arachni 1.3.2 → 1.4

data/spec/arachni/element/ui_input_spec.rb

@@ -3,6 +3,7 @@ require 'spec_helper'
 describe Arachni::Element::UIInput do
     html = '<input type=password name="my_first_input" value="my_first_value"" />'
 
+    it_should_behave_like 'with_auditor'
     it_should_behave_like 'dom_only', html
 
     def new_element( html )

data/spec/arachni/element/xml_spec.rb

@@ -11,6 +11,7 @@ describe Arachni::Element::XML do
     it_should_behave_like 'submittable'
     it_should_behave_like 'inputtable'
     it_should_behave_like 'mutable',
+                          supports_nulls: false,
                           inputs: described_class.parse_inputs( inputtable_source )
     it_should_behave_like 'auditable'
 

data/spec/arachni/framework/parts/audit_spec.rb

@@ -3,7 +3,7 @@ require 'spec_helper'
 describe Arachni::Framework::Parts::Audit do
     include_examples 'framework'
 
-    describe Arachni::OptionGroups::Scope do
+    describe 'Arachni::OptionGroups::Scope' do
         describe '#exclude_binaries' do
             it 'excludes binary pages from the scan' do
                 audited = []
@@ -169,8 +169,8 @@ describe Arachni::Framework::Parts::Audit do
             expect(subject.sitemap).to include @url + '/link/#/stuff'
         end
 
-        it "runs #{Arachni::Check::Manager}#without_platforms before #{Arachni::Check::Manager}#with_platforms" do
-            @options.paths.checks  = fixtures_path + '/checks/'
+        it "runs checks without platforms before ones with platforms" do
+            @options.paths.checks = fixtures_path + '/checks/'
 
             Arachni::Framework.new do |f|
                 f.checks.load_all
@@ -184,10 +184,12 @@ describe Arachni::Framework::Parts::Audit do
 
                 f.audit_page page
 
-                expect(responses).to eq(
+                expect(responses.sort).to eq(
                     %w(http://localhost/test3 http://localhost/test
-                        http://localhost/test2)
+                        http://localhost/test2).sort
                 )
+
+                expect(responses.last).to eq 'http://localhost/test2'
             end
         end
 

data/spec/arachni/framework/parts/browser_spec.rb

@@ -5,7 +5,7 @@ describe Arachni::Framework::Parts::Browser do
 
     describe '#browser_cluster' do
         context 'when #use_browsers? is' do
-            context true do
+            context 'true' do
                 before do
                     allow(subject).to receive(:use_browsers?) { true }
                 end
@@ -15,7 +15,7 @@ describe Arachni::Framework::Parts::Browser do
                 end
             end
 
-            context false do
+            context 'false' do
                 before do
                     allow(subject).to receive(:use_browsers?) { false }
                 end
@@ -29,7 +29,7 @@ describe Arachni::Framework::Parts::Browser do
 
     describe '#use_browsers?' do
         context "when #{Arachni::OptionGroups::BrowserCluster}#pool_size is" do
-            context 0 do
+            context '0' do
                 before do
                     subject.options.browser_cluster.pool_size = 0
                 end
@@ -51,7 +51,7 @@ describe Arachni::Framework::Parts::Browser do
         end
 
         context "when #{Arachni::OptionGroups::Scope}#dom_depth_limit is" do
-            context 0 do
+            context '0' do
                 before do
                     subject.options.scope.dom_depth_limit = 0
                 end
@@ -73,7 +73,7 @@ describe Arachni::Framework::Parts::Browser do
         end
 
         context 'when #host_has_browser? is' do
-            context true do
+            context 'true' do
                 before do
                     allow(subject).to receive(:use_browsers?) { true }
                 end
@@ -83,7 +83,7 @@ describe Arachni::Framework::Parts::Browser do
                 end
             end
 
-            context false do
+            context 'false' do
                 before do
                     allow(subject).to receive(:host_has_browser?) { false }
                 end
@@ -97,7 +97,7 @@ describe Arachni::Framework::Parts::Browser do
 
     describe '#host_has_browser?' do
         context "when #{Arachni::Browser}.has_executable? is" do
-            context true do
+            context 'true' do
                 before do
                     allow(Arachni::Browser).to receive(:has_executable?) { true }
                 end
@@ -107,7 +107,7 @@ describe Arachni::Framework::Parts::Browser do
                 end
             end
 
