mirror of
https://github.com/rails/rails.git
synced 2022-11-09 12:12:34 -05:00
26 lines
705 B
Ruby
26 lines
705 B
Ruby
|
require 'abstract_unit'
|
||
|
|
|
||
|
|
class PeopleController < ActionController::Base
|
||
|
|
def create
|
||
|
|
render text: params[:person].permitted? ? "permitted" : "forbidden"
|
||
|
|
end
|
||
|
|
|
||
|
|
def create_with_permit
|
||
|
|
render text: params[:person].permit(:name).permitted? ? "permitted" : "forbidden"
|
||
|
|
end
|
||
|
|
end
|
||
|
|
|
||
|
|
class ActionControllerPermittedParamsTest < ActionController::TestCase
|
||
|
|
tests PeopleController
|
||
|
|
|
||
|
|
test "parameters are forbidden" do
|
||
|
|
post :create, { person: { name: "Mjallo!" } }
|
||
|
|
assert_equal "forbidden", response.body
|
||
|
|
end
|
||
|
|
|
||
|
|
test "parameters can be permitted and are then not forbidden" do
|
||
|
|
post :create_with_permit, { person: { name: "Mjallo!" } }
|
||
|
|
assert_equal "permitted", response.body
|
||
|
|
end
|
||
|
|
end
|