codesake-dawn 0.50

Sign up to get free protection for your applications and to get access to all the features.
Files changed (217) hide show
  1. data/.gitignore +18 -0
  2. data/.rvmrc +48 -0
  3. data/Gemfile +4 -0
  4. data/LICENSE.txt +22 -0
  5. data/README.md +54 -0
  6. data/Rakefile +64 -0
  7. data/Roadmap.md +44 -0
  8. data/bin/dawn +106 -0
  9. data/codesake_dawn.gemspec +25 -0
  10. data/lib/codesake-dawn.rb +7 -0
  11. data/lib/codesake/dawn/engine.rb +144 -0
  12. data/lib/codesake/dawn/kb/basic_check.rb +93 -0
  13. data/lib/codesake/dawn/kb/cve_2011_2931.rb +32 -0
  14. data/lib/codesake/dawn/kb/cve_2012_2660.rb +30 -0
  15. data/lib/codesake/dawn/kb/cve_2012_2661.rb +29 -0
  16. data/lib/codesake/dawn/kb/cve_2012_2694.rb +31 -0
  17. data/lib/codesake/dawn/kb/cve_2012_2695.rb +29 -0
  18. data/lib/codesake/dawn/kb/cve_2012_3465.rb +28 -0
  19. data/lib/codesake/dawn/kb/cve_2012_6496.rb +30 -0
  20. data/lib/codesake/dawn/kb/cve_2012_6497.rb +30 -0
  21. data/lib/codesake/dawn/kb/cve_2013_0155.rb +30 -0
  22. data/lib/codesake/dawn/kb/cve_2013_0269.rb +29 -0
  23. data/lib/codesake/dawn/kb/cve_2013_0333.rb +33 -0
  24. data/lib/codesake/dawn/kb/cve_2013_1800.rb +28 -0
  25. data/lib/codesake/dawn/kb/cve_2013_1855.rb +20 -0
  26. data/lib/codesake/dawn/kb/cve_2013_1857.rb +22 -0
  27. data/lib/codesake/dawn/kb/dependency_check.rb +39 -0
  28. data/lib/codesake/dawn/kb/not_revised_code.rb +24 -0
  29. data/lib/codesake/dawn/kb/pattern_match_check.rb +60 -0
  30. data/lib/codesake/dawn/knowledge_base.rb +105 -0
  31. data/lib/codesake/dawn/rails.rb +17 -0
  32. data/lib/codesake/dawn/sinatra.rb +14 -0
  33. data/lib/codesake/dawn/version.rb +5 -0
  34. data/spec/lib/dawn/codesake_knowledgebase_spec.rb +100 -0
  35. data/spec/lib/dawn/codesake_sinatra_engine_spec.rb +80 -0
  36. data/spec/lib/kb/codesake_cve_2013_1800_spec.rb +66 -0
  37. data/spec/lib/kb/codesake_cve_2013_1855_spec.rb +16 -0
  38. data/spec/lib/kb/cve_2011_2931_spec.rb +7 -0
  39. data/spec/lib/kb/cve_2012_2660_spec.rb +9 -0
  40. data/spec/lib/kb/cve_2012_2661_spec.rb +7 -0
  41. data/spec/lib/kb/cve_2012_2694_spec.rb +7 -0
  42. data/spec/lib/kb/cve_2012_2695_spec.rb +7 -0
  43. data/spec/lib/kb/cve_2012_3465_spec.rb +7 -0
  44. data/spec/lib/kb/cve_2012_6496_spec.rb +7 -0
  45. data/spec/lib/kb/cve_2012_6497_spec.rb +7 -0
  46. data/spec/lib/kb/cve_2013_0155_spec.rb +7 -0
  47. data/spec/lib/kb/cve_2013_0269_spec.rb +7 -0
  48. data/spec/lib/kb/cve_2013_0333_spec.rb +7 -0
  49. data/spec/lib/kb/cve_2013_1857_spec.rb +13 -0
  50. data/spec/spec_helper.rb +1 -0
  51. data/spec/support/hello_world_3.0.19/.gitignore +4 -0
  52. data/spec/support/hello_world_3.0.19/Gemfile +31 -0
  53. data/spec/support/hello_world_3.0.19/README +256 -0
  54. data/spec/support/hello_world_3.0.19/Rakefile +7 -0
  55. data/spec/support/hello_world_3.0.19/app/controllers/application_controller.rb +3 -0
  56. data/spec/support/hello_world_3.0.19/app/helpers/application_helper.rb +2 -0
  57. data/spec/support/hello_world_3.0.19/app/views/layouts/application.html.erb +14 -0
  58. data/spec/support/hello_world_3.0.19/config.ru +4 -0
  59. data/spec/support/hello_world_3.0.19/config/application.rb +42 -0
  60. data/spec/support/hello_world_3.0.19/config/boot.rb +6 -0
  61. data/spec/support/hello_world_3.0.19/config/database.yml +22 -0
  62. data/spec/support/hello_world_3.0.19/config/environment.rb +5 -0
  63. data/spec/support/hello_world_3.0.19/config/environments/development.rb +26 -0
  64. data/spec/support/hello_world_3.0.19/config/environments/production.rb +49 -0
  65. data/spec/support/hello_world_3.0.19/config/environments/test.rb +35 -0
  66. data/spec/support/hello_world_3.0.19/config/initializers/backtrace_silencers.rb +7 -0
  67. data/spec/support/hello_world_3.0.19/config/initializers/inflections.rb +10 -0
  68. data/spec/support/hello_world_3.0.19/config/initializers/mime_types.rb +5 -0
  69. data/spec/support/hello_world_3.0.19/config/initializers/secret_token.rb +7 -0