-            context false do
+            context 'false' do
                 before do
                     allow(Arachni::Browser).to receive(:has_executable?) { false }
                 end

data/spec/arachni/framework/parts/check_spec.rb

@@ -11,7 +11,7 @@ describe Arachni::Framework::Parts::Check do
     end
 
     describe '#list_checks' do
-        context 'when a pattern is given' do
+        context 'when a glob is given' do
             it 'uses it to filter out checks that do not match it' do
                 subject.list_checks( 'boo' ).size == 0
 

data/spec/arachni/framework/parts/data_spec.rb

@@ -81,14 +81,14 @@ describe Arachni::Framework::Parts::Data do
         end
 
         context 'when #accepts_more_pages?' do
-            context false do
+            context 'false' do
                 it 'returns false' do
                     allow(subject).to receive(:accepts_more_pages?) { false }
                     expect(subject.push_to_page_queue( page )).to be_falsey
                 end
             end
 
-            context true do
+            context 'true' do
                 it 'returns true' do
                     allow(subject).to receive(:accepts_more_pages?) { true }
                     expect(subject.push_to_page_queue( page )).to be_truthy
@@ -147,14 +147,14 @@ describe Arachni::Framework::Parts::Data do
         end
 
         context 'when #accepts_more_pages?' do
-            context false do
+            context 'false' do
                 it 'returns false' do
                     allow(subject).to receive(:accepts_more_pages?) { false }
                     expect(subject.push_to_url_queue( @url )).to be_falsey
                 end
             end
 
-            context true do
+            context 'true' do
                 it 'returns true' do
                     allow(subject).to receive(:accepts_more_pages?) { true }
                     expect(subject.push_to_url_queue( @url )).to be_truthy

data/spec/arachni/framework/parts/scope_spec.rb

@@ -65,7 +65,7 @@ describe Arachni::Framework::Parts::Scope do
         end
 
         context 'when #page_limit_reached?' do
-            context true do
+            context 'true' do
                 it 'returns false' do
                     allow(subject).to receive(:page_limit_reached?) { true }
                     expect(subject.accepts_more_pages?).to be_falsey
@@ -74,7 +74,7 @@ describe Arachni::Framework::Parts::Scope do
         end
 
         context 'when #crawl?' do
-            context false do
+            context 'false' do
                 it 'returns false' do
                     allow(subject).to receive(:crawl?) { false }
                     expect(subject.accepts_more_pages?).to be_falsey

data/spec/arachni/framework_spec.rb

@@ -184,7 +184,7 @@ describe Arachni::Framework do
             end
         end
 
-        describe :runtime do
+        describe ':runtime' do
             context 'when the scan has been running' do
                 it 'returns the runtime in seconds' do
                     subject.run

data/spec/arachni/http/client/dynamic_404_handlers_spec.rb

@@ -42,7 +42,19 @@ describe Arachni::HTTP::Client::Dynamic404Handler do
         context 'when dealing with a dynamic handler' do
             context 'which at any point returns non-200' do
                 it 'aborts the check' do
-                    response = client.get( url + 'dynamic/erratic', mode: :sync )
+                    response = client.get( url + 'dynamic/erratic/code/test', mode: :sync )
+
+                    check = nil
+                    subject._404?( response ) { |bool| check = bool }
+                    client.run
+
+                    expect(check).to be_nil
+                end
+            end
+
+            context 'which is too erratic' do
+                it 'aborts the check' do
+                    response = client.get( url + 'dynamic/erratic/body/test', mode: :sync )
 
