muck-blogs 0.1.0

data/test/rails_root/test/shoulda_macros/models.rb

@@ -0,0 +1,50 @@
+module ShouldaModelMacros
+
+  def should_sanitize(*attributes)
+    bad_scripts = [
+      %|';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>|,
+      %|'';!--"<XSS>=&{()}|,
+      %|<SCRIPT SRC=http://ha.ckers.org/xss.js></SCRIPT>|,
+      %|<IMG SRC="javascript:alert('XSS');">|,
+      %|<IMG SRC=javascript:alert('XSS')>|,
+      %|<IMG SRC=JaVaScRiPt:alert('XSS')>|,
+      %|<IMG SRC=JaVaScRiPt:alert('XSS')>|,
+      %|<IMG SRC=`javascript:alert("RSnake says, 'XSS'")`>|,
+      %|<IMG """><SCRIPT>alert("XSS")</SCRIPT>">|,
+      %|<IMG SRC=javascript:alert(String.fromCharCode(88,83,83))>|,
+      %|<A HREF="h
+      tt	p://6&#9;6.000146.0x7.147/">XSS</A>|,
+      %|<script>alert('message');</script>| ]
+      
+    klass = model_class
+    attributes.each do |attribute|
+      attribute = attribute.to_sym
+      should "white list #{attribute}" do
+        assert object = klass.find(:first), "Can't find first #{klass}"
+        bad_scripts.each do |bad_value|
+          object.send("#{attribute}=", bad_value)
+          object.save
+          clean_value = object.send("#{attribute}")
+          assert !clean_value.include?(bad_value), "#{attribute} is not white listed. #{bad_value} made it through"
+        end
+      end
+    end
+  end
+
+  def should_accept_nested_attributes_for(*attr_names)
+    klass = self.name.gsub(/Test$/, '').constantize
+ 
+    context "#{klass}" do
+      attr_names.each do |association_name|
+        should "accept nested attrs for #{association_name}" do
+          assert  klass.instance_methods.include?("#{association_name}_attributes="),
+                  "#{klass} does not accept nested attributes for #{association_name}"
+        end
+      end
+    end
+  end
+end
+
+class ActiveSupport::TestCase
+  extend ShouldaModelMacros
+end

data/test/rails_root/test/shoulda_macros/pagination.rb

@@ -0,0 +1,53 @@
+module ShouldaPaginationMacros
+  # Example:
+  #  context "a GET to index logged in as admin" do
+  #    setup do
+  #      login_as_admin 
+  #      get :index
+  #    end
+  #    should_paginate_collection :users
+  #    should_display_pagination
+  #  end
+  def self.should_paginate_collection(collection_name)
+    should "paginate #{collection_name}" do
+      assert collection = assigns(collection_name), 
+        "Controller isn't assigning to @#{collection_name.to_s}."
+      assert_kind_of WillPaginate::Collection, collection, 
+        "@#{collection_name.to_s} isn't a WillPaginate collection."
+    end
+  end
+  
+  def self.should_display_pagination
+    should "display pagination" do
+      assert_select "div.pagination", { :minimum => 1 }, 
+        "View isn't displaying pagination. Add <%= will_paginate @collection %>."
+    end
+  end
+  
+  # Example:
+  #  context "a GET to index not logged in as admin" do
+  #    setup { get :index }
+  #    should_not_paginate_collection :users
+  #    should_not_display_pagination
+  #  end
+  def self.should_not_paginate_collection(collection_name)
+    should "not paginate #{collection_name}" do
+      assert collection = assigns(collection_name), 
+        "Controller isn't assigning to @#{collection_name.to_s}."
+      assert_not_equal WillPaginate::Collection, collection.class, 
+        "@#{collection_name.to_s} is a WillPaginate collection."
+    end
+  end
+  
+  def self.should_not_display_pagination
+    should "not display pagination" do
+      assert_select "div.pagination", { :count => 0 }, 
+        "View is displaying pagination. Check your logic."
+    end
+  end
+end
+
+
+class ActiveSupport::TestCase
+  extend ShouldaPaginationMacros
+end

data/test/rails_root/test/shoulda_macros/plugins.rb

@@ -0,0 +1,34 @@
+module ShouldaPluginMacros
+
+  def self.should_act_as_taggable_on_steroids
+    klass = self.name.gsub(/Test$/, '').constantize
+
+    should "include ActsAsTaggableOnSteroids methods" do
+      assert klass.extended_by.include?(ActiveRecord::Acts::Taggable::ClassMethods)
+      assert klass.extended_by.include?(ActiveRecord::Acts::Taggable::SingletonMethods)
+      assert klass.include?(ActiveRecord::Acts::Taggable::InstanceMethods)
+    end
+
+    should_have_many :taggings, :tags
+  end
+
+
+  def self.should_act_as_list
+    klass = self.name.gsub(/Test$/, '').constantize
+
+    context "To support acts_as_list" do
+      should_have_db_column('position', :type => :integer)
+    end
+
+    should "include ActsAsList methods" do
+      assert klass.include?(ActiveRecord::Acts::List::InstanceMethods)
+    end
+
+    should_have_instance_methods :acts_as_list_class, :position_column, :scope_condition
+  end
+
+end
+
+ActiveSupport::TestCase.extend(ShouldaPluginMacros)
+Test::Unit::TestCase.extend(ShouldaPluginMacros)
+ActionController::TestCase.extend(ShouldaPluginMacros)