  70. data/spec/support/hello_world_3.0.19/config/initializers/session_store.rb +8 -0
  71. data/spec/support/hello_world_3.0.19/config/locales/en.yml +5 -0
  72. data/spec/support/hello_world_3.0.19/config/routes.rb +58 -0
  73. data/spec/support/hello_world_3.0.19/db/seeds.rb +7 -0
  74. data/spec/support/hello_world_3.0.19/lib/tasks/.gitkeep +0 -0
  75. data/spec/support/hello_world_3.0.19/public/404.html +26 -0
  76. data/spec/support/hello_world_3.0.19/public/422.html +26 -0
  77. data/spec/support/hello_world_3.0.19/public/500.html +26 -0
  78. data/spec/support/hello_world_3.0.19/public/favicon.ico +0 -0
  79. data/spec/support/hello_world_3.0.19/public/images/rails.png +0 -0
  80. data/spec/support/hello_world_3.0.19/public/index.html +239 -0
  81. data/spec/support/hello_world_3.0.19/public/javascripts/application.js +2 -0
  82. data/spec/support/hello_world_3.0.19/public/javascripts/controls.js +965 -0
  83. data/spec/support/hello_world_3.0.19/public/javascripts/dragdrop.js +974 -0
  84. data/spec/support/hello_world_3.0.19/public/javascripts/effects.js +1123 -0
  85. data/spec/support/hello_world_3.0.19/public/javascripts/prototype.js +6001 -0
  86. data/spec/support/hello_world_3.0.19/public/javascripts/rails.js +202 -0
  87. data/spec/support/hello_world_3.0.19/public/robots.txt +5 -0
  88. data/spec/support/hello_world_3.0.19/public/stylesheets/.gitkeep +0 -0
  89. data/spec/support/hello_world_3.0.19/script/rails +6 -0
  90. data/spec/support/hello_world_3.0.19/test/performance/browsing_test.rb +9 -0
  91. data/spec/support/hello_world_3.0.19/test/test_helper.rb +13 -0
  92. data/spec/support/hello_world_3.0.19/vendor/plugins/.gitkeep +0 -0
  93. data/spec/support/hello_world_3.1.0/.gitignore +5 -0
  94. data/spec/support/hello_world_3.1.0/Gemfile +33 -0
  95. data/spec/support/hello_world_3.1.0/README +261 -0
  96. data/spec/support/hello_world_3.1.0/Rakefile +7 -0
  97. data/spec/support/hello_world_3.1.0/app/assets/images/rails.png +0 -0
  98. data/spec/support/hello_world_3.1.0/app/assets/javascripts/application.js +9 -0
  99. data/spec/support/hello_world_3.1.0/app/assets/stylesheets/application.css +7 -0
  100. data/spec/support/hello_world_3.1.0/app/controllers/application_controller.rb +3 -0
  101. data/spec/support/hello_world_3.1.0/app/helpers/application_helper.rb +2 -0
  102. data/spec/support/hello_world_3.1.0/app/mailers/.gitkeep +0 -0
  103. data/spec/support/hello_world_3.1.0/app/models/.gitkeep +0 -0
  104. data/spec/support/hello_world_3.1.0/app/views/layouts/application.html.erb +14 -0
  105. data/spec/support/hello_world_3.1.0/config.ru +4 -0
  106. data/spec/support/hello_world_3.1.0/config/application.rb +48 -0
  107. data/spec/support/hello_world_3.1.0/config/boot.rb +6 -0
  108. data/spec/support/hello_world_3.1.0/config/database.yml +25 -0
  109. data/spec/support/hello_world_3.1.0/config/environment.rb +5 -0
  110. data/spec/support/hello_world_3.1.0/config/environments/development.rb +30 -0
  111. data/spec/support/hello_world_3.1.0/config/environments/production.rb +60 -0
  112. data/spec/support/hello_world_3.1.0/config/environments/test.rb +42 -0
  113. data/spec/support/hello_world_3.1.0/config/initializers/backtrace_silencers.rb +7 -0
  114. data/spec/support/hello_world_3.1.0/config/initializers/inflections.rb +10 -0
  115. data/spec/support/hello_world_3.1.0/config/initializers/mime_types.rb +5 -0
  116. data/spec/support/hello_world_3.1.0/config/initializers/secret_token.rb +7 -0
  117. data/spec/support/hello_world_3.1.0/config/initializers/session_store.rb +8 -0
  118. data/spec/support/hello_world_3.1.0/config/initializers/wrap_parameters.rb +14 -0
  119. data/spec/support/hello_world_3.1.0/config/locales/en.yml +5 -0
  120. data/spec/support/hello_world_3.1.0/config/routes.rb +58 -0
  121. data/spec/support/hello_world_3.1.0/db/seeds.rb +7 -0
  122. data/spec/support/hello_world_3.1.0/lib/assets/.gitkeep +0 -0
  123. data/spec/support/hello_world_3.1.0/lib/tasks/.gitkeep +0 -0
  124. data/spec/support/hello_world_3.1.0/log/.gitkeep +0 -0
