Escape URL in test

Smashing · Jun 24, 2021 · d1577b1 · d1577b1
1 parent d9816ce
commit d1577b1
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/test/app_test.rb b/test/app_test.rb
@@ -202,7 +202,7 @@ def test_get_nonexistent_widget
 
   def test_get_xss_widget
     with_generated_project do
-      get '/views/nowidget-<h1>.html'
+      get CGI.escape('/views/nowidget-<h1>.html')
       assert_equal 200, last_response.status
       assert_equal last_response.body, 'Drats! Unable to find a widget file named: nowidget-&lt;h1&gt; to render.'
     end