Added some sanity check sql injection tests

nearform · Feb 19, 2018 · ea37ff7 · ea37ff7
1 parent 0fa6a5d
commit ea37ff7
Showing 1 changed file with 18 additions and 0 deletions.
diff --git a/test/integration/userOps.test.js b/test/integration/userOps.test.js
@@ -814,4 +814,22 @@ lab.experiment('UserOps structure', () => {
       done()
     })
   })
+
+  lab.test('Search sql injection org_id sanity check', (done) => {
+    udaru.users.search({ query: 'Charlie', organizationId: 'WONKA||org_id<>-1'}, (err, data, total) => {
+      expect(err).to.not.exist()
+      expect(total).to.equal(0)
+      expect(data.length).to.equal(0)
+
+      done()
+    })
+  })
+
+  lab.test('Search sql injection query sanity check', (done) => {
+    udaru.users.search({ query: 'Charlie\');drop database authorization;', organizationId: 'WONKA'}, (err, data, total) => {
+      expect(err).to.exist()
+      done()
+    })
+  })
+
 })