Upgraded Ruby to 2.7.0-preview1 and Rails to 6.0.0 - fixed 1 spec

OWASP / railsgoat

A vulnerable version of Rails that follows the OWASP Top 10

railsgoat.cktricky.com

MIT License

858 stars 666 forks source link

Closed jasnow closed 4 years ago

jasnow commented 4 years ago

Upgraded Ruby from 2.6.4 to 2.7.0-preview1.
Upgraded Rails from 5.1.7 to 6.0.0 along with associated gems.
- Upgraded bundler from 1.17.3 to 2.1.0.pre.1.
Fixed spec/vulnerabilities/sql_injection_spec.rb since it broke.
- From: find(:xpath, "//input[@id='user_id']", visible: false).set "8' OR admin='t') --"
- To: find(:xpath, "//input[@id='user_id']", visible: false).set "8' OR 1 == 1) --"

Fixed #364

jasnow commented 4 years ago

You are welcome.

treisland commented 4 years ago

Attempting to run the bundle install**** command and get the following error:

Your Ruby version is 2.5.1, but your Gemfile specified 2.7.0

I'm not seeing ruby 2.7.0 on the official Ruby site or in rbenv install --list

jasnow commented 4 years ago

Look for 2.7.0-preview1