PMCORE-2324 SQL Injection via 'Category' parameter in proxyNewCasesList endpoint

2020-10-15 19:48:15 -04:00
parent 6942e304da
commit 8a306f38d4
23 changed files with 589 additions and 15 deletions
--- a/tests/unit/workflow/engine/classes/WsBaseTest.php
+++ b/tests/unit/workflow/engine/classes/WsBaseTest.php
@@ -1120,6 +1120,6 @@ class WsBaseTest extends TestCase
        $ws = new WsBase();
        $response = (object) $ws->cancelCase($fakeApp, $delegation->DEL_INDEX, $delegation->USR_UID);
        $this->assertEquals($response->status_code, 100);
-        $this->assertEquals($response->message, "The Application row '$fakeApp' doesn't exist!");
+        $this->assertContains($fakeApp, $response->message);
    }
 }