Sha256: 8d12bf051c693b48e7978e3a566be174ddc989107531c29eb11227dc1efaeff8

Contents?: true

Size: 1.09 KB

Versions: 17

Compression:

Stored size: 1.09 KB

Contents

require 'spec_helper'

feature 'Promotion with user rule', js: true do
  stub_authorization!

  given(:promotion) { create :promotion }

  background do
    visit spree.edit_admin_promotion_path(promotion)
  end

  context "multiple users" do
    let!(:user) { create(:user, email: 'foo@example.com') }
    let!(:other_user) { create(:user, email: 'bar@example.com') }

    scenario "searching a user" do
      select "User", from: "Add rule of type"
      within("#rules_container") { click_button "Add" }

      select2_search "foo", from: "Choose users", select: false

      expect(page).to have_content('foo@example.com')
      expect(page).not_to have_content('bar@example.com')
    end
  end

  context "with an attempted XSS" do
    let(:xss_string) { %(<script>throw("XSS")</script>) }
    given!(:user) { create(:user, email: xss_string) }

    scenario "adding an option value rule" do
      select "User", from: "Add rule of type"
      within("#rules_container") { click_button "Add" }

      select2_search "<script>", from: "Choose users"

      expect(page).to have_content(xss_string)
    end
  end
end

Version data entries

17 entries across 17 versions & 1 rubygems

Version Path
solidus_backend-2.5.2 spec/features/admin/promotions/user_rule_spec.rb
solidus_backend-2.5.1 spec/features/admin/promotions/user_rule_spec.rb
solidus_backend-2.5.0 spec/features/admin/promotions/user_rule_spec.rb
solidus_backend-2.5.0.rc1 spec/features/admin/promotions/user_rule_spec.rb
solidus_backend-2.5.0.beta2 spec/features/admin/promotions/user_rule_spec.rb
solidus_backend-2.5.0.beta1 spec/features/admin/promotions/user_rule_spec.rb
solidus_backend-2.4.2 spec/features/admin/promotions/user_rule_spec.rb
solidus_backend-2.4.1 spec/features/admin/promotions/user_rule_spec.rb
solidus_backend-2.3.1 spec/features/admin/promotions/user_rule_spec.rb
solidus_backend-2.4.0 spec/features/admin/promotions/user_rule_spec.rb
solidus_backend-2.4.0.rc1 spec/features/admin/promotions/user_rule_spec.rb
solidus_backend-2.4.0.beta1 spec/features/admin/promotions/user_rule_spec.rb
solidus_backend-2.3.0 spec/features/admin/promotions/user_rule_spec.rb
solidus_backend-2.3.0.rc3 spec/features/admin/promotions/user_rule_spec.rb
solidus_backend-2.3.0.rc2 spec/features/admin/promotions/user_rule_spec.rb
solidus_backend-2.3.0.rc1 spec/features/admin/promotions/user_rule_spec.rb
solidus_backend-2.3.0.beta1 spec/features/admin/promotions/user_rule_spec.rb