rack-csrf-detector 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: c0dea88d24a9de1ca64da770e521fe4be8195b76
+  data.tar.gz: 9cd14e8a69e1ff336b6cbfe0dcee0cdd83e8d895
+SHA512:
+  metadata.gz: 0734528033885051d452cc22e3581306ce98f0855b814a6a5836e195c495916cfe7c54716cd04ae3e52817f86c386557bb29f8a7ff0b7e9763020e8e03399e4c
+  data.tar.gz: 36f3281606e24d29e4bc706e1355b48e493114986f2e689b23a01728a04201f26f776359380bbc871fe5683a0643191b6b26cc1c0297d9b5cdee9022c57d44f4

data/lib/rack/csrf_detector.rb

@@ -0,0 +1,61 @@
+module Rack
+  class CsrfDetector
+    @@bad_count = 0
+
+    def initialize(app)
+      @app = app
+      🙉_activerecord!
+    end
+
+    def call(env)
+      @@bad_count = 0
+      status, headers, response = @app.call(env)
+
+      if env['REQUEST_METHOD'] == 'GET' && @@bad_count > 0
+        headers["CSRF_WARNING"] = 'yes'
+      end
+
+      [status, headers, response]
+    end
+
+    def self.more_bad!
+      @@bad_count += 1
+    end
+
+    private
+
+    def 🙉_activerecord!
+      if ActiveRecord::VERSION::STRING.match(/^4.2/)
+        🙉_activerecord_4_2!
+      else
+        🙉_activerecord_4_0!
+      end
+    end
+
+    def 🙉_activerecord_4_0!
+      require 'active_record/connection_adapters/abstract/transaction'
+
+      ActiveRecord::ConnectionAdapters::OpenTransaction.class_eval do
+        commit_method = instance_method(:commit)
+
+        define_method :commit do
+          Rack::CsrfDetector.more_bad!
+          commit_method.bind(self).call
+        end
+      end
+    end
+
+    def 🙉_activerecord_4_2!
+      require 'active_record/connection_adapters/abstract/transaction'
+
+      ActiveRecord::ConnectionAdapters::Transaction.class_eval do
+        commit_method = instance_method(:commit)
+
+        define_method :commit do
+          Rack::CsrfDetector.more_bad!
+          commit_method.bind(self).call
+        end
+      end
+    end
+  end
+end

metadata

@@ -0,0 +1,47 @@
+--- !ruby/object:Gem::Specification
+name: rack-csrf-detector
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Tommy Murphy
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2015-07-04 00:00:00.000000000 Z
+dependencies: []
+description: |-
+  This middleware helps you identify when a GET request results in an
+  application state-change
+email: tommy.murphy@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/rack/csrf_detector.rb
+homepage: https://github.com/tam7t/rack-csrf-detector
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.2.5
+signing_key: 
+specification_version: 4
+summary: Automated CSRF detection middleware
+test_files: []
+has_rdoc: