Sha256: 8d12bf051c693b48e7978e3a566be174ddc989107531c29eb11227dc1efaeff8
Contents?: true
Size: 1.09 KB
Versions: 17
Compression:
Stored size: 1.09 KB
Contents
require 'spec_helper' feature 'Promotion with user rule', js: true do stub_authorization! given(:promotion) { create :promotion } background do visit spree.edit_admin_promotion_path(promotion) end context "multiple users" do let!(:user) { create(:user, email: 'foo@example.com') } let!(:other_user) { create(:user, email: 'bar@example.com') } scenario "searching a user" do select "User", from: "Add rule of type" within("#rules_container") { click_button "Add" } select2_search "foo", from: "Choose users", select: false expect(page).to have_content('foo@example.com') expect(page).not_to have_content('bar@example.com') end end context "with an attempted XSS" do let(:xss_string) { %(<script>throw("XSS")</script>) } given!(:user) { create(:user, email: xss_string) } scenario "adding an option value rule" do select "User", from: "Add rule of type" within("#rules_container") { click_button "Add" } select2_search "<script>", from: "Choose users" expect(page).to have_content(xss_string) end end end
Version data entries
17 entries across 17 versions & 1 rubygems