|
|
|
@ -1433,7 +1433,7 @@ describe('User', function () {
|
|
|
|
|
username: 'rejectme',
|
|
|
|
|
password: '123456',
|
|
|
|
|
'password-confirm': '123456',
|
|
|
|
|
email: '<script>alert("ok");<script>reject@me.com',
|
|
|
|
|
email: '<script>alert("ok")<script>reject@me.com',
|
|
|
|
|
}, function (err) {
|
|
|
|
|
assert.ifError(err);
|
|
|
|
|
helpers.loginUser('admin', '123456', function (err, jar) {
|
|
|
|
@ -1441,7 +1441,7 @@ describe('User', function () {
|
|
|
|
|
request(nconf.get('url') + '/api/admin/manage/registration', { jar: jar, json: true }, function (err, res, body) {
|
|
|
|
|
assert.ifError(err);
|
|
|
|
|
assert.equal(body.users[0].username, 'rejectme');
|
|
|
|
|
assert.equal(body.users[0].email, '<script>alert("ok");<script>reject@me.com');
|
|
|
|
|
assert.equal(body.users[0].email, '<script>alert("ok")<script>reject@me.com');
|
|
|
|
|
done();
|
|
|
|
|
});
|
|
|
|
|
});
|
|
|
|
|