data/test/rails_root/test/test_helper.rb

@@ -0,0 +1,56 @@
+$:.reject! { |e| e.include? 'TextMate' }
+ENV["RAILS_ENV"] = "test"
+require File.expand_path(File.dirname(__FILE__) + "/../config/environment")
+require 'test_help'
+require 'ruby-debug'
+gem 'thoughtbot-factory_girl' # from github
+require 'factory_girl'
+require 'authlogic/test_case'
+require 'redgreen' rescue LoadError
+require File.expand_path(File.dirname(__FILE__) + '/factories')
+require File.join(File.dirname(__FILE__), 'shoulda_macros', 'controller')
+require File.join(File.dirname(__FILE__), 'shoulda_macros', 'models')
+
+class ActiveSupport::TestCase 
+  self.use_transactional_fixtures = true
+  self.use_instantiated_fixtures  = false
+
+  include Authlogic::TestCase
+  
+  def login_as(user)
+    success = UserSession.create(user)
+    if !success
+      errors = user.errors.full_messages.to_sentence
+      message = 'User has not been activated' if !user.active?
+      raise "could not login as #{user.to_param}.  Please make sure the user is valid. #{message} #{errors}"
+    end
+    UserSession.find
+  end
+  
+  def assure_logout
+    user_session = UserSession.find
+    user_session.destroy if user_session
+  end
+  
+  def ensure_flash(val)
+    assert_contains flash.values, val, ", Flash: #{flash.inspect}"
+  end
+  
+  # For Selenium
+  # setup do |session|
+  #   session.host! "localhost:3001"
+  # end
+  
+  def make_parent_params(parent)
+    { :parent_id => parent.id, :parent_type => parent.class.to_s }
+  end
+    
+end
+
+
+# turn off solr for tests
+class ActsAsSolr::Post
+  def self.execute(request)
+    true
+  end
+end

data/test/rails_root/test/unit/blog_test.rb

@@ -0,0 +1,28 @@
+require File.dirname(__FILE__) + '/../test_helper'
+
+class BlogTest < ActiveSupport::TestCase
+  
+  context "Blog" do
+    setup do
+      @user = Factory(:user)
+      @blog = @user.blog
+    end
+    
+    should_validate_presence_of :title
+    should_belong_to :blogable
+    
+    should_have_named_scope :by_newest
+    should_have_named_scope :by_oldest
+    should_have_named_scope :recent
+    
+    should "require title" do
+      u = Factory.build(:blog, :title => nil)
+      assert !u.valid?
+      assert u.errors.on(:title)
+    end
+    should "be able to add content" do
+      assert @blog.can_add_content?(@user)
+    end
+  end
+
+end

data/test/rails_root/test/unit/user_test.rb

@@ -0,0 +1,15 @@
+require File.dirname(__FILE__) + '/../test_helper'
+
+# Use to test has_muck_blog
+class UserTest < ActiveSupport::TestCase
+
+  context "A class that is blogable" do
+    should_have_one :blog
+    should "automatically create a blog for the user" do
+      assert_difference "Blog.count", 1 do
+        @user = Factory(:user)
+      end
+    end
+  end
+
+end

data/test/rails_root/vendor/plugins/ssl_requirement/README

@@ -0,0 +1,43 @@
+SSL Requirement
+===============
+
+SSL requirement adds a declarative way of specifying that certain actions
+should only be allowed to run under SSL, and if they're accessed without it,
+they should be redirected.
+
+Example:
+
+  class ApplicationController < ActiveRecord::Base
+    include SslRequirement
+  end
+
+  class AccountController < ApplicationController
+    ssl_required :signup, :payment
+    ssl_allowed :index
+    
+    def signup
+      # Non-SSL access will be redirected to SSL
+    end
+    
+    def payment
+      # Non-SSL access will be redirected to SSL
+    end
+
+    def index
+      # This action will work either with or without SSL
+    end
+
+    def other
+      # SSL access will be redirected to non-SSL
+    end
+  end
+  
+You can overwrite the protected method ssl_required? to rely on other things
+than just the declarative specification. Say, only premium accounts get SSL.
+
+P.S.: Beware when you include the SslRequirement module. At the time of
+inclusion, it'll add the before_filter that validates the declarations. Some
+times you'll want to run other before_filters before that. They should then be
+declared ahead of including this module.
+
+Copyright (c) 2005 David Heinemeier Hansson, released under the MIT license

