csp_report 0.3.0 → 0.4.0

data/spec/factories/csp_report_csp_reports.rb

@@ -8,12 +8,20 @@ FactoryGirl.define do
     incoming_ip "127.0.0.1"
   end
 
-  factory :local_home_index_inline, :class => 'CspReport::CspReport' do
+  factory :local_home_index_inline, parent: :local_inline do
     document_uri "http://localhost:3000/home/index"
-    referrer ""
-    blocked_uri ""
-    violated_directive "script-src 'self'"
-    original_policy "script-src 'self'; report-uri /csp/csp_reports"
-    incoming_ip "127.0.0.1"
+  end
+
+  factory :local_ipv6_home_index_inline, parent: :local_home_index_inline do
+    incoming_ip "::1"
+  end
+
+  factory :local_home_about_inline, parent: :local_inline do
+    document_uri "http://localhost:3000/home/about"
+  end
+
+  factory :local_script_star, parent: :local_inline do
+    violated_directive "script-src *"
+    original_policy "script-src *; report-uri /csp/csp_reports"
   end
 end

data/spec/features/csp_report/csp_reports_index_spec.rb

@@ -78,4 +78,21 @@ describe 'CspReport index view' do
         {href: csp_reports_destroy_all_path}
     end
   end
+
+  describe 'Links to data presentation' do
+    it 'should have a link to the report by IP' do
+      visit csp_reports_path
+      page.should have_link 'By IP'
+    end
+
+    it 'should have a link to the report by Rule' do
+      visit csp_reports_path
+      page.should have_link 'By Violated Directive'
+    end
+
+    it 'should have a link to the report by Source' do
+      visit csp_reports_path
+      page.should have_link 'By Source Document URI'
+    end
+  end
 end

data/spec/features/csp_report/csp_reports_report_by_ip_spec.rb

@@ -2,12 +2,22 @@ require 'spec_helper'
 
 describe 'CspReport report by IP view' do
   before(:each) do
-    @localhost4 = FactoryGirl.create(:local_inline)
+    @localhost4   = FactoryGirl.create(:local_inline)
     @localhost4_2 = FactoryGirl.create(:local_home_index_inline)
-    @localhost6 = FactoryGirl.create(:local_ipv6_home_index_inline)
+    @localhost6   = FactoryGirl.create(:local_ipv6_home_index_inline)
+    @localhost6_2 = FactoryGirl.create(:local_ipv6_home_index_inline)
+  end
+
+  it 'should display a table of breaches per IP' do
+    visit csp_reports_report_by_ip_path
+    page.should have_content('Incoming IP')
+    page.should have_content('Number of breaches reported')
   end
 
   it 'should display each IP only once' do
     visit csp_reports_report_by_ip_path
+    find('//table[@id="byip"]').text.scan(@localhost4.incoming_ip).size.should eq 1
+    find('//table[@id="byip"]').text.scan(@localhost6.incoming_ip).size.should eq 1
   end
+
 end

data/spec/features/csp_report/csp_reports_report_by_rule_spec.rb

@@ -0,0 +1,21 @@
+require 'spec_helper'
+
+describe 'CspReport report by rule view' do
+  before(:each) do
+    @script_self   = FactoryGirl.create(:local_inline)
+    @script_star = FactoryGirl.create(:local_script_star)
+  end
+
+  it 'should display a table of breaches per rule' do
+    visit csp_reports_report_by_rule_path
+    page.should have_content('Violated Directive')
+    page.should have_content('Number of breaches reported')
+  end
+
+  it 'should display each rule only once' do
+    visit csp_reports_report_by_rule_path
+    find('//table[@id="byrule"]').text.scan(@script_self.violated_directive).size.should eq 1
+    find('//table[@id="byrule"]').text.scan(@script_star.violated_directive).size.should eq 1
+  end
+
+end

data/spec/features/csp_report/csp_reports_report_by_source_spec.rb

@@ -0,0 +1,24 @@
+require 'spec_helper'
+
+describe 'CspReport report by source view' do
+  before(:each) do
+    @script_about   = FactoryGirl.create(:local_home_about_inline)
+    @script_home    = FactoryGirl.create(:local_home_index_inline)
+    @script_about_2 = FactoryGirl.create(:local_home_about_inline)
+    @script_home_2  = FactoryGirl.create(:local_home_index_inline)
+  end
+
+  it 'should display a table of breaches per sources' do
+    visit csp_reports_report_by_source_path
+    page.should have_content('Source Document URI')
+    page.should have_content('Number of breaches reported')
+  end
+
+  it 'should display each source only once' do
+    visit csp_reports_report_by_source_path
+    find('//table[@id="bysource"]').text.scan(@script_home.document_uri).size.should eq 1
+    find('//table[@id="bysource"]').text.scan(@script_about.document_uri).size.should eq 1
+  end
+
+end
+

data/spec/routing/csp_reports_routes_spec.rb

@@ -16,4 +16,13 @@ describe 'csp_report routing' do
   it 'should respond to delete_all requests' do
     get('/csp_reports/destroy_all').should route_to 'csp_report/csp_reports#destroy_all'
   end
+  it 'should respond to report_by_ip requests' do
+    get('/csp_reports/report_by_ip').should route_to 'csp_report/csp_reports#report_by_ip'
+  end
+  it 'should respond to report_by_rule requests' do
+    get('/csp_reports/report_by_rule').should route_to 'csp_report/csp_reports#report_by_rule'
+  end
+  it 'should respond to report_by_source requests' do
+    get('/csp_reports/report_by_source').should route_to 'csp_report/csp_reports#report_by_source'
+  end
 end

data/spec/spec_helper.rb

@@ -27,8 +27,6 @@ Spork.prefork do
   # If you are not using ActiveRecord, you can remove this line.
   ActiveRecord::Migration.check_pending! if defined?(ActiveRecord::Migration)
 
-  FactoryGirl.find_definitions
-
   RSpec.configure do |config|
     # For engine testing. Makes the Engine routes helpers available to the test files
     config.include CspReport::Engine.routes.url_helpers
@@ -64,5 +62,5 @@ end
 
