nocebo/diaspora
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

small refactor of helper method [ci skip]

Browse source
This commit is contained in:
Maxwell Salzberg 2012-03-03 17:53:50 -08:00
parent e6b1111fd1
commit 9e249bb7ef
1 changed files with 5 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
spec/integration/attack_vectors_spec.rb
View file

@ -47,9 +47,7 @@ end
#returns the message #returns the message
def legit_post_from_user1_to_user2(user1, user2) def legit_post_from_user1_to_user2(user1, user2)
original_message = user1.post(:status_message, :text => 'store this!', :to => user1.aspects.find_by_name("generic").id) original_message = user1.post(:status_message, :text => 'store this!', :to => user1.aspects.find_by_name("generic").id)
salmon_xml = user1.salmon(original_message).xml_for(user2.person) receive(original_message, :from => user1, :by => user2)
zord = Postzord::Receiver::Private.new(user2, :salmon_xml => salmon_xml)
zord.perform!
original_message original_message
end end
@ -59,7 +57,9 @@ describe "attack vectors" do
let(:alices_aspect) { alice.aspects.find_by_name("generic") } let(:alices_aspect) { alice.aspects.find_by_name("generic") }
context "testing side effects of validation phase" do context "testing side effects of validation phase" do
describe 'Contact Required Unless Request' do describe 'Contact Required Unless Request' do
#CUSTOM SETUP; cant use helpers here
it 'does not save a post from a non-contact as a side effect' do it 'does not save a post from a non-contact as a side effect' do
salmon_xml = nil salmon_xml = nil
bad_post_guid = nil bad_post_guid = nil
@ -82,6 +82,8 @@ describe "attack vectors" do
user_should_not_see_guid(bob, bad_post_guid) user_should_not_see_guid(bob, bad_post_guid)
end end
#CUSTOM SETUP; cant use helpers here
it 'other users can not grant visiblity to another users posts by sending their friends post to themselves (even if they are contacts)' do it 'other users can not grant visiblity to another users posts by sending their friends post to themselves (even if they are contacts)' do
#setup: eve has a message. then, alice is connected to eve. #setup: eve has a message. then, alice is connected to eve.
#(meaning alice can not see the old post, but it exists in the DB) #(meaning alice can not see the old post, but it exists in the DB)