dawnscanner 1.6.1 → 1.6.2

data/spec/lib/kb/cve_2013_2513_spec.rb

@@ -6,10 +6,10 @@ describe "The CVE-2013-2513 vulnerability" do
 	end
   it "is reported when a flash_tool gem version 0.6.0 is detected" do
     @check.dependencies = [{:name=>"flash_tool", :version=>"0.6.0"}]
-    @check.vuln?.should   == true
+    expect(@check.vuln?).to   eq(true)
   end
   it "is not reported when a flash_tool gem version 0.6.1 is detected" do
     @check.dependencies = [{:name=>"flash_tool", :version=>"0.6.1"}]
-    @check.vuln?.should   == false
+    expect(@check.vuln?).to   eq(false)
   end
 end

data/spec/lib/kb/cve_2013_2516_spec.rb

@@ -6,10 +6,10 @@ describe "The CVE-2013-2516 vulnerability" do
 	end
   it "is reported when a fileutils gem version 0.7 is detected" do
     @check.dependencies = [{:name=>"fileutils", :version=>"0.7"}]
-    @check.vuln?.should   == true
+    expect(@check.vuln?).to   eq(true)
   end
   it "is not reported when a fileutils gem version 0.8 is detected" do
     @check.dependencies = [{:name=>"fileutils", :version=>"0.8"}]
-    @check.vuln?.should   == false
+    expect(@check.vuln?).to   eq(false)
   end
 end

data/spec/lib/kb/cve_2013_4203_spec.rb

@@ -6,10 +6,10 @@ describe "The CVE-2013-4203 vulnerability" do
 	end
   it "is reported when a vulnerable rgpg version is detected (0.2.2)" do
     @check.dependencies = [{:name=>"rgpg", :version=>"0.2.2"}]
-    @check.vuln?.should   == true
+    expect(@check.vuln?).to   eq(true)
   end
   it "is not reported when a safe rgpg version is detected (0.2.3)" do
     @check.dependencies = [{:name=>"rgpg", :version=>"0.2.3"}]
-    @check.vuln?.should   == false
+    expect(@check.vuln?).to   eq(false)
   end
 end

data/spec/lib/kb/cve_2013_4413_spec.rb

@@ -7,10 +7,10 @@ describe "The CVE-2013-4413 vulnerability" do
 
   it "is reported when the vulnerable gem is detected" do
     @check.dependencies = [{:name=>"wicked", :version=>"1.0.0"}]
-    @check.vuln?.should   == true
+    expect(@check.vuln?).to   eq(true)
   end
   it "is not reported when a fixed release is detected" do
     @check.dependencies = [{:name=>"wicked", :version=>"1.0.1"}]
-    @check.vuln?.should   == false
+    expect(@check.vuln?).to   eq(false)
   end
 end

data/spec/lib/kb/cve_2013_4489_spec.rb

@@ -8,56 +8,56 @@ describe "The CVE-2013-4489 vulnerability" do
   
   it "is reported when the vulnerable gem is detected" do
     @check.dependencies = [{:name=>"grit", :version=>"5.2"}]
-    @check.vuln?.should   == true
+    expect(@check.vuln?).to   eq(true)
   end
 
   it "is reported when the vulnerable gem is detected" do
     @check.dependencies = [{:name=>"grit", :version=>"5.3"}]
-    @check.vuln?.should   == true
+    expect(@check.vuln?).to   eq(true)
   end
 
   it "is reported when the vulnerable gem is detected" do
     @check.dependencies = [{:name=>"grit", :version=>"5.4"}]
-    @check.vuln?.should   == true
+    expect(@check.vuln?).to   eq(true)
   end
 
   it "is reported when the vulnerable gem is detected" do
     @check.dependencies = [{:name=>"grit", :version=>"6.0"}]
-    @check.vuln?.should   == true
+    expect(@check.vuln?).to   eq(true)
   end
 
   it "is reported when the vulnerable gem is detected" do
     @check.dependencies = [{:name=>"grit", :version=>"6.1"}]
-    @check.vuln?.should   == true
+    expect(@check.vuln?).to   eq(true)
   end
 
