You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
On the latest commit (67e1365) the IDOR unit test is failing on "attack two". I haven't checked other commits yet. The following behavior is that same whether or not the user has mitigated the vulnerability.
2) insecure direct object reference attack two
Tutorial: https://github.com/OWASP/railsgoat/wiki/A4-Insecure-Direct-Object-Reference
Failure/Error: expect(first("td").text).not_to include(another_user.name)
NoMethodError:
undefined method `text' for nil:NilClass
One important thing to note is that another_user.name isn't even a valid method. I suspect it should be another_user.full_name
The text was updated successfully, but these errors were encountered:
On the latest commit (67e1365) the IDOR unit test is failing on "attack two". I haven't checked other commits yet. The following behavior is that same whether or not the user has mitigated the vulnerability.
One important thing to note is that
another_user.name
isn't even a valid method. I suspect it should beanother_user.full_name
The text was updated successfully, but these errors were encountered: