PMCORE-2324 SQL Injection via 'Category' parameter in proxyNewCasesList endpoint

2020-10-15 19:48:15 -04:00
parent 6942e304da
commit 8a306f38d4
23 changed files with 589 additions and 15 deletions
--- a/tests/unit/workflow/engine/classes/CasesTest.php
+++ b/tests/unit/workflow/engine/classes/CasesTest.php
@@ -3,6 +3,7 @@
 namespace Tests\unit\workflow\engine\classes;

 use Cases;
+use Exception;
 use ProcessMaker\Model\Application;
 use ProcessMaker\Model\Delegation;
 use ProcessMaker\Model\Process;
@@ -244,7 +245,7 @@ class CasesTest extends TestCase
    public function it_should_test_get_next_step_method_step_exception()
    {
        $cases = new Cases();
-        $this->expectExceptionMessage("The Application row '' doesn't exist!");
+        $this->expectException(Exception::class);
        $res = $cases->getNextStep();
    }