   it "is reported when the vulnerable gem is detected" do
     @check.dependencies = [{:name=>"grit", :version=>"6.2"}]
-    @check.vuln?.should   == true
+    expect(@check.vuln?).to   eq(true)
   end
 
   it "is not reported when a fixed release is detected" do
     @check.dependencies = [{:name=>"grit", :version=>"5.1"}]
-    @check.vuln?.should   == false
+    expect(@check.vuln?).to   eq(false)
   end
 
   it "is not reported when a fixed release is detected" do
     @check.dependencies = [{:name=>"grit", :version=>"5.0"}]
-    @check.vuln?.should   == false
+    expect(@check.vuln?).to   eq(false)
   end
 
   it "is not reported when a fixed release is detected" do
     @check.dependencies = [{:name=>"grit", :version=>"3.2"}]
-    @check.vuln?.should   == false
+    expect(@check.vuln?).to   eq(false)
   end
 
   it "is not reported when a fixed release is detected" do
     @check.dependencies = [{:name=>"grit", :version=>"5.4.1"}]
-    @check.vuln?.should   == false
+    expect(@check.vuln?).to   eq(false)
   end
 
   it "is not reported when a fixed release is detected" do
     @check.dependencies = [{:name=>"grit", :version=>"6.2.3"}]
-    @check.vuln?.should   == false
+    expect(@check.vuln?).to   eq(false)
   end
 end

data/spec/lib/kb/cve_2013_4491_spec.rb

@@ -7,10 +7,10 @@ describe "The CVE-2013-4491 vulnerability" do
 
   it "is reported when the vulnerable gem is detected" do
     @check.dependencies = [{:name=>"rails", :version=>"3.2.15"}]
-    @check.vuln?.should   == true
+    expect(@check.vuln?).to   eq(true)
   end
   it "is not reported when a fixed release is detected" do
     @check.dependencies = [{:name=>"rails", :version=>"3.2.22"}]
-    @check.vuln?.should   == false
+    expect(@check.vuln?).to   eq(false)
   end
 end

data/spec/lib/kb/cve_2013_4593_spec.rb

@@ -7,10 +7,10 @@ describe "The CVE-2013-4593 vulnerability" do
 
   it "is reported when a omniauth-facebook gem version 1.5.0 is detected" do
     @check.dependencies = [{:name=>"omniauth-facebook", :version=>"1.5.0"}]
-    @check.vuln?.should   == true
+    expect(@check.vuln?).to   eq(true)
   end
   it "is not reported when a omniauth-facebook gem version 1.5.1 is detected" do
     @check.dependencies = [{:name=>"omniauth-facebook", :version=>"1.5.1"}]
-    @check.vuln?.should   == false
+    expect(@check.vuln?).to   eq(false)
   end
 end

data/spec/lib/kb/cve_2013_5647_spec.rb

@@ -6,14 +6,14 @@ describe "The CVE-2013-5647 vulnerability" do
 	end
   it "fires when vulnerable sounder 1.0.1 version is userd" do
     @check.dependencies = [{:name=>"sounder", :version=>'1.0.1'}]
-    @check.vuln?.should   == true
+    expect(@check.vuln?).to   eq(true)
   end
   it "doesn't fire when sounder not vulnerable version is used" do
     @check.dependencies = [{:name=>"sounder", :version=>'1.0.2'}]
-    @check.vuln?.should   == false
+    expect(@check.vuln?).to   eq(false)
   end
   it "doesn't fire when a very old sounder version is used" do
     @check.dependencies = [{:name=>"sounder", :version=>'0.9.2'}]
-    @check.vuln?.should   == false
+    expect(@check.vuln?).to   eq(false)
   end
 end

data/spec/lib/kb/cve_2013_5671_spec.rb

@@ -7,21 +7,21 @@ describe "The CVE-2013-5671 vulnerability" do
 
   it "is reported when a fog-dragonfly gem version 0.8.2 is detected" do
     @check.dependencies = [{:name=>"fog-dragonfly", :version=>"0.8.2"}]
-    @check.vuln?.should   == true
+    expect(@check.vuln?).to   eq(true)
   end
 
   it "is reported when a fog-dragonfly gem version 0.8.0 is detected" do
     @check.dependencies = [{:name=>"fog-dragonfly", :version=>"0.8.0"}]
-    @check.vuln?.should   == true
+    expect(@check.vuln?).to   eq(true)
   end
 