 Spork.each_run do
   # This code will be run each time you run your specs.
-
+  FactoryGirl.find_definitions
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: csp_report
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 0.4.0
 platform: ruby
 authors:
 - Gregory Bataille
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2013-08-16 00:00:00.000000000 Z
+date: 2013-09-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -52,6 +52,62 @@ dependencies:
     - - ~>
       - !ruby/object:Gem::Version
         version: 0.5.8
+- !ruby/object:Gem::Dependency
+  name: jquery-rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 3.0.4
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 3.0.4
+- !ruby/object:Gem::Dependency
+  name: lazy_high_charts
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 1.4.3
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 1.4.3
+- !ruby/object:Gem::Dependency
+  name: coffee-rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 4.0.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 4.0.0
+- !ruby/object:Gem::Dependency
+  name: twitter-bootstrap-rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 2.2.8
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 2.2.8
 - !ruby/object:Gem::Dependency
   name: sqlite3
   requirement: !ruby/object:Gem::Requirement
@@ -214,13 +270,20 @@ extensions: []
 extra_rdoc_files: []
 files:
 - app/assets/javascripts/csp_report/application.js
+- app/assets/javascripts/csp_report/report.js.coffee
+- app/assets/javascripts/csp_report.js
 - app/assets/stylesheets/csp_report/application.css
+- app/assets/stylesheets/csp_report/bootstrap_and_overrides.css
 - app/assets/stylesheets/csp_report/csp_report.css.sass
 - app/controllers/csp_report/application_controller.rb
 - app/controllers/csp_report/csp_reports_controller.rb
 - app/helpers/csp_report/application_helper.rb
+- app/helpers/csp_report/headers_helpers.rb
 - app/models/csp_report/csp_report.rb
 - app/views/csp_report/csp_reports/index.html.haml
+- app/views/csp_report/csp_reports/report_by_ip.html.haml
+- app/views/csp_report/csp_reports/report_by_rule.html.haml
+- app/views/csp_report/csp_reports/report_by_source.html.haml
 - app/views/layouts/csp_report/application.html.erb
 - config/routes.rb
 - db/migrate/20130630091108_create_csp_report_csp_reports.rb
@@ -229,6 +292,7 @@ files:
 - lib/csp_report/version.rb
 - lib/csp_report.rb
 - lib/generators/csp_report/csp_declaration_generator.rb
+- lib/generators/csp_report/highcharts_include_generator.rb
 - lib/generators/csp_report/initializer_install_generator.rb
 - lib/generators/csp_report/install_generator.rb
 - lib/generators/csp_report/migration_generator.rb
@@ -297,22 +361,46 @@ files:
 - spec/dummy/tmp/cache/assets/development/sprockets/f7cbd26ba1d28d48de824f0e94586655
 - spec/dummy/tmp/cache/assets/test/sass/3993bbee5479f52ce0cb34d1bfbe0a6755e8c605/home.css.scssc
 - spec/dummy/tmp/cache/assets/test/sass/745019acb880ec9412f97713489f02ba42209a06/csp_report.css.sassc
+- spec/dummy/tmp/cache/assets/test/sprockets/04b3e69eb694573268093bc96a12cb36
+- spec/dummy/tmp/cache/assets/test/sprockets/05c90a274261cfca1eb2c000659570f5
 - spec/dummy/tmp/cache/assets/test/sprockets/13fe41fee1fe35b49d145bcc06610705
 - spec/dummy/tmp/cache/assets/test/sprockets/1638f87db345b13872695759502b54fe
 - spec/dummy/tmp/cache/assets/test/sprockets/1c9faaf28d05409b88ad3113374d613c
+- spec/dummy/tmp/cache/assets/test/sprockets/22f7ca496c173fb6290675535b2ea867
+- spec/dummy/tmp/cache/assets/test/sprockets/27b25bddc744ae04b7e3f44fc2ff7b0a
+- spec/dummy/tmp/cache/assets/test/sprockets/2a6dae572905cab4d1414332fe21dd75
 - spec/dummy/tmp/cache/assets/test/sprockets/2f5173deea6c795b8fdde723bb4b63af
+- spec/dummy/tmp/cache/assets/test/sprockets/325cfe516884cee28f48dc297246b1fc
 - spec/dummy/tmp/cache/assets/test/sprockets/357970feca3ac29060c1e3861e2c0953
+- spec/dummy/tmp/cache/assets/test/sprockets/391546e93f4c1edddf588160a1cedc5a
 - spec/dummy/tmp/cache/assets/test/sprockets/4949b199f7a3f61704ee406dfc99e38c
+- spec/dummy/tmp/cache/assets/test/sprockets/4f12538a5db5fd7fe75ebdcb6dc9b251
+- spec/dummy/tmp/cache/assets/test/sprockets/50d961649ccb35a76acd4f63f6250361
+- spec/dummy/tmp/cache/assets/test/sprockets/51522c13c1c4f9cf7dcfad7b204cf749
+- spec/dummy/tmp/cache/assets/test/sprockets/56f7ae58d3064c45987cc434559f4dcb
+- spec/dummy/tmp/cache/assets/test/sprockets/5d4b85a2814f8d22d23ad047618fe032
+- spec/dummy/tmp/cache/assets/test/sprockets/5d91dbec07ef096002d3f884edec8b55
+- spec/dummy/tmp/cache/assets/test/sprockets/641ce249906eb1e5e40fe7309193e5a6
+- spec/dummy/tmp/cache/assets/test/sprockets/71f1e2bbe4e3226070159a95e1690af9
+- spec/dummy/tmp/cache/assets/test/sprockets/7f9fe739367238fbe3fe92a0362d8f33
 - spec/dummy/tmp/cache/assets/test/sprockets/9b94cd42c6d3c0778772d609a4d7006d
+- spec/dummy/tmp/cache/assets/test/sprockets/b2fb1d4fcfbdd0431ec50d36c324e769
