rails-prg 0.1.0

data/spec/dummy/app/assets/stylesheets/error_duplicator.css

@@ -0,0 +1,4 @@
+/*
+  Place all the styles related to the matching controller here.
+  They will automatically be included in application.css.
+*/

data/spec/dummy/app/assets/stylesheets/error_duplicators.css

@@ -0,0 +1,4 @@
+/*
+  Place all the styles related to the matching controller here.
+  They will automatically be included in application.css.
+*/

data/spec/dummy/app/assets/stylesheets/example_prgs.css

@@ -0,0 +1,4 @@
+/*
+  Place all the styles related to the matching controller here.
+  They will automatically be included in application.css.
+*/

data/spec/dummy/app/assets/stylesheets/post_redirect_gets.css

@@ -0,0 +1,4 @@
+/*
+  Place all the styles related to the matching controller here.
+  They will automatically be included in application.css.
+*/

data/spec/dummy/app/assets/stylesheets/scaffold.css

@@ -0,0 +1,56 @@
+body { background-color: #fff; color: #333; }
+
+body, p, ol, ul, td {
+  font-family: verdana, arial, helvetica, sans-serif;
+  font-size:   13px;
+  line-height: 18px;
+}
+
+pre {
+  background-color: #eee;
+  padding: 10px;
+  font-size: 11px;
+}
+
+a { color: #000; }
+a:visited { color: #666; }
+a:hover { color: #fff; background-color:#000; }
+
+div.field, div.actions {
+  margin-bottom: 10px;
+}
+
+#notice {
+  color: green;
+}
+
+.field_with_errors {
+  padding: 2px;
+  background-color: red;
+  display: table;
+}
+
+#error_explanation {
+  width: 450px;
+  border: 2px solid red;
+  padding: 7px;
+  padding-bottom: 0;
+  margin-bottom: 20px;
+  background-color: #f0f0f0;
+}
+
+#error_explanation h2 {
+  text-align: left;
+  font-weight: bold;
+  padding: 5px 5px 5px 15px;
+  font-size: 12px;
+  margin: -7px;
+  margin-bottom: 0px;
+  background-color: #c00;
+  color: #fff;
+}
+
+#error_explanation ul li {
+  font-size: 12px;
+  list-style: square;
+}

data/spec/dummy/app/assets/stylesheets/test_objects.css

@@ -0,0 +1,4 @@
+/*
+  Place all the styles related to the matching controller here.
+  They will automatically be included in application.css.
+*/

data/spec/dummy/app/controllers/application_controller.rb

@@ -0,0 +1,19 @@
+class ApplicationController < ActionController::Base
+  # Prevent CSRF attacks by raising an exception.
+  # For APIs, you may want to use :null_session instead.
+  protect_from_forgery with: :exception
+
+  # Ensure application doesn't allow browser to store page in
+  # internal browser cache (and history)
+  def set_secure_environment
+    # As suggested in :
+    # * https://www.owasp.org/index.php/OWASP_Application_Security_FAQ
+    # * http://www.mnot.net/cache_docs/#CACHE-CONTROL
+    # no-store is vital for chrome to prevent caching of page values
+    # However, you must then use full POST-REDIRECT-GET for both success/errors
+    # and skip rails usual POST -> render errors pattern.
+    response.headers["Cache-Control"] = "no-cache, no-store, max-age=0, must-revalidate"
+    response.headers["Pragma"]        = "no-cache"
+    response.headers["Expires"]       = "-1"
+  end
+end

data/spec/dummy/app/controllers/error_duplicators_controller.rb

@@ -0,0 +1,64 @@
+# Without Post-Redirect-Get pattern on error
+# - > Standard Rails scaffold, this duplicates the error by showing:
+#       Create -> Secure environment -> render error, success, back -> Displays error
+#       Update -> Non-Secure environment -> render error, success, back -> No error
+class ErrorDuplicatorsController < ApplicationController
+  before_action :set_error_duplicator, only: [:show, :edit, :update, :destroy]
+
+  before_filter :set_secure_environment, except: [:edit, :update]
+
+  # GET /error_duplicators
+  def index
+    @error_duplicators = ErrorDuplicator.all
+  end
+
+  # GET /error_duplicators/1
+  def show
+  end
+
+  # GET /error_duplicators/new
+  def new
+    @error_duplicator = ErrorDuplicator.new
+  end
+
+  # GET /error_duplicators/1/edit
+  def edit
+  end
+
+  # POST /error_duplicators
+  def create
+    @error_duplicator = ErrorDuplicator.new(error_duplicator_params)
+
+    if @error_duplicator.save
+      redirect_to @error_duplicator, notice: 'Error duplicator was successfully created.'
+    else
+      render action: 'new'
+    end
+  end
+
+  # PATCH/PUT /error_duplicators/1
+  def update
+    if @error_duplicator.update(error_duplicator_params)
+      redirect_to @error_duplicator, notice: 'Error duplicator was successfully updated.'
+    else
+      render action: 'edit'
+    end
+  end
+
+  # DELETE /error_duplicators/1
+  def destroy
+    @error_duplicator.destroy
+    redirect_to error_duplicators_url, notice: 'Error duplicator was successfully destroyed.'
+  end
+
+  private
+    # Use callbacks to share common setup or constraints between actions.
+    def set_error_duplicator
+      @error_duplicator = ErrorDuplicator.find(params[:id])
+    end
+
+    # Only allow a trusted parameter "white list" through.
+    def error_duplicator_params
+      params.require(:error_duplicator).permit(:subject, :body, :published)
+    end
+end