                     check = nil
                     subject._404?( response ) { |bool| check = bool }
@@ -57,18 +69,19 @@ describe Arachni::HTTP::Client::Dynamic404Handler do
                     res = nil
                     client.get( url + 'dynamic/crap' ) { |c_res| res = c_res }
                     client.run
-                    bool = false
+                    bool = nil
                     subject._404?( res ) { |c_bool| bool = c_bool }
                     client.run
                     expect(bool).to be_truthy
                 end
             end
+
             context 'which includes constantly changing text in the response' do
                 it 'returns true' do
                     res = nil
                     client.get( url + 'random/crap' ) { |c_res| res = c_res }
                     client.run
-                    bool = false
+                    bool = nil
                     subject._404?( res ) { |c_bool| bool = c_bool }
                     client.run
                     expect(bool).to be_truthy
@@ -79,7 +92,7 @@ describe Arachni::HTTP::Client::Dynamic404Handler do
                     res = nil
                     client.get( url + 'combo/crap' ) { |c_res| res = c_res }
                     client.run
-                    bool = false
+                    bool = nil
                     subject._404?( res ) { |c_bool| bool = c_bool }
                     client.run
                     expect(bool).to be_truthy
@@ -93,7 +106,7 @@ describe Arachni::HTTP::Client::Dynamic404Handler do
                         client.get( url + 'advanced/sensitive-ext/blah.html2' ) { |c_res| res = c_res }
                         client.run
 
-                        bool = false
+                        bool = nil
                         subject._404?( res ) { |c_bool| bool = c_bool }
                         client.run
 
@@ -115,7 +128,7 @@ describe Arachni::HTTP::Client::Dynamic404Handler do
                 client.get( url + 'static/crap' ) { |c_res| res = c_res }
                 client.run
 
-                bool = false
+                bool = nil
                 subject._404?( res ) { |c_bool| bool = c_bool }
                 client.run
                 expect(bool).to be_truthy
@@ -135,7 +148,7 @@ describe Arachni::HTTP::Client::Dynamic404Handler do
                     overhead += 1
                 end
 
-                bool = false
+                bool = nil
                 subject._404?( res ) { |c_bool| bool = c_bool }
                 client.run
                 expect(bool).to be_truthy
@@ -231,7 +244,7 @@ describe Arachni::HTTP::Client::Dynamic404Handler do
 
     describe 'needs_check?' do
         context 'when #checked?' do
-            context false do
+            context 'false' do
                 before(:each) { allow(subject).to receive(:checked?) { false } }
 
                 it 'returns true' do
@@ -239,7 +252,7 @@ describe Arachni::HTTP::Client::Dynamic404Handler do
                 end
 
                 context 'and #checked_and_static?' do
-                    context false do
+                    context 'false' do
                         before(:each) { allow(subject).to receive(:checked_and_static?) { false } }
 
                         it 'returns true' do
@@ -247,7 +260,7 @@ describe Arachni::HTTP::Client::Dynamic404Handler do
                         end
                     end
 
-                    context true do
+                    context 'true' do
                         before(:each) { allow(subject).to receive(:checked_and_static?) { true } }
 
                         it 'returns true' do
@@ -257,7 +270,7 @@ describe Arachni::HTTP::Client::Dynamic404Handler do
                 end
             end
 
-            context true do
+            context 'true' do
                 before(:each) { allow(subject).to receive(:checked?) { true } }
 
                 it 'returns true' do
@@ -265,7 +278,7 @@ describe Arachni::HTTP::Client::Dynamic404Handler do
                 end
 
                 context 'and #checked_and_static?' do
-                    context true do
+                    context 'true' do
                         before(:each) { allow(subject).to receive(:checked_and_static?) { true } }
 
                         it 'returns false' do
@@ -273,7 +286,7 @@ describe Arachni::HTTP::Client::Dynamic404Handler do
                         end
                     end
 
-                    context false do
+                    context 'false' do
                         before(:each) { allow(subject).to receive(:checked_and_static?) { false } }
 
                         it 'returns true' do

data/spec/arachni/http/client_spec.rb

@@ -35,6 +35,41 @@ describe Arachni::HTTP::Client do
         expect(YAML.load( body )).to eq({ 'stuff' => "=stuf \00 here==" })
     end
 
+    describe '#reset_options' do
+        it 'resets #max_concurrency' do
+            Arachni::Options.http.request_concurrency = 10
+            subject.max_concurrency = 1
+
+            subject.reset_options
+            expect(subject.max_concurrency).to eq 10
+        end
+
+        it 'resets User-Agent headers' do
+            Arachni::Options.http.user_agent = 'Stuff'
+            subject.headers['User-Agent'] = 'Other stuff'
+
+            subject.reset_options
+            expect(subject.headers['User-Agent']).to eq 'Stuff'
+        end
+
+        it 'resets custom headers' do
+            Arachni::Options.http.request_headers = {
+                'X-Stuff' => '1'
+            }
+            subject.headers['X-Stuff'] = '2'
+
+            subject.reset_options
+            expect(subject.headers['X-Stuff']).to eq '1'
+        end
+
+        it 'clears custom headers' do
+            subject.headers['X-Stuff'] = '2'
+
+            subject.reset_options
+            expect(subject.headers).to_not include 'X-Stuff'
+        end
+    end
+
     describe '#statistics' do
         let(:statistics) { subject.statistics }
 
@@ -61,8 +96,7 @@ describe Arachni::HTTP::Client do
                     expect(code).to eq(401)
 
                     url = Arachni::Utilities.uri_parse( "#{@opts.url}auth/simple-chars" )
-                    url.user = 'username'
-                    url.password = 'password'
+                    url.userinfo = 'username:password'
                     @opts.url = url.to_s
 
                     body = nil
@@ -74,7 +108,7 @@ describe Arachni::HTTP::Client do
         end
 
         describe '#fingerprint?' do
-            context true do
+            context 'true' do
                 it 'performs platform fingerprinting on the response' do
                     Arachni::Options.fingerprint
 
@@ -86,7 +120,7 @@ describe Arachni::HTTP::Client do
                 end
             end
 
-            context false do
+            context 'false' do
                 it 'does not fingerprint the response' do
                     Arachni::Platform::Manager.clear
                     Arachni::Options.do_not_fingerprint
@@ -103,7 +137,7 @@ describe Arachni::HTTP::Client do
 
     describe Arachni::OptionGroups::HTTP do
         describe '#request_concurrency' do
-            context Integer do
+            context 'Integer' do
                 it 'uses it as a max_concurrency' do
                     @opts.http.request_concurrency = 34
                     subject.reset
@@ -140,7 +174,7 @@ describe Arachni::HTTP::Client do
         end
 
         describe '#request_timeout' do
-            context Integer do
+            context 'Integer' do
                 it 'uses it as an HTTP timeout' do
                     @opts.http.request_timeout = 10000000000
                     timed_out = false
@@ -198,7 +232,7 @@ describe Arachni::HTTP::Client do
                 expect(body).to eq(@opts.http.user_agent)
                 expect(@opts.http.user_agent).to eq(Arachni::OptionGroups::HTTP.defaults[:user_agent])
             end
-            context String do
+            context 'String' do
                 it 'uses it as a user-agent' do
                     ua = 'my user agent'
                     @opts.http.user_agent = ua.dup
@@ -213,7 +247,7 @@ describe Arachni::HTTP::Client do
         end
 
         describe '#request_redirect_limit' do
-            context Integer do
+            context 'Integer' do
                 it 'should not exceed that amount of redirects' do
                     @opts.http.request_redirect_limit = 2
                     code = nil
@@ -579,7 +613,8 @@ describe Arachni::HTTP::Client do
             expect(subject.request( @url, mode: :sync ).request.headers_string).to eq(
                 "GET / HTTP/1.1\r\nHost: #{host}\r\nAccept-Encoding: gzip, " +
                     "deflate\r\nUser-Agent: Arachni/v#{Arachni::VERSION}\r\nAccept: text/html," +
-                    "application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\n\r\n"
+                    "application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\n" +
+                    "Accept-Language: en-US,en;q=0.8,he;q=0.6\r\n\r\n"
             )
         end
 
@@ -594,7 +629,7 @@ describe Arachni::HTTP::Client do
             ).request.effective_body).to eq("1=%202&%203=4")
         end
 
-        describe :fingerprint do
+        describe ':fingerprint' do
             before do
                 Arachni::Platform::Manager.clear
             end
@@ -609,7 +644,7 @@ describe Arachni::HTTP::Client do
                 end
             end
 
-            context true do
+            context 'true' do
                 it 'performs platform fingerprinting on the response' do
                     res = nil
                     subject.request( @url + '/fingerprint.php', fingerprint: true ) { |c_res| res = c_res }
@@ -619,7 +654,7 @@ describe Arachni::HTTP::Client do
                 end
             end
 
-            context false do
+            context 'false' do
                 it 'does not fingerprint the response' do
                     res = nil
                     subject.request( @url + '/fingerprint.php', fingerprint: false ) { |c_res| res = c_res }
@@ -630,7 +665,7 @@ describe Arachni::HTTP::Client do
             end
         end
 
