codesake-dawn 0.50

data/spec/support/sinatra-safe/MIT-LICENSE

@@ -0,0 +1,20 @@
+Copyright (c) 2009 Nick Plante
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/spec/support/sinatra-safe/README.rdoc

@@ -0,0 +1,35 @@
+= Sinatra Application Template
+
+A base Sinatra application template. Just fork and build. Yay!
+Includes Bundler, DataMapper, RSpec2, and Haml, all ready to go.
+
+Works with both Ruby 1.8.7 and Ruby 1.9.2.
+
+== Configuration
+
+Dependencies and all configuration is done in <tt>environment.rb</tt>. Your database is also set up here. DataMapper will use sqlite3 by default. Tests use the sqlite3-memory adapter (no configuration needed).
+
+Add your controller actions in <tt>application.rb</tt>. Views for these actions are placed in the <tt>views</tt> directory. Static files, including a stock stylesheet, go in the <tt>public</tt> directory. Models go in the <tt>lib</tt> directory and are auto-loaded. 
+
+== Testing
+
+Add your specs in <tt>spec</tt>; just require <tt>spec_helper.rb</tt> to pre-configure the test environment. A number of samples are provided (including a sample model, which can be removed). To run the specs:
+
+  rake spec
+
+== Getting Started
+
+  bundle install
+  rake db:migrate
+  ruby application.rb
+
+== Thanks
+
+This project includes contributions from the following developers:
+
+  * garrensmith
+  * bryanwoods
+  * flexd
+  * mcollina
+
+(c) 2011 Nick Plante. This code is distributed under the MIT license.

data/spec/support/sinatra-safe/Rakefile

@@ -0,0 +1,32 @@
+require 'rubygems'
+require 'bundler/setup'
+require 'rspec/core/rake_task'
+
+task :default => :test
+task :test => :spec
+
+if !defined?(RSpec)
+  puts "spec targets require RSpec"
+else
+  desc "Run all examples"
+  RSpec::Core::RakeTask.new(:spec) do |t|
+    #t.pattern = 'spec/**/*_spec.rb' # not needed this is default
+    t.rspec_opts = ['-cfs']
+  end
+end
+
+namespace :db do
+  desc 'Auto-migrate the database (destroys data)'
+  task :migrate => :environment do
+    DataMapper.auto_migrate!
+  end
+
+  desc 'Auto-upgrade the database (preserves data)'
+  task :upgrade => :environment do
+    DataMapper.auto_upgrade!
+  end
+end
+
+task :environment do
+  require File.join(File.dirname(__FILE__), 'environment')
+end

data/spec/support/sinatra-safe/application.rb

@@ -0,0 +1,23 @@
+require 'rubygems'
+require 'bundler/setup'
+require 'sinatra'
+require File.join(File.dirname(__FILE__), 'environment')
+
+configure do
+  set :views, "#{File.dirname(__FILE__)}/views"
+end
+
+error do
+  e = request.env['sinatra.error']
+  Kernel.puts e.backtrace.join("\n")
+  'Application error'
+end
+
+helpers do
+  # add your helpers here
+end
+
+# root page
+get '/' do
+  haml :root
+end

data/spec/support/sinatra-safe/config.ru

@@ -0,0 +1,11 @@
+require File.join(File.dirname(__FILE__), 'application')
+
+set :run, false
+set :environment, :production
+
+FileUtils.mkdir_p 'log' unless File.exists?('log')
+log = File.new("log/sinatra.log", "a+")
+$stdout.reopen(log)
+$stderr.reopen(log)
+
+run Sinatra::Application

data/spec/support/sinatra-safe/environment.rb

@@ -0,0 +1,25 @@
+require 'rubygems'
+require 'bundler/setup'
+require 'dm-core'
+require 'dm-timestamps'
+require 'dm-validations'
+require 'dm-aggregates'
+require 'dm-migrations'
+require 'haml'
+require 'ostruct'
+
+require 'sinatra' unless defined?(Sinatra)
+
+configure do
+  SiteConfig = OpenStruct.new(
+                 :title => 'Your Application Name',
+                 :author => 'Your Name',
+                 :url_base => 'http://localhost:4567/'
+               )
+
+  # load models
+  $LOAD_PATH.unshift("#{File.dirname(__FILE__)}/lib")
+  Dir.glob("#{File.dirname(__FILE__)}/lib/*.rb") { |lib| require File.basename(lib, '.*') }
+
+  DataMapper.setup(:default, (ENV["DATABASE_URL"] || "sqlite3:///#{File.expand_path(File.dirname(__FILE__))}/#{Sinatra::Base.environment}.db"))
+end

