added dangerous test

2011-06-20 18:22:46 +02:00 · 2011-06-20 18:22:46 +02:00 · 317da1f311
commit 317da1f311
parent 719644e76d
1 changed files with 9 additions and 0 deletions
--- a/test/acceptance/app.test.js
+++ b/test/acceptance/app.test.js
@ -47,5 +47,14 @@ module.exports = {
    },{
      status: 400
    });
+  },
+  'GET /v1/ with SQL parameter on DROP DATABASE nly. oAuth not used, so public user - should fail': function(){
+    assert.response(app, {
+      url: "/v1/?sql=DROP%20TABLE%20cartodb_test_user_1_db&database=cartodb_test_user_1_db",
+      method: 'GET'
+    },{
+      status: 400
+    });
  }
+
 };