Added login statement to failing idor test to fix OWASP#313

nvisium-john-poulin · Feb 21, 2018 · e710407 · e710407
1 parent 67e1365
commit e710407
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/spec/vulnerabilities/insecure_dor_spec.rb b/spec/vulnerabilities/insecure_dor_spec.rb
@@ -23,6 +23,7 @@
 
   scenario "attack two\nTutorial: https://github.com/OWASP/railsgoat/wiki/A4-Insecure-Direct-Object-Reference" do
     expect(normal_user.id).not_to eq(another_user.id)
+    login(normal_user)
 
     visit "/users/#{another_user.id}/work_info"