  125. data/spec/support/hello_world_3.1.0/public/404.html +26 -0
  126. data/spec/support/hello_world_3.1.0/public/422.html +26 -0
  127. data/spec/support/hello_world_3.1.0/public/500.html +26 -0
  128. data/spec/support/hello_world_3.1.0/public/favicon.ico +0 -0
  129. data/spec/support/hello_world_3.1.0/public/index.html +241 -0
  130. data/spec/support/hello_world_3.1.0/public/robots.txt +5 -0
  131. data/spec/support/hello_world_3.1.0/script/rails +6 -0
  132. data/spec/support/hello_world_3.1.0/test/fixtures/.gitkeep +0 -0
  133. data/spec/support/hello_world_3.1.0/test/functional/.gitkeep +0 -0
  134. data/spec/support/hello_world_3.1.0/test/integration/.gitkeep +0 -0
  135. data/spec/support/hello_world_3.1.0/test/performance/browsing_test.rb +12 -0
  136. data/spec/support/hello_world_3.1.0/test/test_helper.rb +13 -0
  137. data/spec/support/hello_world_3.1.0/test/unit/.gitkeep +0 -0
  138. data/spec/support/hello_world_3.1.0/vendor/assets/stylesheets/.gitkeep +0 -0
  139. data/spec/support/hello_world_3.1.0/vendor/plugins/.gitkeep +0 -0
  140. data/spec/support/hello_world_3.2.13/.gitignore +15 -0
  141. data/spec/support/hello_world_3.2.13/Gemfile +38 -0
  142. data/spec/support/hello_world_3.2.13/README.rdoc +261 -0
  143. data/spec/support/hello_world_3.2.13/Rakefile +7 -0
  144. data/spec/support/hello_world_3.2.13/app/assets/images/rails.png +0 -0
  145. data/spec/support/hello_world_3.2.13/app/assets/javascripts/application.js +15 -0
  146. data/spec/support/hello_world_3.2.13/app/assets/stylesheets/application.css +13 -0
  147. data/spec/support/hello_world_3.2.13/app/controllers/application_controller.rb +3 -0
  148. data/spec/support/hello_world_3.2.13/app/helpers/application_helper.rb +2 -0
  149. data/spec/support/hello_world_3.2.13/app/mailers/.gitkeep +0 -0
  150. data/spec/support/hello_world_3.2.13/app/models/.gitkeep +0 -0
  151. data/spec/support/hello_world_3.2.13/app/views/layouts/application.html.erb +14 -0
  152. data/spec/support/hello_world_3.2.13/config.ru +4 -0
  153. data/spec/support/hello_world_3.2.13/config/application.rb +62 -0
  154. data/spec/support/hello_world_3.2.13/config/boot.rb +6 -0
  155. data/spec/support/hello_world_3.2.13/config/database.yml +25 -0
  156. data/spec/support/hello_world_3.2.13/config/environment.rb +5 -0
  157. data/spec/support/hello_world_3.2.13/config/environments/development.rb +37 -0
  158. data/spec/support/hello_world_3.2.13/config/environments/production.rb +67 -0
  159. data/spec/support/hello_world_3.2.13/config/environments/test.rb +37 -0
  160. data/spec/support/hello_world_3.2.13/config/initializers/backtrace_silencers.rb +7 -0
  161. data/spec/support/hello_world_3.2.13/config/initializers/inflections.rb +15 -0
  162. data/spec/support/hello_world_3.2.13/config/initializers/mime_types.rb +5 -0
  163. data/spec/support/hello_world_3.2.13/config/initializers/secret_token.rb +7 -0
  164. data/spec/support/hello_world_3.2.13/config/initializers/session_store.rb +8 -0
  165. data/spec/support/hello_world_3.2.13/config/initializers/wrap_parameters.rb +14 -0
  166. data/spec/support/hello_world_3.2.13/config/locales/en.yml +5 -0
  167. data/spec/support/hello_world_3.2.13/config/routes.rb +58 -0
  168. data/spec/support/hello_world_3.2.13/db/seeds.rb +7 -0
  169. data/spec/support/hello_world_3.2.13/lib/assets/.gitkeep +0 -0
  170. data/spec/support/hello_world_3.2.13/lib/tasks/.gitkeep +0 -0
  171. data/spec/support/hello_world_3.2.13/log/.gitkeep +0 -0
  172. data/spec/support/hello_world_3.2.13/public/404.html +26 -0
  173. data/spec/support/hello_world_3.2.13/public/422.html +26 -0
  174. data/spec/support/hello_world_3.2.13/public/500.html +25 -0
  175. data/spec/support/hello_world_3.2.13/public/favicon.ico +0 -0
  176. data/spec/support/hello_world_3.2.13/public/index.html +241 -0
  177. data/spec/support/hello_world_3.2.13/public/robots.txt +5 -0
  178. data/spec/support/hello_world_3.2.13/script/rails +6 -0
  179. data/spec/support/hello_world_3.2.13/test/fixtures/.gitkeep +0 -0
  180. data/spec/support/hello_world_3.2.13/test/functional/.gitkeep +0 -0