data/spec/dummy/app/controllers/example_prgs_controller.rb

@@ -0,0 +1,74 @@
+# With Post-Redirect-Get pattern on error
+# - > Standard Rails scaffold, with redirect back on error using RailsPrg helpers
+# -> Create -> Post-Redirect-Get in secure environment,
+#              redirected object loaded via filter on :new
+# -> Update -> Post-Redirect-Get in non-secure environment
+#              redirected object loaed via direct call on :edit
+class ExamplePrgsController < ApplicationController
+  before_filter :set_secure_environment, except: [:edit, :update]
+  before_action :set_example_prg, only: [:show, :edit, :update, :destroy]
+
+  # Load any redirected objects with errors for display via filter
+  before_filter :load_redirected_objects!,  only: [:edit]
+
+  # GET /example_prgs
+  def index
+    @example_prgs = ExamplePrg.all
+  end
+
+  # GET /example_prgs/1
+  def show
+  end
+
+  # GET /example_prgs/new
+  def new
+    @example_prg = ExamplePrg.new
+    # Load any redirected objects with errors for display via direct call
+    load_redirected_objects!
+  end
+
+  # GET /example_prgs/1/edit
+  def edit
+  end
+
+  # POST /example_prgs
+  def create
+    @example_prg = ExamplePrg.new(example_prg_params)
+
+    if @example_prg.save
+      redirect_to @example_prg, notice: 'Example prg was successfully created.'
+    else
+      # render action: 'new' # Removed standard rails way
+      set_redirected_object!('@example_prg', @example_prg, example_prg_params)
+      redirect_to new_example_prg_path
+    end
+  end
+
+  # PATCH/PUT /example_prgs/1
+  def update
+    if @example_prg.update(example_prg_params)
+      redirect_to @example_prg, notice: 'Example prg was successfully updated.'
+    else
+      # render action: 'edit' # Removed original Rails render method
+      set_redirected_object!('@example_prg', @example_prg, example_prg_params)
+      redirect_to edit_example_prg_path(@example_prg)
+    end
+  end
+
+  # DELETE /example_prgs/1
+  def destroy
+    @example_prg.destroy
+    redirect_to example_prgs_url, notice: 'Example prg was successfully destroyed.'
+  end
+
+  private
+    # Use callbacks to share common setup or constraints between actions.
+    def set_example_prg
+      @example_prg = ExamplePrg.find(params[:id])
+    end
+
+    # Only allow a trusted parameter "white list" through.
+    def example_prg_params
+      params.require(:example_prg).permit(:subject, :body, :published)
+    end
+end

data/spec/dummy/app/helpers/application_helper.rb

@@ -0,0 +1,2 @@
+module ApplicationHelper
+end

data/spec/dummy/app/helpers/error_duplicators_helper.rb

@@ -0,0 +1,2 @@
+module ErrorDuplicatorsHelper
+end

data/spec/dummy/app/helpers/example_prgs_helper.rb

@@ -0,0 +1,2 @@
+module ExamplePrgsHelper
+end

data/spec/dummy/app/models/error_duplicator.rb

@@ -0,0 +1,3 @@
+class ErrorDuplicator < ActiveRecord::Base
+  validates :subject, uniqueness: true, presence: true
+end

data/spec/dummy/app/models/example_prg.rb

@@ -0,0 +1,3 @@
+class ExamplePrg < ActiveRecord::Base
+  validates :subject, uniqueness: true, presence: true
+end

data/spec/dummy/app/views/error_duplicators/_form.html.erb

@@ -0,0 +1,29 @@
+<%= form_for(@error_duplicator) do |f| %>
+  <% if @error_duplicator.errors.any? %>
+    <div id="error_explanation">
+      <h2><%= pluralize(@error_duplicator.errors.count, "error") %> prohibited this error_duplicator from being saved:</h2>
+
+      <ul>
+      <% @error_duplicator.errors.full_messages.each do |msg| %>
+        <li><%= msg %></li>
+      <% end %>
+      </ul>
+    </div>
+  <% end %>
+
+  <div class="field">
+    <%= f.label :subject %><br>
+    <%= f.text_area :subject %>
+  </div>
+  <div class="field">
+    <%= f.label :body %><br>
+    <%= f.text_area :body %>
+  </div>
+  <div class="field">
+    <%= f.label :published %><br>
+    <%= f.check_box :published %>
+  </div>
+  <div class="actions">
+    <%= f.submit %>
+  </div>
+<% end %>