   it "is reported when a fog-dragonfly gem version 0.7.5 is detected" do
     @check.dependencies = [{:name=>"fog-dragonfly", :version=>"0.7.5"}]
-    @check.vuln?.should   == true
+    expect(@check.vuln?).to   eq(true)
   end
 
   it "is not reported when a paratrooper-pingdom gem version 0.8.3 is detected" do
     @check.dependencies = [{:name=>"fog-dragonfly", :version=>"0.8.3"}]
-    @check.vuln?.should   == false
+    expect(@check.vuln?).to   eq(false)
   end
 end

data/spec/lib/kb/cve_2013_6416_spec.rb

@@ -7,24 +7,24 @@ describe "The CVE-2013-6416 vulnerability" do
   end
   it "is detected if vulnerable version of rails rubygem is detected" do
     @check.dependencies=[{:name=>"rails", :version=>'4.0.1'}]
-    @check.vuln?.should   == true
+    expect(@check.vuln?).to   eq(true)
   end
   it "is ignored if rails version is 3.2.x" do 
     @check.dependencies=[{:name=>"rails", :version=>'3.2.16'}]
-    @check.vuln?.should   == false
+    expect(@check.vuln?).to   eq(false)
   end
 
   it "is ignored if rails version is 3.1.x" do 
     @check.dependencies=[{:name=>"rails", :version=>'3.1.16'}]
-    @check.vuln?.should   == false
+    expect(@check.vuln?).to   eq(false)
   end
   it "is ignored if rails version is 3.0.x" do 
     @check.dependencies=[{:name=>"rails", :version=>'3.0.16'}]
-    @check.vuln?.should   == false
+    expect(@check.vuln?).to   eq(false)
   end
   it "is ignored if rails version is 2.3.x" do 
     @check.dependencies=[{:name=>"rails", :version=>'2.3.16'}]
-    @check.vuln?.should   == false
+    expect(@check.vuln?).to   eq(false)
   end
 
 

data/spec/lib/kb/cve_2013_6459_spec.rb

@@ -6,10 +6,10 @@ describe "The CVE-2013-6459 vulnerability" do
   end
   it "fires when will_paginage 3.0.4 vulnerable version is used" do
     @check.dependencies = [{:name=>"will_paginate", :version=>'3.0.4'}]
-    @check.vuln?.should == true
+    expect(@check.vuln?).to eq(true)
   end
   it "doesn't fires when will_paginage 3.0.5 safe version is used" do
     @check.dependencies = [{:name=>"will_paginate", :version=>'3.0.5'}]
-    @check.vuln?.should == false
+    expect(@check.vuln?).to eq(false)
   end
 end

data/spec/lib/kb/cve_2013_7086_spec.rb

@@ -6,17 +6,17 @@ describe "The CVE-2013-7086 vulnerability" do
 	end
 	it "is detected for gem 1.0.5.3" do
     @check.dependencies = [{:name=>"webbynode", :version=>'1.0.5.3'}]
-    @check.vuln?.should  == true
+    expect(@check.vuln?).to  eq(true)
   end
 
   it "is detected for gem 1.0.4.3" do
     @check.dependencies = [{:name=>"webbynode", :version=>'1.0.4.3'}]
-    @check.vuln?.should  == true
+    expect(@check.vuln?).to  eq(true)
   end
 
   it "is not detected for gem 1.0.5.4" do
     @check.dependencies = [{:name=>"webbynode", :version=>'1.0.5.4'}]
-    @check.vuln?.should  == false
+    expect(@check.vuln?).to  eq(false)
   end
 
 end

data/spec/lib/kb/cve_2014_0036_spec.rb

@@ -6,10 +6,10 @@ describe "The CVE-2014-0036 vulnerability" do
 	end
   it "is reported when a vulnerable rbovirt gem version is detected (0.0.23)" do
     @check.dependencies = [{:name=>"rbovirt", :version=>'0.0.23'}]
-    @check.vuln?.should   == true
+    expect(@check.vuln?).to   eq(true)
   end
   it "is not reported when a sage rbovirt gem version is detected (0.0.24)" do
     @check.dependencies = [{:name=>"rbovirt", :version=>'0.0.24'}]
-    @check.vuln?.should   == false
+    expect(@check.vuln?).to   eq(false)
   end
 end