  181. data/spec/support/hello_world_3.2.13/test/integration/.gitkeep +0 -0
  182. data/spec/support/hello_world_3.2.13/test/performance/browsing_test.rb +12 -0
  183. data/spec/support/hello_world_3.2.13/test/test_helper.rb +13 -0
  184. data/spec/support/hello_world_3.2.13/test/unit/.gitkeep +0 -0
  185. data/spec/support/hello_world_3.2.13/vendor/assets/javascripts/.gitkeep +0 -0
  186. data/spec/support/hello_world_3.2.13/vendor/assets/stylesheets/.gitkeep +0 -0
  187. data/spec/support/hello_world_3.2.13/vendor/plugins/.gitkeep +0 -0
  188. data/spec/support/lorem.txt +23 -0
  189. data/spec/support/sinatra-safe/.gems +4 -0
  190. data/spec/support/sinatra-safe/.gitignore +6 -0
  191. data/spec/support/sinatra-safe/Gemfile +18 -0
  192. data/spec/support/sinatra-safe/MIT-LICENSE +20 -0
  193. data/spec/support/sinatra-safe/README.rdoc +35 -0
  194. data/spec/support/sinatra-safe/Rakefile +32 -0
  195. data/spec/support/sinatra-safe/application.rb +23 -0
  196. data/spec/support/sinatra-safe/config.ru +11 -0
  197. data/spec/support/sinatra-safe/environment.rb +25 -0
  198. data/spec/support/sinatra-safe/lib/profile.rb +11 -0
  199. data/spec/support/sinatra-safe/public/main.css +52 -0
  200. data/spec/support/sinatra-safe/script/console +16 -0
  201. data/spec/support/sinatra-safe/views/layout.haml +14 -0
  202. data/spec/support/sinatra-safe/views/root.haml +4 -0
  203. data/spec/support/sinatra-vulnerable/.gems +4 -0
  204. data/spec/support/sinatra-vulnerable/.gitignore +6 -0
  205. data/spec/support/sinatra-vulnerable/Gemfile +17 -0
  206. data/spec/support/sinatra-vulnerable/MIT-LICENSE +20 -0
  207. data/spec/support/sinatra-vulnerable/README.rdoc +35 -0
  208. data/spec/support/sinatra-vulnerable/Rakefile +32 -0
  209. data/spec/support/sinatra-vulnerable/application.rb +28 -0
  210. data/spec/support/sinatra-vulnerable/config.ru +11 -0
  211. data/spec/support/sinatra-vulnerable/environment.rb +25 -0
  212. data/spec/support/sinatra-vulnerable/lib/profile.rb +11 -0
  213. data/spec/support/sinatra-vulnerable/public/main.css +52 -0
  214. data/spec/support/sinatra-vulnerable/script/console +16 -0
  215. data/spec/support/sinatra-vulnerable/views/layout.haml +14 -0
  216. data/spec/support/sinatra-vulnerable/views/root.haml +4 -0
  217. metadata +519 -0
@@ -0,0 +1,202 @@
1
+ (function() {
2
+ Ajax.Responders.register({
3
+ onCreate: function(request) {
4
+ var token = $$('meta[name=csrf-token]')[0];
5
+ if (token) {
6
+ if (!request.options.requestHeaders) request.options.requestHeaders = {};
7
+ request.options.requestHeaders['X-CSRF-Token'] = token.readAttribute('content');
8
+ }
9
+ }
10
+ });
11
+
12
+ // Technique from Juriy Zaytsev
13
+ // http://thinkweb2.com/projects/prototype/detecting-event-support-without-browser-sniffing/
14
+ function isEventSupported(eventName) {
15
+ var el = document.createElement('div');
16
+ eventName = 'on' + eventName;
17
+ var isSupported = (eventName in el);
18
+ if (!isSupported) {
19
+ el.setAttribute(eventName, 'return;');
20
+ isSupported = typeof el[eventName] == 'function';
21
+ }
22
+ el = null;
23
+ return isSupported;
24
+ }
25
+
26
+ function isForm(element) {
27
+ return Object.isElement(element) && element.nodeName.toUpperCase() == 'FORM';
28
+ }
29
+
30
+ function isInput(element) {
31
+ if (Object.isElement(element)) {
32
+ var name = element.nodeName.toUpperCase();
33
+ return name == 'INPUT' || name == 'SELECT' || name == 'TEXTAREA';
34
+ }
35
+ else return false;
36
+ }
37
+
38
+ var submitBubbles = isEventSupported('submit'),
39
+ changeBubbles = isEventSupported('change');
40
+
41
+ if (!submitBubbles || !changeBubbles) {
42
+ // augment the Event.Handler class to observe custom events when needed
43
+ Event.Handler.prototype.initialize = Event.Handler.prototype.initialize.wrap(
44
+ function(init, element, eventName, selector, callback) {
45
+ init(element, eventName, selector, callback);
46
+ // is the handler being attached to an element that doesn't support this event?
