Adam Cooke 9243524035 refactor(helpers): escape interpolated values in select options ...

The endpoint and domain option helpers interpolated model attributes
straight into an HTML string before marking the whole buffer html_safe.
Wrap the interpolations in h() so untrusted attributes can't break out
of the surrounding tag.

Also stop the helpers glob in rails_helper from eagerly requiring
_spec.rb files so helper specs can live under spec/helpers/, and add a
small application helper spec covering the escape behaviour.

2026-04-24 22:55:46 +01:00

..

application_helper_spec.rb

refactor(helpers): escape interpolated values in select options

2026-04-24 22:55:46 +01:00

general_helpers.rb

test: move Postal::RpecHelpers to spec/helpers

2024-02-23 22:51:35 +00:00

message_db_mocking.rb

test: add tests for message unqueueing

2024-02-23 22:51:34 +00:00

message_factory.rb

test: add tests for message unqueueing

2024-02-23 22:51:34 +00:00

test_logger.rb

test: move TestLogger to spec/helpers

2024-02-23 22:51:34 +00:00