-        describe :response_max_size do
+        describe ':response_max_size' do
             context 'when not specified' do
                 context "and #{Arachni::OptionGroups::HTTP}#response_max_size is specified" do
                     context 'when response bodies are larger that its value' do
@@ -774,8 +809,8 @@ describe Arachni::HTTP::Client do
             end
         end
 
-        describe :no_cookie_jar do
-            context true do
+        describe ':no_cookie_jar' do
+            context 'true' do
                 it 'skips the cookie-jar' do
                     body = nil
                     subject.request( @url + '/cookies', no_cookie_jar: true ) { |res| body = res.body }
@@ -783,9 +818,9 @@ describe Arachni::HTTP::Client do
                     expect(YAML.load( body )).to eq({})
                 end
             end
-            context false do
-                it 'uses the cookie_jar' do
-                    @opts.http.cookie_string = 'my_cookie_name=val1;blah_name=val2;another_name=another_val'
+            context 'false' do
+                it 'uses the raw data from the cookie jar' do
+                    @opts.http.cookie_string = 'my_cookie_name="val1";"blah_name"=val2;another_name=another_val'
                     expect(subject.cookie_jar.cookies).to be_empty
                     subject.reset
 
@@ -794,8 +829,8 @@ describe Arachni::HTTP::Client do
                     subject.request( @url + '/cookies', no_cookie_jar: false ) { |res| body = res.body }
                     subject.run
                     expect(YAML.load( body )).to eq({
-                        'my_cookie_name' => 'val1',
-                        'blah_name' => 'val2',
+                        'my_cookie_name' => '"val1"',
+                        '"blah_name"' => 'val2',
                         'another_name' => 'another_val'
                     })
                 end
@@ -822,24 +857,24 @@ describe Arachni::HTTP::Client do
             end
             context 'nil' do
                 it 'defaults to false' do
-                    @opts.http.cookie_string = 'my_cookie_name=val1;blah_name=val2;another_name=another_val'
+                    @opts.http.cookie_string = 'my_cookie_name="val1";"blah_name"=val2;another_name=another_val'
                     expect(subject.cookie_jar.cookies).to be_empty
                     subject.reset
 
                     body = nil
 
-                    subject.request( @url + '/cookies' ) { |res| body = res.body }
+                    subject.request( @url + '/cookies', no_cookie_jar: false ) { |res| body = res.body }
                     subject.run
                     expect(YAML.load( body )).to eq({
-                        'my_cookie_name' => 'val1',
-                        'blah_name' => 'val2',
+                        'my_cookie_name' => '"val1"',
+                        '"blah_name"' => 'val2',
                         'another_name' => 'another_val'
                     })
                 end
             end
         end
 
-        describe :body do
+        describe ':body' do
             it 'uses its value as a request body' do
                 req_body = 'heyaya'
                 body = nil
@@ -849,7 +884,7 @@ describe Arachni::HTTP::Client do
             end
         end
 
-        describe :method do
+        describe ':method' do
             describe 'nil' do
                 it 'performs a GET HTTP request' do
                     body = nil
@@ -858,7 +893,7 @@ describe Arachni::HTTP::Client do
                     expect(body).to eq('GET')
                 end
             end
-            describe :get do
+            describe ':get' do
                 it 'performs a GET HTTP request' do
                     body = nil
                     subject.request( @url, method: :get ) { |res| body = res.body }
@@ -880,7 +915,7 @@ describe Arachni::HTTP::Client do
                     end
                 end
             end
-            describe :post do
+            describe ':post' do
                 it 'performs a POST HTTP request' do
                     body = nil
                     subject.request( @url, method: :post ) { |res| body = res.body }
@@ -888,7 +923,7 @@ describe Arachni::HTTP::Client do
                     expect(body).to eq('POST')
                 end
             end
-            describe :put do
+            describe ':put' do
                 it 'performs a PUT HTTP request' do
                     body = nil
                     subject.request( @url, method: :put ) { |res| body = res.body }
@@ -896,7 +931,7 @@ describe Arachni::HTTP::Client do
                     expect(body).to eq('PUT')
                 end
             end
-            describe :options do
+            describe ':options' do
                 it 'performs a OPTIONS HTTP request' do
                     body = nil
                     subject.request( @url, method: :options ) { |res| body = res.body }
@@ -904,7 +939,7 @@ describe Arachni::HTTP::Client do
                     expect(body).to eq('OPTIONS')
                 end
             end
-            describe :delete do
+            describe ':delete' do
                 it 'performs a POST HTTP request' do
                     body = nil
                     subject.request( @url, method: :delete ) { |res| body = res.body }
@@ -914,7 +949,7 @@ describe Arachni::HTTP::Client do
             end
         end
 