47
+ if ( (!submitBubbles && this.eventName == 'submit' && !isForm(this.element)) ||
48
+ (!changeBubbles && this.eventName == 'change' && !isInput(this.element)) ) {
49
+ // "submit" => "emulated:submit"
50
+ this.eventName = 'emulated:' + this.eventName;
51
+ }
52
+ }
53
+ );
54
+ }
55
+
56
+ if (!submitBubbles) {
57
+ // discover forms on the page by observing focus events which always bubble
58
+ document.on('focusin', 'form', function(focusEvent, form) {
59
+ // special handler for the real "submit" event (one-time operation)
60
+ if (!form.retrieve('emulated:submit')) {
61
+ form.on('submit', function(submitEvent) {
62
+ var emulated = form.fire('emulated:submit', submitEvent, true);
63
+ // if custom event received preventDefault, cancel the real one too
64
+ if (emulated.returnValue === false) submitEvent.preventDefault();
65
+ });
66
+ form.store('emulated:submit', true);
67
+ }
68
+ });
69
+ }
70
+
71
+ if (!changeBubbles) {
72
+ // discover form inputs on the page
73
+ document.on('focusin', 'input, select, textarea', function(focusEvent, input) {
74
+ // special handler for real "change" events
75
+ if (!input.retrieve('emulated:change')) {
76
+ input.on('change', function(changeEvent) {
77
+ input.fire('emulated:change', changeEvent, true);
78
+ });
79
+ input.store('emulated:change', true);
80
+ }
81
+ });
82
+ }
83
+
84
+ function handleRemote(element) {
85
+ var method, url, params;
86
+
87
+ var event = element.fire("ajax:before");
88
+ if (event.stopped) return false;
89
+
90
+ if (element.tagName.toLowerCase() === 'form') {
91
+ method = element.readAttribute('method') || 'post';
92
+ url = element.readAttribute('action');
93
+ // serialize the form with respect to the submit button that was pressed
94
+ params = element.serialize({ submit: element.retrieve('rails:submit-button') });
95
+ // clear the pressed submit button information
96
+ element.store('rails:submit-button', null);
97
+ } else {
98
+ method = element.readAttribute('data-method') || 'get';
99
+ url = element.readAttribute('href');
100
+ params = {};
101
+ }
102
+
103
+ new Ajax.Request(url, {
104
+ method: method,
105
+ parameters: params,
106
+ evalScripts: true,
107
+
108
+ onCreate: function(response) { element.fire("ajax:create", response); },
109
+ onComplete: function(response) { element.fire("ajax:complete", response); },
110
+ onSuccess: function(response) { element.fire("ajax:success", response); },
111
+ onFailure: function(response) { element.fire("ajax:failure", response); }
112
+ });
113
+
114
+ element.fire("ajax:after");
115
+ }
116
+
117
+ function insertHiddenField(form, name, value) {
118
+ form.insert(new Element('input', { type: 'hidden', name: name, value: value }));
119
+ }
120
+
121
+ function handleMethod(element) {
122
+ var method = element.readAttribute('data-method'),
123
+ url = element.readAttribute('href'),
124
+ csrf_param = $$('meta[name=csrf-param]')[0],
125
+ csrf_token = $$('meta[name=csrf-token]')[0];
126
+
127
+ var form = new Element('form', { method: "POST", action: url, style: "display: none;" });
128
+ $(element.parentNode).insert(form);
129
+
130
+ if (method !== 'post') {
131
+ insertHiddenField(form, '_method', method);
132
+ }
133
+
134
+ if (csrf_param) {
135
+ insertHiddenField(form, csrf_param.readAttribute('content'), csrf_token.readAttribute('content'));
136
+ }
137
+
138
+ form.submit();
139
+ }
140
+
141
+ function disableFormElements(form) {
142
+ form.select('input[type=submit][data-disable-with]').each(function(input) {
143
+ input.store('rails:original-value', input.getValue());
144
+ input.setValue(input.readAttribute('data-disable-with')).disable();
145
+ });
146
+ }
147
+
148
+ function enableFormElements(form) {
149
+ form.select('input[type=submit][data-disable-with]').each(function(input) {
150
+ input.setValue(input.retrieve('rails:original-value')).enable();
151
+ });
152
+ }
