diff options
author | Robert Speicher <rspeicher@gmail.com> | 2016-05-03 02:58:54 +0300 |
---|---|---|
committer | Robert Speicher <rspeicher@gmail.com> | 2016-05-03 02:58:54 +0300 |
commit | c9bc3d20efba26f9259eac36c2ee8eed1a12ec59 (patch) | |
tree | 1562966b23e5c438d565fefae67dda931006f9dd /spec/features | |
parent | 2c468ebd2cb9dd6e490fab0ac14dea062e11cacf (diff) | |
parent | 2d5608ac954128026b87b964dd970de645a766f1 (diff) |
Merge remote-tracking branch 'dev/master' into 'master'
Diffstat (limited to 'spec/features')
-rw-r--r-- | spec/features/merge_requests/create_new_mr_spec.rb | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/spec/features/merge_requests/create_new_mr_spec.rb b/spec/features/merge_requests/create_new_mr_spec.rb index 00b60bd0e75..e296078bad8 100644 --- a/spec/features/merge_requests/create_new_mr_spec.rb +++ b/spec/features/merge_requests/create_new_mr_spec.rb @@ -30,4 +30,14 @@ feature 'Create New Merge Request', feature: true, js: true do expect(page).to have_content 'git checkout -b orphaned-branch origin/orphaned-branch' end + + context 'when target project cannot be viewed by the current user' do + it 'does not leak the private project name & namespace' do + private_project = create(:project, :private) + + visit new_namespace_project_merge_request_path(project.namespace, project, merge_request: { target_project_id: private_project.id }) + + expect(page).not_to have_content private_project.to_reference + end + end end |