-        describe :parameters do
+        describe ':parameters' do
             it 'specifies the query params as a hash' do
                 body = nil
                 params = { 'param' => 'value' }
@@ -932,7 +967,7 @@ describe Arachni::HTTP::Client do
             end
         end
 
-        describe :body do
+        describe ':body' do
             it 'properly encodes special characters' do
                 body = nil
                 params = { '% param\ +=&;' => '% value\ +=&;', 'nil' => nil }
@@ -950,7 +985,7 @@ describe Arachni::HTTP::Client do
             end
         end
 
-        describe :timeout do
+        describe ':timeout' do
             describe 'nil' do
                 it 'runs without a timeout' do
                     timed_out = false
@@ -993,7 +1028,7 @@ describe Arachni::HTTP::Client do
             end
         end
 
-        describe :cookies do
+        describe ':cookies' do
             it 'preserves nullbytess' do
                 cookies = { "name\0" => "val\0" }
                 body = nil
@@ -1087,7 +1122,7 @@ describe Arachni::HTTP::Client do
             end
         end
 
-        describe :mode do
+        describe ':mode' do
             describe 'nil' do
                 it 'performs the request asynchronously' do
                     performed = false
@@ -1096,7 +1131,7 @@ describe Arachni::HTTP::Client do
                     expect(performed).to be_truthy
                 end
             end
-            describe :async do
+            describe ':async' do
                 it 'performs the request asynchronously' do
                     performed = false
                     subject.request( @url, mode: :sync ) { performed = true }
@@ -1104,7 +1139,7 @@ describe Arachni::HTTP::Client do
                     expect(performed).to be_truthy
                 end
             end
-            describe :sync do
+            describe ':sync' do
                 it 'performs the request synchronously and returns the response' do
                     expect(subject.request( @url, mode: :sync )).to be_kind_of Arachni::HTTP::Response
                 end
@@ -1127,7 +1162,7 @@ describe Arachni::HTTP::Client do
             end
         end
 
-        describe :headers do
+        describe ':headers' do
             describe 'nil' do
                 it 'uses the default headers' do
                     body = nil
@@ -1150,7 +1185,7 @@ describe Arachni::HTTP::Client do
             end
         end
 
-        describe :update_cookies do
+        describe ':update_cookies' do
             describe 'nil' do
                 it 'skips the cookie_jar' do
                     cookies = []
@@ -1165,7 +1200,7 @@ describe Arachni::HTTP::Client do
                 end
             end
 
-            describe false do
+            describe 'false' do
                 it 'skips the cookie_jar' do
                     cookies = []
                     cookies << Arachni::Element::Cookie.new(
@@ -1179,7 +1214,7 @@ describe Arachni::HTTP::Client do
                 end
             end
 
-            describe true do
+            describe 'true' do
                 it 'updates the cookie_jar' do
                     cookies = []
                     cookies << Arachni::Element::Cookie.new(
@@ -1196,7 +1231,7 @@ describe Arachni::HTTP::Client do
             end
         end
 
-        describe :follow_location do
+        describe ':follow_location' do
             describe 'nil' do
                 it 'ignores redirects' do
                     res = nil
@@ -1206,7 +1241,7 @@ describe Arachni::HTTP::Client do
                     expect(res.body).to eq('')
                 end
             end
-            describe false do
+            describe 'false' do
                 it 'ignores redirects' do
                     res = nil
                     subject.request( @url + '/follow_location', follow_location: false ) { |c_res| res = c_res }
@@ -1215,7 +1250,7 @@ describe Arachni::HTTP::Client do
                     expect(res.body).to eq('')
                 end
             end
-            describe true do
+            describe 'true' do
                 it 'follows redirects' do
                     res = nil
                     subject.request( @url + '/follow_location', follow_location: true ) { |c_res| res = c_res }