153
+
154
+ function allowAction(element) {
155
+ var message = element.readAttribute('data-confirm');
156
+ return !message || confirm(message);
157
+ }
158
+
159
+ document.on('click', 'a[data-confirm], a[data-remote], a[data-method]', function(event, link) {
160
+ if (!allowAction(link)) {
161
+ event.stop();
162
+ return false;
163
+ }
164
+
165
+ if (link.readAttribute('data-remote')) {
166
+ handleRemote(link);
167
+ event.stop();
168
+ } else if (link.readAttribute('data-method')) {
169
+ handleMethod(link);
170
+ event.stop();
171
+ }
172
+ });
173
+
174
+ document.on("click", "form input[type=submit], form button[type=submit], form button:not([type])", function(event, button) {
175
+ // register the pressed submit button
176
+ event.findElement('form').store('rails:submit-button', button.name || false);
177
+ });
178
+
179
+ document.on("submit", function(event) {
180
+ var form = event.findElement();
181
+
182
+ if (!allowAction(form)) {
183
+ event.stop();
184
+ return false;
185
+ }
186
+
187
+ if (form.readAttribute('data-remote')) {
188
+ handleRemote(form);
189
+ event.stop();
190
+ } else {
191
+ disableFormElements(form);
192
+ }
193
+ });
194
+
195
+ document.on('ajax:create', 'form', function(event, form) {
196
+ if (form == event.findElement()) disableFormElements(form);
197
+ });
198
+
199
+ document.on('ajax:complete', 'form', function(event, form) {
200
+ if (form == event.findElement()) enableFormElements(form);
201
+ });
202
+ })();
@@ -0,0 +1,5 @@
1
+ # See http://www.robotstxt.org/wc/norobots.html for documentation on how to use the robots.txt file
2
+ #
3
+ # To ban all spiders from the entire site uncomment the next two lines:
4
+ # User-Agent: *
5
+ # Disallow: /
@@ -0,0 +1,6 @@
1
+ #!/usr/bin/env ruby
2
+ # This command will automatically be run when you run "rails" with Rails 3 gems installed from the root of your application.
3
+
4
+ APP_PATH = File.expand_path('../../config/application', __FILE__)
5
+ require File.expand_path('../../config/boot', __FILE__)
6
+ require 'rails/commands'
@@ -0,0 +1,9 @@
1
+ require 'test_helper'
2
+ require 'rails/performance_test_help'
3
+
4
+ # Profiling results for each test method are written to tmp/performance.
5
+ class BrowsingTest < ActionDispatch::PerformanceTest
6
+ def test_homepage
7
+ get '/'
8
+ end
9
+ end
@@ -0,0 +1,13 @@
1
+ ENV["RAILS_ENV"] = "test"
2
+ require File.expand_path('../../config/environment', __FILE__)
3
+ require 'rails/test_help'
4
+
5
+ class ActiveSupport::TestCase
6
+ # Setup all fixtures in test/fixtures/*.(yml|csv) for all tests in alphabetical order.
7
+ #
8
+ # Note: You'll currently still have to declare fixtures explicitly in integration tests
9
+ # -- they do not yet inherit this setting
10
+ fixtures :all
11
+
12
+ # Add more helper methods to be used by all tests here...
13
+ end
@@ -0,0 +1,5 @@
1
+ .bundle
2
+ db/*.sqlite3
3
+ log/*.log
4
+ tmp/
5
+ .sass-cache/
@@ -0,0 +1,33 @@
1
+ source 'http://rubygems.org'
2
+
3
+ gem 'rails', '3.1.0'
4
+
5
+ # Bundle edge Rails instead:
6
+ # gem 'rails', :git => 'git://github.com/rails/rails.git'
7
+
8
+ gem 'sqlite3'
9
+
10
+
11
+ # Gems used only for assets and not required
12
+ # in production environments by default.
13
+ group :assets do
14
+ gem 'sass-rails', " ~> 3.1.0"
15
+ gem 'coffee-rails', "~> 3.1.0"
16
+ gem 'uglifier'
17
+ end
18
+
19
+ gem 'jquery-rails'
20
+
21
+ # Use unicorn as the web server
22
+ # gem 'unicorn'
23
+
24
+ # Deploy with Capistrano
25
+ # gem 'capistrano'
26
+
27
+ # To use debugger
28
+ # gem 'ruby-debug19', :require => 'ruby-debug'
29
+
30
+ group :test do
31
+ # Pretty printed test output
32
+ gem 'turn', :require => false
33
+ end
@@ -0,0 +1,261 @@
1
+ == Welcome to Rails
2
+
3
+ Rails is a web-application framework that includes everything needed to create
4
+ database-backed web applications according to the Model-View-Control pattern.
