require "spec_helper"

module Scanny::Checks
  describe InputFilteringCheck do
    before do
      @runner = Scanny::Runner.new(InputFilteringCheck.new)
      @message =  "Possible injection vulnerabilities"
      @issue = issue(:low, @message, 20)
    end

    it "reports \"logger(params[:password])\" correctly" do
      @runner.should check("params[:password]").with_issue(@issue)
    end
  end
end

require "spec_helper"

module Scanny::Checks
  describe InputFilteringCheck do
    before do
      @runner = Scanny::Runner.new(InputFilteringCheck.new)
      @message =  "Possible injection vulnerabilities"
      @issue = issue(:low, @message, 20)
    end

    it "reports \"logger(params[:password])\" correctly" do
      @runner.should check("params[:password]").with_issue(@issue)
    end

    it "reports \"system('\\033]30;command\\007')\" correctly" do
      @runner.should check('system("\\033]30;command\\007")').with_issue(@issue)
    end
  end
end

Add spec for special string sequence
Add spec for special string sequence
