cst1/openstreetmap-website
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Turn on mass assignment protection

Browse source 
Require any attribute that is going to be mass assigned to be
whitelisted, and whitelist those attributes which need it
This commit is contained in:
Tom Hughes 2012-03-05 16:31:11 +00:00
parent 7d8cf94680
commit 1340fca8f1
19 changed files with 74 additions and 35 deletions
Download patch file Download diff file Expand all files Collapse all files

4
test/unit/oauth_token_test.rb
View file

@ -15,7 +15,9 @@ class OauthTokenTest < ActiveSupport::TestCase
##
# check that an authorized token is authorised and can be invalidated
def test_token_authorisation
tok = RequestToken.create :client_application => client_applications(:oauth_web_app)
tok = RequestToken.create({
:client_application => client_applications(:oauth_web_app)
}, :without_protection => true)
assert_equal false, tok.authorized?, "Token should be created unauthorised."
tok.authorize!(users(:public_user))
assert_equal true, tok.authorized?, "Token should now be authorised."