dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fixed errors in tests for sql injection introduction 10

Browse Source
This commit is contained in:
Benedikt - Desktop 2018-12-22 19:16:46 +01:00 committed by Nanne Baars
parent 3883563c7d
commit e859c9c37b
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
webgoat-lessons/sql-injection/src/test/java/org/owasp/webgoat/plugin/introduction/SqlInjectionLesson10Test.java
View File

@ -42,7 +42,7 @@ public class SqlInjectionLesson10Test extends LessonTest {
public void tableExistsIsFailure() throws Exception { public void tableExistsIsFailure() throws Exception {
try { try {
mockMvc.perform(MockMvcRequestBuilders.post("/SqlInjection/attack10") mockMvc.perform(MockMvcRequestBuilders.post("/SqlInjection/attack10")
.param("action", "")) .param("action_string", ""))
.andExpect(status().isOk()) .andExpect(status().isOk())
.andExpect(jsonPath("lessonCompleted", is(false))) .andExpect(jsonPath("lessonCompleted", is(false)))
@ -51,7 +51,7 @@ public class SqlInjectionLesson10Test extends LessonTest {
if (!e.getMessage().contains(completedError)) throw e; if (!e.getMessage().contains(completedError)) throw e;
mockMvc.perform(MockMvcRequestBuilders.post("/SqlInjection/attack10") mockMvc.perform(MockMvcRequestBuilders.post("/SqlInjection/attack10")
.param("action", "")) .param("action_string", ""))
.andExpect(status().isOk()) .andExpect(status().isOk())
.andExpect(jsonPath("lessonCompleted", is(true))) .andExpect(jsonPath("lessonCompleted", is(true)))
@ -62,7 +62,7 @@ public class SqlInjectionLesson10Test extends LessonTest {
@Test @Test
public void tableMissingIsSuccess() throws Exception { public void tableMissingIsSuccess() throws Exception {
mockMvc.perform(MockMvcRequestBuilders.post("/SqlInjection/attack10") mockMvc.perform(MockMvcRequestBuilders.post("/SqlInjection/attack10")
.param("action", "%'; DROP TABLE access_log;--")) .param("action_string", "%'; DROP TABLE access_log;--"))
.andExpect(status().isOk()) .andExpect(status().isOk())
.andExpect(jsonPath("lessonCompleted", is(true))) .andExpect(jsonPath("lessonCompleted", is(true)))