SessionsController: strip username

This commit is contained in:
Simon Legner 2024-02-11 21:20:27 +01:00
parent 90fd22e2a3
commit a0aef5c722
2 changed files with 9 additions and 1 deletions

View file

@ -48,6 +48,14 @@ class SessionsControllerTest < ActionDispatch::IntegrationTest
post login_path, :params => { :username => user.display_name, :password => "test" }
assert_response :redirect
assert_redirected_to root_path
post login_path, :params => { :username => " #{user.display_name}", :password => "test" }
assert_response :redirect
assert_redirected_to root_path
post login_path, :params => { :username => "#{user.display_name} ", :password => "test" }
assert_response :redirect
assert_redirected_to root_path
end
def test_logout_without_referer