      it "re-enabled functionality if whitelisted" do
        Rack::MiniProfiler.config.authorization_mode = :whitelist
        expect(Rack::MiniProfiler).to receive(:request_authorized?) { true }.twice
        get '/html?pp=enable'
        last_response.body.should include('/mini-profiler-resources/includes.js')
      end
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.