data/spec/lib/kb/cve_2014_0080_spec.rb

@@ -6,23 +6,23 @@ describe "The CVE-2014-0080 vulnerability" do
 	end
   it "affects version 4.0.0" do
     @check.dependencies = [{:name=>"rails", :version=>'4.0.0'}]
-    @check.vuln?.should == true
+    expect(@check.vuln?).to eq(true)
   end
   it "affects version 4.0.2" do
     @check.dependencies = [{:name=>"rails", :version=>'4.0.2'}]
-    @check.vuln?.should == true
+    expect(@check.vuln?).to eq(true)
   end
   it "affects version 4.0.1" do
     @check.dependencies = [{:name=>"rails", :version=>'4.0.1'}]
-    @check.vuln?.should == true
+    expect(@check.vuln?).to eq(true)
   end
   it "affects version 4.1.0.beta1" do
     @check.dependencies = [{:name=>"rails", :version=>'4.1.0.beta1'}]
-    @check.vuln?.should == true
+    expect(@check.vuln?).to eq(true)
   end
 
   it "doesn't affect version 4.0.3" do 
     @check.dependencies = [{:name=>"rails", :version=>'4.0.3'}]
-    @check.vuln?.should == false
+    expect(@check.vuln?).to eq(false)
   end
 end

data/spec/lib/kb/cve_2014_0081_spec.rb

@@ -6,19 +6,19 @@ describe "The CVE-2014-0081 vulnerability" do
 	end
   it "affects version 3.2.16" do
     @check.dependencies = [{:name=>"rails", :version=>'3.2.16'}]
-    @check.vuln?.should == true
+    expect(@check.vuln?).to eq(true)
   end
   it "affects version 4.0.0" do
     @check.dependencies = [{:name=>"rails", :version=>'4.0.0'}]
-    @check.vuln?.should == true
+    expect(@check.vuln?).to eq(true)
   end
   it "affects version 4.0.2" do
     @check.dependencies = [{:name=>"rails", :version=>'4.0.2'}]
-    @check.vuln?.should == true
+    expect(@check.vuln?).to eq(true)
   end
   it "affects version 4.0.1" do
     @check.dependencies = [{:name=>"rails", :version=>'4.0.1'}]
-    @check.vuln?.should == true
+    expect(@check.vuln?).to eq(true)
   end
 
   it "affects version 3.1.x" do
@@ -27,7 +27,7 @@ describe "The CVE-2014-0081 vulnerability" do
     version = "3.1.#{rand}"
 
     @check.dependencies = [{:name=>"rails", :version=>version}]
-    @check.vuln?.should == true
+    expect(@check.vuln?).to eq(true)
   end
   
   it "affects version 3.0.x" do
@@ -36,7 +36,7 @@ describe "The CVE-2014-0081 vulnerability" do
     version = "3.0.#{rand}"
 
     @check.dependencies = [{:name=>"rails", :version=>version}]
-    @check.vuln?.should == true
+    expect(@check.vuln?).to eq(true)
   end
   it "affects version 2.x.y" do
     require 'securerandom'
@@ -45,7 +45,7 @@ describe "The CVE-2014-0081 vulnerability" do
     version = "2.#{rand_min}.#{rand_patch}"
 
     @check.dependencies = [{:name=>"rails", :version=>version}]
-    @check.vuln?.should == true
+    expect(@check.vuln?).to eq(true)
   end
   it "affects version 1.x.y" do
     require 'securerandom'
@@ -54,15 +54,15 @@ describe "The CVE-2014-0081 vulnerability" do
     version = "1.#{rand_min}.#{rand_patch}"
 