5
+
6
+ This pattern splits the view (also called the presentation) into "dumb"
7
+ templates that are primarily responsible for inserting pre-built data in between
8
+ HTML tags. The model contains the "smart" domain objects (such as Account,
9
+ Product, Person, Post) that holds all the business logic and knows how to
10
+ persist themselves to a database. The controller handles the incoming requests
11
+ (such as Save New Account, Update Product, Show Post) by manipulating the model
12
+ and directing data to the view.
13
+
14
+ In Rails, the model is handled by what's called an object-relational mapping
15
+ layer entitled Active Record. This layer allows you to present the data from
16
+ database rows as objects and embellish these data objects with business logic
17
+ methods. You can read more about Active Record in
18
+ link:files/vendor/rails/activerecord/README.html.
19
+
20
+ The controller and view are handled by the Action Pack, which handles both
21
+ layers by its two parts: Action View and Action Controller. These two layers
22
+ are bundled in a single package due to their heavy interdependence. This is
23
+ unlike the relationship between the Active Record and Action Pack that is much
24
+ more separate. Each of these packages can be used independently outside of
25
+ Rails. You can read more about Action Pack in
26
+ link:files/vendor/rails/actionpack/README.html.
27
+
28
+
29
+ == Getting Started
30
+
31
+ 1. At the command prompt, create a new Rails application:
32
+ <tt>rails new myapp</tt> (where <tt>myapp</tt> is the application name)
33
+
34
+ 2. Change directory to <tt>myapp</tt> and start the web server:
35
+ <tt>cd myapp; rails server</tt> (run with --help for options)
36
+
37
+ 3. Go to http://localhost:3000/ and you'll see:
38
+ "Welcome aboard: You're riding Ruby on Rails!"
39
+
40
+ 4. Follow the guidelines to start developing your application. You can find
41
+ the following resources handy:
42
+
43
+ * The Getting Started Guide: http://guides.rubyonrails.org/getting_started.html
44
+ * Ruby on Rails Tutorial Book: http://www.railstutorial.org/
45
+
46
+
47
+ == Debugging Rails
48
+
49
+ Sometimes your application goes wrong. Fortunately there are a lot of tools that
50
+ will help you debug it and get it back on the rails.
51
+
52
+ First area to check is the application log files. Have "tail -f" commands
53
+ running on the server.log and development.log. Rails will automatically display
54
+ debugging and runtime information to these files. Debugging info will also be
55
+ shown in the browser on requests from 127.0.0.1.
56
+
57
+ You can also log your own messages directly into the log file from your code
58
+ using the Ruby logger class from inside your controllers. Example:
59
+
60
+ class WeblogController < ActionController::Base
61
+ def destroy
62
+ @weblog = Weblog.find(params[:id])
63
+ @weblog.destroy
64
+ logger.info("#{Time.now} Destroyed Weblog ID ##{@weblog.id}!")
65
+ end
66
+ end
67
+
68
+ The result will be a message in your log file along the lines of:
69
+
70
+ Mon Oct 08 14:22:29 +1000 2007 Destroyed Weblog ID #1!
71
+
72
+ More information on how to use the logger is at http://www.ruby-doc.org/core/
73
+
74
+ Also, Ruby documentation can be found at http://www.ruby-lang.org/. There are
75
+ several books available online as well:
76
+
77
+ * Programming Ruby: http://www.ruby-doc.org/docs/ProgrammingRuby/ (Pickaxe)
78
+ * Learn to Program: http://pine.fm/LearnToProgram/ (a beginners guide)
79
+
80
+ These two books will bring you up to speed on the Ruby language and also on
81
+ programming in general.
82
+
83
+
84
+ == Debugger
85
+
86
+ Debugger support is available through the debugger command when you start your
87
+ Mongrel or WEBrick server with --debugger. This means that you can break out of
88
+ execution at any point in the code, investigate and change the model, and then,
89
+ resume execution! You need to install ruby-debug to run the server in debugging
90
+ mode. With gems, use <tt>sudo gem install ruby-debug</tt>. Example:
91
+
92
+ class WeblogController < ActionController::Base
93
+ def index
94
+ @posts = Post.all
95
+ debugger
96
+ end
97
+ end
98
+
99
+ So the controller will accept the action, run the first line, then present you
100
+ with a IRB prompt in the server window. Here you can do things like:
101
+
102
+ >> @posts.inspect
103
+ => "[#<Post:0x14a6be8
104
+ @attributes={"title"=>nil, "body"=>nil, "id"=>"1"}>,
105
+ #<Post:0x14a6620
106
+ @attributes={"title"=>"Rails", "body"=>"Only ten..", "id"=>"2"}>]"
107
+ >> @posts.first.title = "hello from a debugger"
108
+ => "hello from a debugger"
109
+
110
+ ...and even better, you can examine how your runtime objects actually work:
111
+
112
+ >> f = @posts.first
113
+ => #<Post:0x13630c4 @attributes={"title"=>nil, "body"=>nil, "id"=>"1"}>
114
+ >> f.
115
+ Display all 152 possibilities? (y or n)
116
+
117
+ Finally, when you're ready to resume execution, you can enter "cont".
