Contents

require File.dirname(__FILE__) + '/../test_helper.rb'

module SearchTests
  class ProtectionTest < ActiveSupport::TestCase
    def test_protection
      assert_raise(ArgumentError) { Account.build_search(:conditions => "(DELETE FROM users)", :page => 2, :per_page => 15) }
      Searchlogic::Search::Base::VULNERABLE_FIND_OPTIONS.each { |option| assert_raise(ArgumentError) { Account.build_search(option => "(DELETE FROM users)") } }
      
      assert_nothing_raised { Account.build_search!(:conditions => "(DELETE FROM users)", :page => 2, :per_page => 15) }
      Searchlogic::Search::Base::VULNERABLE_FIND_OPTIONS.each { |option| assert_nothing_raised { Account.build_search!(option => "(DELETE FROM users)") } }
      
      account = Account.first
      
      assert_raise(ArgumentError) { account.users.build_search(:conditions => "(DELETE FROM users)", :page => 2, :per_page => 15) }
      Searchlogic::Search::Base::VULNERABLE_FIND_OPTIONS.each { |option| assert_raise(ArgumentError) { account.users.build_search(option => "(DELETE FROM users)") } }
      
      assert_nothing_raised { account.users.build_search!(:conditions => "(DELETE FROM users)", :page => 2, :per_page => 15) }
      Searchlogic::Search::Base::VULNERABLE_FIND_OPTIONS.each { |option| assert_nothing_raised { account.users.build_search!(option => "(DELETE FROM users)") } }
      
      assert_raise(ArgumentError) { Account.build_search(:order_by => "unknown_column") }
      assert_nothing_raised { Account.build_search!(:order_by => "unknown_column") }
      assert_raise(ArgumentError) { Account.build_search(:order_by => ["name", "unknown_column"]) }
      assert_nothing_raised { Account.build_search!(:order_by => ["name", "unknown_column"]) }
    end
  end
end

Version data entries

14 entries across 14 versions & 2 rubygems

Version	Path
schof-searchlogic-0.0.2	test/search_tests/protection_test.rb
searchlogic-1.5.6	test/search_tests/protection_test.rb
searchlogic-1.5.9	test/search_tests/protection_test.rb
searchlogic-1.5.4	test/search_tests/protection_test.rb
searchlogic-1.5.10	test/search_tests/protection_test.rb
searchlogic-1.5.8	test/search_tests/protection_test.rb
searchlogic-1.6.0	test/search_tests/protection_test.rb
searchlogic-1.5.7	test/search_tests/protection_test.rb
searchlogic-1.6.1	test/search_tests/protection_test.rb
searchlogic-1.6.4	test/search_tests/protection_test.rb
searchlogic-1.6.6	test/search_tests/protection_test.rb
searchlogic-1.6.2	test/search_tests/protection_test.rb
searchlogic-1.6.5	test/search_tests/protection_test.rb
searchlogic-1.6.3	test/search_tests/protection_test.rb