Draft: api: Add organization field test coverage

• Please check this box if this contribution uses AI-generated content (including content generated by GitLab Duo features) as outlined in the GitLab DCO & CLA. As a benefit of being a GitLab Community Contributor, you receive complimentary access to GitLab Duo.

What does this MR do and why?

Adds comprehensive test coverage for the organization parameter edge cases in the Users API. The tests verify:

• Max length validation (500 characters)
• HTML sanitization (XSS protection)
• Ampersand preservation (special character handling)
• Empty and nil value handling

Uses parameterized table syntax with where and with_them for better maintainability and clarity. This ensures the organization field behaves correctly across all scenarios and prevents regressions if model-level behavior changes.

🛠️ with ❤️ at Siemens

References

• Related issue: #577060

Screenshots or screen recordings

N/A - Test coverage only

How to set up and validate locally

1. Run the organization field tests:

   bundle exec rspec spec/requests/api/users_spec.rb -e "when updating organization"

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

MR Checklist (@gerardo-navarro)

• Changelog entry added, if necessary
• Documentation created/updated via this MR
• Documentation reviewed by technical writer or follow-up review issue created
• Tests added for this feature/bug
• Tested in all supported browsers
• Conforms to the code review guidelines
• Conforms to the style guides
• Conforms to the javascript style guides
• Conforms to the database guides
• Conforms to the merge request performance guidelines
• Security: Verifies XSS protection through HTML sanitization tests
• Test coverage: Uses parameterized table syntax following GitLab best practices