data/spec/support/sinatra-safe/lib/profile.rb

@@ -0,0 +1,11 @@
+# example model file
+class Profile
+  include DataMapper::Resource
+
+  property :id,         Serial
+  property :name,       String  
+  property :created_at, DateTime
+  property :updated_at, DateTime
+
+  validates_presence_of :name
+end

data/spec/support/sinatra-safe/public/main.css

@@ -0,0 +1,52 @@
+body {
+  background: #FFF;
+  color: #1B1B1B;
+  font-family: Verdana, Arial, Helvetica, sans-serif;
+}
+#container {
+  margin: 0 auto;
+  width: 800px;
+}
+#header {
+  padding: 0.5em 0 0 0;
+  margin: 0;
+  text-align: center;
+  border-bottom: 3px solid #000;
+}
+#content {
+  padding: 0;
+  margin: 0;
+}
+#footer {
+  padding: 0;
+  margin: 0;
+  font-size: 0.7em;
+  text-align: center;
+  border-top: 3px solid #000;
+}
+h1, h2, h3, h4, h5, h6 {
+  margin-top: 0em;
+  margin-bottom: .25em;
+  font-weight: bold;
+}
+h1 { font-size: 2.2em; }
+h2 { font-size: 1.6em; }
+h3 { font-size: 1.4em; }
+h4 { font-size: 1.3em; }
+h5 { font-size: 1.2em; }
+h6 { font-size: 1.1em; }
+p {
+  margin-bottom: 1em;
+  line-height: 1.3;
+}
+a {
+  color: #095EAE;
+  font-weight: bold;
+  text-decoration: none;
+}
+a:hover {
+  text-decoration: underline;
+}
+#logo a:hover {
+  text-decoration: none;
+}

data/spec/support/sinatra-safe/script/console

@@ -0,0 +1,16 @@
+#! /usr/bin/env ruby
+# This console script adapted from:rake
+#   http://barkingiguana.com/blog/2009/01/25/scriptconsole-for-your-application/
+
+libs = []
+libs << "irb/completion"
+libs << File.dirname(__FILE__) + '/../environment.rb'
+
+command_line = []
+command_line << "irb"
+command_line << libs.inject("") { |acc, lib| acc + %( -r "#{lib}") }
+command_line << "--simple-prompt"
+command = command_line.join(" ")
+
+puts "Welcome to the sinatra console interface."
+exec command

data/spec/support/sinatra-safe/views/layout.haml

@@ -0,0 +1,14 @@
+!!!
+%html
+  %head
+    %title= @title || SiteConfig.title
+    %link{:href => '/main.css', :rel => 'stylesheet', :type => 'text/css'}
+  %body
+    #container
+      #header
+        #logo
+          %h1
+            %a{:href => '/'}= SiteConfig.title
+      #content= yield
+      #footer
+        %p#legal= "— © #{Time.now.strftime('%Y')} #{SiteConfig.author} —"

data/spec/support/sinatra-safe/views/root.haml

@@ -0,0 +1,4 @@
+%h2 Main Page
+%p Here is some text.
+%p Here is a <a href='/'>link</a>.
+%p ttys!

data/spec/support/sinatra-vulnerable/.gems

@@ -0,0 +1,4 @@
+data_mapper -v 1.0.0
+dm-postgres-adapter
+sinatra -v 1.0
+

data/spec/support/sinatra-vulnerable/.gitignore

@@ -0,0 +1,6 @@
+*.db
+*.sqlite3
+.bundle/*
+log/*
+*.swp
+*.swo

data/spec/support/sinatra-vulnerable/Gemfile

@@ -0,0 +1,17 @@
+source :rubygems
+gem 'sinatra', '>= 1.0'
+gem 'crack'
+gem 'rake'
+gem 'data_mapper'
+gem 'dm-core'
+gem 'dm-sqlite-adapter'
+gem 'dm-timestamps'
+gem 'dm-validations'
+gem 'dm-aggregates'
+gem 'dm-migrations'
+gem 'haml'
+
+group :test do
+  gem 'rspec', :require => 'spec'
+  gem 'rack-test'
+end

data/spec/support/sinatra-vulnerable/MIT-LICENSE

@@ -0,0 +1,20 @@
+Copyright (c) 2009 Nick Plante
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/spec/support/sinatra-vulnerable/README.rdoc

