diff options
| author | Seb Bacon <seb.bacon@gmail.com> | 2012-01-12 07:47:16 +0000 |
|---|---|---|
| committer | Seb Bacon <seb.bacon@gmail.com> | 2012-01-12 07:47:16 +0000 |
| commit | 43bd77a1ad43d7cb24117bf3973f841221fd2c6e (patch) | |
| tree | f65b1ce7b1dc9916b62c20f64670292b9793b105 /spec/integration | |
| parent | 8f2fa1ee943d5c85b67e5817b3eb2dfd31e87821 (diff) | |
Return 403 when attachment "folders" are spidered. Fixes #340
Diffstat (limited to 'spec/integration')
| -rw-r--r-- | spec/integration/errors_spec.rb | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/spec/integration/errors_spec.rb b/spec/integration/errors_spec.rb index bfb7e5fb5..f8f9162c1 100644 --- a/spec/integration/errors_spec.rb +++ b/spec/integration/errors_spec.rb @@ -45,5 +45,9 @@ describe "When rendering errors" do get("/request/#{ir.url_title}") response.code.should == "500" end + it "should render a 403 for attempts at directory listing for attachments" do + get("/request/5/response/4/attach/html/3/" ) + response.code.should == "403" + end end |