From d3a8929111b27edbe35924a771e2ff6ffd71cd44 Mon Sep 17 00:00:00 2001 From: Roland Venesz Date: Thu, 3 Jan 2013 13:26:24 +0100 Subject: [PATCH] Creating a Project here is unnecessary --- spec/cancan/controller_resource_spec.rb | 1 - 1 file changed, 1 deletion(-) diff --git a/spec/cancan/controller_resource_spec.rb b/spec/cancan/controller_resource_spec.rb index f5273fe..513263e 100644 --- a/spec/cancan/controller_resource_spec.rb +++ b/spec/cancan/controller_resource_spec.rb @@ -392,7 +392,6 @@ describe CanCan::ControllerResource do # CVE-2012-5664 it "should always convert id param to string" do - project = Project.create! @params.merge!(:action => "show", :the_project => { :malicious => "I am" }) resource = CanCan::ControllerResource.new(@controller, :id_param => :the_project) resource.send(:id_param).class.should == String