From 996a5650179adb8feb5a05f5ac2b97297db16494 Mon Sep 17 00:00:00 2001 From: Sandro Santilli Date: Thu, 19 Jul 2012 13:36:09 +0200 Subject: [PATCH] Adapt req2params test now that we throw on on missing user metadata --- test/unit/cartodb/req2params.test.js | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/test/unit/cartodb/req2params.test.js b/test/unit/cartodb/req2params.test.js index 63c74d5a..2562b076 100644 --- a/test/unit/cartodb/req2params.test.js +++ b/test/unit/cartodb/req2params.test.js @@ -14,13 +14,13 @@ suite('req2params', function() { }); test('cleans up request', function(done){ - opts.req2params({headers: { host:'h1' }, query: {dbuser:'hacker',dbname:'secret'}}, function(err, req) { + opts.req2params({headers: { host:'localhost' }, query: {dbuser:'hacker',dbname:'secret'}}, function(err, req) { if ( err ) { console.log(err); throw new Error(err); } assert.ok(_.isObject(req.query), 'request has query'); assert.ok(!req.query.hasOwnProperty('dbuser'), 'dbuser was removed from query'); assert.ok(req.hasOwnProperty('params'), 'request has params'); assert.ok(req.params.hasOwnProperty('interactivity'), 'request params have interactivity'); - assert.ok(_.isNull(req.params.dbname), 'could forge dbname'); + assert.equal(req.params.dbname, 'cartodb_test_user_1_db', 'could forge dbname: '+ req.params.dbname); assert.ok(!req.hasOwnProperty('dbuser'), 'could inject dbuser ('+req.params.dbuser+')'); done(); });