data/test/rails_root/vendor/plugins/ssl_requirement/lib/ssl_requirement.rb

@@ -0,0 +1,62 @@
+# Copyright (c) 2005 David Heinemeier Hansson
+#
+# Permission is hereby granted, free of charge, to any person obtaining
+# a copy of this software and associated documentation files (the
+# "Software"), to deal in the Software without restriction, including
+# without limitation the rights to use, copy, modify, merge, publish,
+# distribute, sublicense, and/or sell copies of the Software, and to
+# permit persons to whom the Software is furnished to do so, subject to
+# the following conditions:
+#
+# The above copyright notice and this permission notice shall be
+# included in all copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+# EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+# NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+# LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+# OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+# WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+module SslRequirement
+  def self.included(controller)
+    controller.extend(ClassMethods)
+    controller.before_filter(:ensure_proper_protocol)
+  end
+
+  module ClassMethods
+    # Specifies that the named actions requires an SSL connection to be performed (which is enforced by ensure_proper_protocol).
+    def ssl_required(*actions)
+      write_inheritable_array(:ssl_required_actions, actions)
+    end
+
+    def ssl_allowed(*actions)
+      write_inheritable_array(:ssl_allowed_actions, actions)
+    end
+  end
+  
+  protected
+    # Returns true if the current action is supposed to run as SSL
+    def ssl_required?
+      (self.class.read_inheritable_attribute(:ssl_required_actions) || []).include?(action_name.to_sym)
+    end
+    
+    def ssl_allowed?
+      (self.class.read_inheritable_attribute(:ssl_allowed_actions) || []).include?(action_name.to_sym)
+    end
+
+  private
+    def ensure_proper_protocol
+      return true if ssl_allowed?
+
+      if ssl_required? && !request.ssl?
+        redirect_to "https://" + request.host + request.request_uri
+        flash.keep
+        return false
+      elsif request.ssl? && !ssl_required?
+        redirect_to "http://" + request.host + request.request_uri
+        flash.keep
+        return false
+      end
+    end
+end

data/test/rails_root/vendor/plugins/ssl_requirement/test/ssl_requirement_test.rb

@@ -0,0 +1,132 @@
+begin
+  require 'action_controller'
+rescue LoadError
+  if ENV['ACTIONCONTROLLER_PATH'].nil?
+    abort <<MSG
+Please set the ACTIONCONTROLLER_PATH environment variable to the directory
+containing the action_controller.rb file.
+MSG
+  else
+    $LOAD_PATH.unshift << ENV['ACTIONCONTROLLER_PATH']
+    begin
+      require 'action_controller'
+    rescue LoadError
+      abort "ActionController could not be found."
+    end
+  end
+end
+
+require 'action_controller/test_process'
+require 'test/unit'
+require "#{File.dirname(__FILE__)}/../lib/ssl_requirement"
+
+ActionController::Base.logger = nil
+ActionController::Routing::Routes.reload rescue nil
+
+class SslRequirementController < ActionController::Base
+  include SslRequirement
+  
+  ssl_required :a, :b
+  ssl_allowed :c
+  
+  def a
+    render :nothing => true
+  end
+  
+  def b
+    render :nothing => true
+  end
+  
+  def c
+    render :nothing => true
+  end
+  
+  def d
+    render :nothing => true
+  end
+  
+  def set_flash
+    flash[:foo] = "bar"
+  end
+end
+
+class SslRequirementTest < Test::Unit::TestCase
+  def setup
+    @controller = SslRequirementController.new
+    @request    = ActionController::TestRequest.new
+    @response   = ActionController::TestResponse.new
+  end
+  
+  def test_redirect_to_https_preserves_flash
+    get :set_flash
+    get :b
+    assert_response :redirect
+    assert_equal "bar", flash[:foo]
+  end
+  
+  def test_not_redirecting_to_https_does_not_preserve_the_flash
+    get :set_flash
+    get :d
+    assert_response :success
+    assert_nil flash[:foo]
+  end
+  
+  def test_redirect_to_http_preserves_flash
+    get :set_flash
+    @request.env['HTTPS'] = "on"
+    get :d
+    assert_response :redirect
+    assert_equal "bar", flash[:foo]
+  end
+  
+  def test_not_redirecting_to_http_does_not_preserve_the_flash
+    get :set_flash
+    @request.env['HTTPS'] = "on"
+    get :a
+    assert_response :success
+    assert_nil flash[:foo]
+  end
+  
+  def test_required_without_ssl
+    assert_not_equal "on", @request.env["HTTPS"]
+    get :a
+    assert_response :redirect
+    assert_match %r{^https://}, @response.headers['Location']
+    get :b
+    assert_response :redirect
+    assert_match %r{^https://}, @response.headers['Location']
+  end
+  
+  def test_required_with_ssl
+    @request.env['HTTPS'] = "on"
+    get :a
+    assert_response :success
+    get :b
+    assert_response :success
+  end
+
+  def test_disallowed_without_ssl
+    assert_not_equal "on", @request.env["HTTPS"]
+    get :d
+    assert_response :success
+  end
+
+  def test_disallowed_with_ssl
+    @request.env['HTTPS'] = "on"
+    get :d
+    assert_response :redirect
+    assert_match %r{^http://}, @response.headers['Location']
+  end
+
+  def test_allowed_without_ssl
+    assert_not_equal "on", @request.env["HTTPS"]
+    get :c
+    assert_response :success
+  end
+
+  def test_allowed_with_ssl
+    @request.env['HTTPS'] = "on"
+    get :c
+    assert_response :success
+  end
+end