Prevent commenting on nonexistent posts (#2704).

2016-10-06 09:12:23 +00:00
parent 8c8f4a6a8f
commit cb1e1d3a94
3 changed files with 17 additions and 0 deletions
--- a/test/functional/comments_controller_test.rb
+++ b/test/functional/comments_controller_test.rb
@@ -65,6 +65,11 @@ class CommentsControllerTest < ActionController::TestCase
        comment = Comment.last
        assert_redirected_to post_path(comment.post)
      end
+
+      should "not allow commenting on nonexistent posts" do
+        post :create, {:comment => FactoryGirl.attributes_for(:comment, :post_id => -1)}, {:user_id => @user.id}
+        assert_response :error
+      end
    end
  end
 end