degraded security for live-coder jQuery load
This commit is contained in:
parent
fff062a3a7
commit
90d0ef9db7
@ -1,5 +1,5 @@
|
||||
class CandidateController < ApplicationController
|
||||
before_action :authorize_candidate, except: [:welcome, :validate]
|
||||
before_action :authorize_candidate, except: [:welcome, :validate, :live_coder]
|
||||
|
||||
def welcome
|
||||
end
|
||||
|
@ -10,7 +10,7 @@ class CandidateControllerTest < ActionDispatch::IntegrationTest
|
||||
assert_response :success
|
||||
end
|
||||
|
||||
test "should require auth or redirect" do
|
||||
test "should require auth and redirect" do
|
||||
get saved_path
|
||||
assert_redirected_to welcome_path
|
||||
|
||||
@ -25,9 +25,6 @@ class CandidateControllerTest < ActionDispatch::IntegrationTest
|
||||
|
||||
get question_path(questions(:fed1).id)
|
||||
assert_redirected_to welcome_path
|
||||
|
||||
get live_coder_path(questions(:fed1).id)
|
||||
assert_redirected_to welcome_path
|
||||
end
|
||||
|
||||
test "should auth to question" do
|
||||
|
Loading…
Reference in New Issue
Block a user