@@ -0,0 +1,35 @@
+= Sinatra Application Template
+
+A base Sinatra application template. Just fork and build. Yay!
+Includes Bundler, DataMapper, RSpec2, and Haml, all ready to go.
+
+Works with both Ruby 1.8.7 and Ruby 1.9.2.
+
+== Configuration
+
+Dependencies and all configuration is done in <tt>environment.rb</tt>. Your database is also set up here. DataMapper will use sqlite3 by default. Tests use the sqlite3-memory adapter (no configuration needed).
+
+Add your controller actions in <tt>application.rb</tt>. Views for these actions are placed in the <tt>views</tt> directory. Static files, including a stock stylesheet, go in the <tt>public</tt> directory. Models go in the <tt>lib</tt> directory and are auto-loaded. 
+
+== Testing
+
+Add your specs in <tt>spec</tt>; just require <tt>spec_helper.rb</tt> to pre-configure the test environment. A number of samples are provided (including a sample model, which can be removed). To run the specs:
+
+  rake spec
+
+== Getting Started
+
+  bundle install
+  rake db:migrate
+  ruby application.rb
+
+== Thanks
+
+This project includes contributions from the following developers:
+
+  * garrensmith
+  * bryanwoods
+  * flexd
+  * mcollina
+
+(c) 2011 Nick Plante. This code is distributed under the MIT license.

data/spec/support/sinatra-vulnerable/Rakefile

@@ -0,0 +1,32 @@
+require 'rubygems'
+require 'bundler/setup'
+require 'rspec/core/rake_task'
+
+task :default => :test
+task :test => :spec
+
+if !defined?(RSpec)
+  puts "spec targets require RSpec"
+else
+  desc "Run all examples"
+  RSpec::Core::RakeTask.new(:spec) do |t|
+    #t.pattern = 'spec/**/*_spec.rb' # not needed this is default
+    t.rspec_opts = ['-cfs']
+  end
+end
+
+namespace :db do
+  desc 'Auto-migrate the database (destroys data)'
+  task :migrate => :environment do
+    DataMapper.auto_migrate!
+  end
+
+  desc 'Auto-upgrade the database (preserves data)'
+  task :upgrade => :environment do
+    DataMapper.auto_upgrade!
+  end
+end
+
+task :environment do
+  require File.join(File.dirname(__FILE__), 'environment')
+end

data/spec/support/sinatra-vulnerable/application.rb

@@ -0,0 +1,28 @@
+require 'rubygems'
+require 'bundler/setup'
+require 'sinatra'
+require File.join(File.dirname(__FILE__), 'environment')
+
+configure do
+  set :views, "#{File.dirname(__FILE__)}/views"
+end
+
+error do
+  e = request.env['sinatra.error']
+  Kernel.puts e.backtrace.join("\n")
+  'Application error'
+end
+
+helpers do
+  # add your helpers here
+end
+
+# root page
+get '/' do
+  haml :root
+end
+
+# FIXME: I must raise an error here
+get '/foo' do
+  haml :bar
+end

data/spec/support/sinatra-vulnerable/config.ru

@@ -0,0 +1,11 @@
+require File.join(File.dirname(__FILE__), 'application')
+
+set :run, false
+set :environment, :production
+
+FileUtils.mkdir_p 'log' unless File.exists?('log')
+log = File.new("log/sinatra.log", "a+")
+$stdout.reopen(log)
+$stderr.reopen(log)
+
+run Sinatra::Application

data/spec/support/sinatra-vulnerable/environment.rb

@@ -0,0 +1,25 @@
+require 'rubygems'
+require 'bundler/setup'
+require 'dm-core'
+require 'dm-timestamps'
+require 'dm-validations'
+require 'dm-aggregates'
+require 'dm-migrations'
+require 'haml'
+require 'ostruct'
+
+require 'sinatra' unless defined?(Sinatra)
+
+configure do
+  SiteConfig = OpenStruct.new(
+                 :title => 'Your Application Name',
+                 :author => 'Your Name',
+                 :url_base => 'http://localhost:4567/'
+               )
+
+  # load models
+  $LOAD_PATH.unshift("#{File.dirname(__FILE__)}/lib")
+  Dir.glob("#{File.dirname(__FILE__)}/lib/*.rb") { |lib| require File.basename(lib, '.*') }
+
+  DataMapper.setup(:default, (ENV["DATABASE_URL"] || "sqlite3:///#{File.expand_path(File.dirname(__FILE__))}/#{Sinatra::Base.environment}.db"))
+end