 - spec/dummy/tmp/cache/assets/test/sprockets/b878faf942403e313a5b103e5d80488e
+- spec/dummy/tmp/cache/assets/test/sprockets/bf4db1839fb7adc3305b797e33f5902c
 - spec/dummy/tmp/cache/assets/test/sprockets/cffd775d018f68ce5dba1ee0d951a994
+- spec/dummy/tmp/cache/assets/test/sprockets/d1841c51cd5922191135ddd5c6ed2b70
 - spec/dummy/tmp/cache/assets/test/sprockets/d771ace226fc8215a3572e0aa35bb0d6
 - spec/dummy/tmp/cache/assets/test/sprockets/dc4c1ce2dc434402713320ef23981262
+- spec/dummy/tmp/cache/assets/test/sprockets/dd40235a4b424b2f80c80fe5cb993736
+- spec/dummy/tmp/cache/assets/test/sprockets/de041484110f42c73b00c21167cfc7c2
 - spec/dummy/tmp/cache/assets/test/sprockets/f1663d34d4b6003379113df98f1433a5
 - spec/dummy/tmp/cache/assets/test/sprockets/f7cbd26ba1d28d48de824f0e94586655
+- spec/dummy/tmp/cache/assets/test/sprockets/faef24ee109a081ff0b9346c27872274
 - spec/factories/csp_report_csp_reports.rb
 - spec/features/csp_report/csp_reports_index_spec.rb
 - spec/features/csp_report/csp_reports_report_by_ip_spec.rb
+- spec/features/csp_report/csp_reports_report_by_rule_spec.rb
+- spec/features/csp_report/csp_reports_report_by_source_spec.rb
 - spec/generators/csp_report/initializer_install_generator_spec.rb
 - spec/generators/csp_report/mount_generator_spec.rb
 - spec/models/csp_report/csp_report_spec.rb
@@ -403,22 +491,46 @@ test_files:
 - spec/dummy/tmp/cache/assets/development/sprockets/f7cbd26ba1d28d48de824f0e94586655
 - spec/dummy/tmp/cache/assets/test/sass/3993bbee5479f52ce0cb34d1bfbe0a6755e8c605/home.css.scssc
 - spec/dummy/tmp/cache/assets/test/sass/745019acb880ec9412f97713489f02ba42209a06/csp_report.css.sassc
+- spec/dummy/tmp/cache/assets/test/sprockets/04b3e69eb694573268093bc96a12cb36
+- spec/dummy/tmp/cache/assets/test/sprockets/05c90a274261cfca1eb2c000659570f5
 - spec/dummy/tmp/cache/assets/test/sprockets/13fe41fee1fe35b49d145bcc06610705
 - spec/dummy/tmp/cache/assets/test/sprockets/1638f87db345b13872695759502b54fe
 - spec/dummy/tmp/cache/assets/test/sprockets/1c9faaf28d05409b88ad3113374d613c
+- spec/dummy/tmp/cache/assets/test/sprockets/22f7ca496c173fb6290675535b2ea867
+- spec/dummy/tmp/cache/assets/test/sprockets/27b25bddc744ae04b7e3f44fc2ff7b0a
+- spec/dummy/tmp/cache/assets/test/sprockets/2a6dae572905cab4d1414332fe21dd75
 - spec/dummy/tmp/cache/assets/test/sprockets/2f5173deea6c795b8fdde723bb4b63af
+- spec/dummy/tmp/cache/assets/test/sprockets/325cfe516884cee28f48dc297246b1fc
 - spec/dummy/tmp/cache/assets/test/sprockets/357970feca3ac29060c1e3861e2c0953
+- spec/dummy/tmp/cache/assets/test/sprockets/391546e93f4c1edddf588160a1cedc5a
 - spec/dummy/tmp/cache/assets/test/sprockets/4949b199f7a3f61704ee406dfc99e38c
+- spec/dummy/tmp/cache/assets/test/sprockets/4f12538a5db5fd7fe75ebdcb6dc9b251
+- spec/dummy/tmp/cache/assets/test/sprockets/50d961649ccb35a76acd4f63f6250361
+- spec/dummy/tmp/cache/assets/test/sprockets/51522c13c1c4f9cf7dcfad7b204cf749
+- spec/dummy/tmp/cache/assets/test/sprockets/56f7ae58d3064c45987cc434559f4dcb
+- spec/dummy/tmp/cache/assets/test/sprockets/5d4b85a2814f8d22d23ad047618fe032
+- spec/dummy/tmp/cache/assets/test/sprockets/5d91dbec07ef096002d3f884edec8b55
+- spec/dummy/tmp/cache/assets/test/sprockets/641ce249906eb1e5e40fe7309193e5a6
+- spec/dummy/tmp/cache/assets/test/sprockets/71f1e2bbe4e3226070159a95e1690af9
+- spec/dummy/tmp/cache/assets/test/sprockets/7f9fe739367238fbe3fe92a0362d8f33
 - spec/dummy/tmp/cache/assets/test/sprockets/9b94cd42c6d3c0778772d609a4d7006d
+- spec/dummy/tmp/cache/assets/test/sprockets/b2fb1d4fcfbdd0431ec50d36c324e769
 - spec/dummy/tmp/cache/assets/test/sprockets/b878faf942403e313a5b103e5d80488e
+- spec/dummy/tmp/cache/assets/test/sprockets/bf4db1839fb7adc3305b797e33f5902c
 - spec/dummy/tmp/cache/assets/test/sprockets/cffd775d018f68ce5dba1ee0d951a994
+- spec/dummy/tmp/cache/assets/test/sprockets/d1841c51cd5922191135ddd5c6ed2b70
 - spec/dummy/tmp/cache/assets/test/sprockets/d771ace226fc8215a3572e0aa35bb0d6
 - spec/dummy/tmp/cache/assets/test/sprockets/dc4c1ce2dc434402713320ef23981262
+- spec/dummy/tmp/cache/assets/test/sprockets/dd40235a4b424b2f80c80fe5cb993736
+- spec/dummy/tmp/cache/assets/test/sprockets/de041484110f42c73b00c21167cfc7c2
 - spec/dummy/tmp/cache/assets/test/sprockets/f1663d34d4b6003379113df98f1433a5
 - spec/dummy/tmp/cache/assets/test/sprockets/f7cbd26ba1d28d48de824f0e94586655
+- spec/dummy/tmp/cache/assets/test/sprockets/faef24ee109a081ff0b9346c27872274
 - spec/factories/csp_report_csp_reports.rb
 - spec/features/csp_report/csp_reports_index_spec.rb
 - spec/features/csp_report/csp_reports_report_by_ip_spec.rb
+- spec/features/csp_report/csp_reports_report_by_rule_spec.rb
+- spec/features/csp_report/csp_reports_report_by_source_spec.rb
 - spec/generators/csp_report/initializer_install_generator_spec.rb
 - spec/generators/csp_report/mount_generator_spec.rb
 - spec/models/csp_report/csp_report_spec.rb