Commit 465e5c3

mo khan <mo@mokhan.ca>
2015-06-16 01:31:22
add specs for X-Frame-Options.
1 parent 590f613
Changed files (2)
app
assets
javascripts
spec
app/assets/javascripts/models/google_drive.js.coffee
@@ -11,12 +11,12 @@ class Stronglifters.GoogleDrive
       'https://www.googleapis.com/auth/drive.apps.readonly',
     ]
 
-  syncFile: () =>
+  syncFile: =>
     query = "title contains '.stronglifts' and title contains 'backup'"
     @searchFor query, @uploadFile
 
   searchFor: (query, callback) =>
-    @loadDrive () =>
+    @loadDrive =>
       @google.client.drive.files.list({ 'q': query }).execute(callback)
 
   uploadFile: (response) =>
@@ -36,5 +36,5 @@ class Stronglifters.GoogleDrive
 
   loadDrive: (callback) =>
     @authorize (response) =>
-      @google.load 'drive-share', () =>
+      @google.load 'drive-share', =>
         @google.client.load 'drive', 'v2', callback
spec/controllers/training_sessions_controller_spec.rb
@@ -16,6 +16,11 @@ describe TrainingSessionsController do
       get :index
       expect(assigns(:training_sessions)).to match_array([training_session_a, training_session_b])
     end
+
+    it "allows iframes from google for the google drive popup" do
+      get :index
+      expect(response.headers["X-Frame-Options"]).to eql("ALLOW-FROM https://drive.google.com")
+    end
   end
 
   describe "#upload" do