     @check.dependencies = [{:name=>"rails", :version=>version}]
-    @check.vuln?.should == true
+    expect(@check.vuln?).to eq(true)
   end
 
   it "doesn't affect version 4.0.3" do 
     @check.dependencies = [{:name=>"rails", :version=>'4.0.3'}]
-    @check.vuln?.should == false
+    expect(@check.vuln?).to eq(false)
   end
   it "doesn't affect version 3.2.17" do 
     @check.dependencies = [{:name=>"rails", :version=>'3.2.17'}]
-    @check.vuln?.should == false
+    expect(@check.vuln?).to eq(false)
   end
 end

data/spec/lib/kb/cve_2014_0082_spec.rb

@@ -10,7 +10,7 @@ describe "The CVE-2014-0082 vulnerability" do
     version = "3.0.#{rand}"
 
     @check.dependencies = [{:name=>"rails", :version=>version}]
-    @check.vuln?.should == true
+    expect(@check.vuln?).to eq(true)
   end
   it "affects version 2.x.y" do
     require 'securerandom'
@@ -18,7 +18,7 @@ describe "The CVE-2014-0082 vulnerability" do
     rand_patch = SecureRandom.random_number(9999)
     version = "2.#{rand_min}.#{rand_patch}"
     @check.dependencies = [{:name=>"rails", :version=>version}]
-    @check.vuln?.should == true
+    expect(@check.vuln?).to eq(true)
   end
   it "affects version 1.x.y" do
     require 'securerandom'
@@ -27,26 +27,26 @@ describe "The CVE-2014-0082 vulnerability" do
     version = "1.#{rand_min}.#{rand_patch}"
 
     @check.dependencies = [{:name=>"rails", :version=>version}]
-    @check.vuln?.should == true
+    expect(@check.vuln?).to eq(true)
   end
   it "doesn't affect version 4.0.2" do 
     @check.dependencies = [{:name=>"rails", :version=>'4.0.2'}]
-    @check.vuln?.should == false
+    expect(@check.vuln?).to eq(false)
   end
   it "doesn't affect version 4.0.1" do 
     @check.dependencies = [{:name=>"rails", :version=>'4.0.1'}]
-    @check.vuln?.should == false
+    expect(@check.vuln?).to eq(false)
   end
   it "doesn't affect version 4.0.0" do 
     @check.dependencies = [{:name=>"rails", :version=>'4.0.0'}]
-    @check.vuln?.should == false
+    expect(@check.vuln?).to eq(false)
   end
   it "doesn't affect version 4.0.3" do 
     @check.dependencies = [{:name=>"rails", :version=>'4.0.3'}]
-    @check.vuln?.should == false
+    expect(@check.vuln?).to eq(false)
   end
   it "doesn't affect version 3.2.17" do 
     @check.dependencies = [{:name=>"rails", :version=>'3.2.17'}]
-    @check.vuln?.should == false
+    expect(@check.vuln?).to eq(false)
   end
 end

data/spec/lib/kb/cve_2014_0130_spec.rb

@@ -6,14 +6,14 @@ describe "The CVE-2014-0130 vulnerability" do
 	end
   it "is reported when rails 4.1.0 is detected" do
     @check.dependencies = [{:name=>"rails", :version=>'4.1.0'}]
-    @check.vuln?.should   == true
+    expect(@check.vuln?).to   eq(true)
   end
   it "is reported when rails 4.0.4 is detected" do
     @check.dependencies = [{:name=>"rails", :version=>'4.0.4'}]
-    @check.vuln?.should   == true
+    expect(@check.vuln?).to   eq(true)
   end
   it "is reported when rails 3.2.17 is detected" do
     @check.dependencies = [{:name=>"rails", :version=>'3.2.17'}]
-    @check.vuln?.should   == true
+    expect(@check.vuln?).to   eq(true)
   end
 end

data/spec/lib/kb/cve_2014_1233_spec.rb

@@ -6,10 +6,10 @@ describe "The CVE-2014-1233 vulnerability" do
 	end
   it "is reported when a paratrooper-pingdom gem version 1.0.0 is detected" do
     @check.dependencies = [{:name=>"paratrooper-pingdom", :version=>"1.0.0"}]
-    @check.vuln?.should   == true
+    expect(@check.vuln?).to   eq(true)
   end
   it "is not reported when a paratrooper-pingdom gem version 1.0.1 is detected" do
     @check.dependencies = [{:name=>"paratrooper-pingdom", :version=>"1.0.1"}]
-    @check.vuln?.should   == false
+    expect(@check.vuln?).to   eq(false)
   end
 end