,5 @@
require 'spec_helper'
require 'uri'
describe Admin::ProceduresController, type: :controller do
let(:admin) { create(:administrateur) }
@ -476,7 +477,7 @@ describe Admin::ProceduresController, type: :controller do
subject
end
subject { get :path_list, params: {request: procedure2.path} }
subject { get :path_list, params: { request: URI.encode(procedure2.path) } }
it { expect(response.status).to eq(200) }
it { expect(body.size).to eq(1) }