118
+
119
+
120
+ == Console
121
+
122
+ The console is a Ruby shell, which allows you to interact with your
123
+ application's domain model. Here you'll have all parts of the application
124
+ configured, just like it is when the application is running. You can inspect
125
+ domain models, change values, and save to the database. Starting the script
126
+ without arguments will launch it in the development environment.
127
+
128
+ To start the console, run <tt>rails console</tt> from the application
129
+ directory.
130
+
131
+ Options:
132
+
133
+ * Passing the <tt>-s, --sandbox</tt> argument will rollback any modifications
134
+ made to the database.
135
+ * Passing an environment name as an argument will load the corresponding
136
+ environment. Example: <tt>rails console production</tt>.
137
+
138
+ To reload your controllers and models after launching the console run
139
+ <tt>reload!</tt>
140
+
141
+ More information about irb can be found at:
142
+ link:http://www.rubycentral.org/pickaxe/irb.html
143
+
144
+
145
+ == dbconsole
146
+
147
+ You can go to the command line of your database directly through <tt>rails
148
+ dbconsole</tt>. You would be connected to the database with the credentials
149
+ defined in database.yml. Starting the script without arguments will connect you
150
+ to the development database. Passing an argument will connect you to a different
151
+ database, like <tt>rails dbconsole production</tt>. Currently works for MySQL,
152
+ PostgreSQL and SQLite 3.
153
+
154
+ == Description of Contents
155
+
156
+ The default directory structure of a generated Ruby on Rails application:
157
+
158
+ |-- app
159
+ | |-- assets
160
+ | |-- images
161
+ | |-- javascripts
162
+ | `-- stylesheets
163
+ | |-- controllers
164
+ | |-- helpers
165
+ | |-- mailers
166
+ | |-- models
167
+ | `-- views
168
+ | `-- layouts
169
+ |-- config
170
+ | |-- environments
171
+ | |-- initializers
172
+ | `-- locales
173
+ |-- db
174
+ |-- doc
175
+ |-- lib
176
+ | `-- tasks
177
+ |-- log
178
+ |-- public
179
+ |-- script
180
+ |-- test
181
+ | |-- fixtures
182
+ | |-- functional
183
+ | |-- integration
184
+ | |-- performance
185
+ | `-- unit
186
+ |-- tmp
187
+ | |-- cache
188
+ | |-- pids
189
+ | |-- sessions
190
+ | `-- sockets
191
+ `-- vendor
192
+ |-- assets
193
+ `-- stylesheets
194
+ `-- plugins
195
+
196
+ app
197
+ Holds all the code that's specific to this particular application.
198
+
199
+ app/assets
200
+ Contains subdirectories for images, stylesheets, and JavaScript files.
201
+
202
+ app/controllers
203
+ Holds controllers that should be named like weblogs_controller.rb for
204
+ automated URL mapping. All controllers should descend from
205
+ ApplicationController which itself descends from ActionController::Base.
206
+
207
+ app/models
208
+ Holds models that should be named like post.rb. Models descend from
209
+ ActiveRecord::Base by default.
210
+
211
+ app/views
212
+ Holds the template files for the view that should be named like
213
+ weblogs/index.html.erb for the WeblogsController#index action. All views use
214
+ eRuby syntax by default.
215
+
216
+ app/views/layouts
217
+ Holds the template files for layouts to be used with views. This models the
218
+ common header/footer method of wrapping views. In your views, define a layout
219
+ using the <tt>layout :default</tt> and create a file named default.html.erb.
220
+ Inside default.html.erb, call <% yield %> to render the view using this
221
+ layout.
222
+
223
+ app/helpers
224
+ Holds view helpers that should be named like weblogs_helper.rb. These are
225
+ generated for you automatically when using generators for controllers.
226
+ Helpers can be used to wrap functionality for your views into methods.
227
+
228
+ config
229
+ Configuration files for the Rails environment, the routing map, the database,
230
+ and other dependencies.
231
+
232
+ db
233
+ Contains the database schema in schema.rb. db/migrate contains all the
234
+ sequence of Migrations for your schema.
235
+
236
+ doc
237
+ This directory is where your application documentation will be stored when
238
+ generated using <tt>rake doc:app</tt>
239
+
240
+ lib
241
+ Application specific libraries. Basically, any kind of custom code that
242
+ doesn't belong under controllers, models, or helpers. This directory is in
243
+ the load path.
244
+
245
+ public
246
+ The directory available for the web server. Also contains the dispatchers and the
247
+ default HTML files. This should be set as the DOCUMENT_ROOT of your web
248
+ server.
249
+
250
+ script
251
+ Helper scripts for automation and generation.
252
+
253
+ test
254
+ Unit and functional tests along with fixtures. When using the rails generate
255
+ command, template test files will be generated for you and placed in this
256
+ directory.
257
+
258
+ vendor
259
+ External libraries that the application depends on. Also includes the plugins
260
+ subdirectory. If the app has frozen rails, those gems also go here, under
261
+ vendor/rails/. This directory is in the load path.