data/spec/dummy/app/views/error_duplicators/edit.html.erb

@@ -0,0 +1,6 @@
+<h1>Editing error_duplicator</h1>
+
+<%= render 'form' %>
+
+<%= link_to 'Show', @error_duplicator %> |
+<%= link_to 'Back', error_duplicators_path %>

data/spec/dummy/app/views/error_duplicators/index.html.erb

@@ -0,0 +1,31 @@
+<h1>Listing error_duplicators</h1>
+
+<table>
+  <thead>
+    <tr>
+      <th>Subject</th>
+      <th>Body</th>
+      <th>Published</th>
+      <th></th>
+      <th></th>
+      <th></th>
+    </tr>
+  </thead>
+
+  <tbody>
+    <% @error_duplicators.each do |error_duplicator| %>
+      <tr>
+        <td><%= error_duplicator.subject %></td>
+        <td><%= error_duplicator.body %></td>
+        <td><%= error_duplicator.published %></td>
+        <td><%= link_to 'Show', error_duplicator %></td>
+        <td><%= link_to 'Edit', edit_error_duplicator_path(error_duplicator) %></td>
+        <td><%= link_to 'Destroy', error_duplicator, method: :delete, data: { confirm: 'Are you sure?' } %></td>
+      </tr>
+    <% end %>
+  </tbody>
+</table>
+
+<br>
+
+<%= link_to 'New Error duplicator', new_error_duplicator_path %>

data/spec/dummy/app/views/error_duplicators/new.html.erb

@@ -0,0 +1,5 @@
+<h1>New error_duplicator</h1>
+
+<%= render 'form' %>
+
+<%= link_to 'Back', error_duplicators_path %>

data/spec/dummy/app/views/error_duplicators/show.html.erb

@@ -0,0 +1,19 @@
+<p id="notice"><%= notice %></p>
+
+<p>
+  <strong>Subject:</strong>
+  <%= @error_duplicator.subject %>
+</p>
+
+<p>
+  <strong>Body:</strong>
+  <%= @error_duplicator.body %>
+</p>
+
+<p>
+  <strong>Published:</strong>
+  <%= @error_duplicator.published %>
+</p>
+
+<%= link_to 'Edit', edit_error_duplicator_path(@error_duplicator) %> |
+<%= link_to 'Back', error_duplicators_path %>

data/spec/dummy/app/views/example_prgs/_form.html.erb

@@ -0,0 +1,29 @@
+<%= form_for(@example_prg) do |f| %>
+  <% if @example_prg.errors.any? %>
+    <div id="error_explanation">
+      <h2><%= pluralize(@example_prg.errors.count, "error") %> prohibited this example_prg from being saved:</h2>
+
+      <ul>
+      <% @example_prg.errors.full_messages.each do |msg| %>
+        <li><%= msg %></li>
+      <% end %>
+      </ul>
+    </div>
+  <% end %>
+
+  <div class="field">
+    <%= f.label :subject %><br>
+    <%= f.text_area :subject %>
+  </div>
+  <div class="field">
+    <%= f.label :body %><br>
+    <%= f.text_area :body %>
+  </div>
+  <div class="field">
+    <%= f.label :published %><br>
+    <%= f.check_box :published %>
+  </div>
+  <div class="actions">
+    <%= f.submit %>
+  </div>
+<% end %>

data/spec/dummy/app/views/example_prgs/edit.html.erb

@@ -0,0 +1,6 @@
+<h1>Editing example_prg</h1>
+
+<%= render 'form' %>
+
+<%= link_to 'Show', @example_prg %> |
+<%= link_to 'Back', example_prgs_path %>

data/spec/dummy/app/views/example_prgs/index.html.erb

@@ -0,0 +1,31 @@
+<h1>Listing example_prgs</h1>
+
+<table>
+  <thead>
+    <tr>
+      <th>Subject</th>
+      <th>Body</th>
+      <th>Published</th>
+      <th></th>
+      <th></th>
+      <th></th>
+    </tr>
+  </thead>
+
+  <tbody>
+    <% @example_prgs.each do |example_prg| %>
+      <tr>
+        <td><%= example_prg.subject %></td>
+        <td><%= example_prg.body %></td>
+        <td><%= example_prg.published %></td>
+        <td><%= link_to 'Show', example_prg %></td>
+        <td><%= link_to 'Edit', edit_example_prg_path(example_prg) %></td>
+        <td><%= link_to 'Destroy', example_prg, method: :delete, data: { confirm: 'Are you sure?' } %></td>
+      </tr>
+    <% end %>
+  </tbody>
+</table>
+
+<br>
+
+<%= link_to 'New Example prg', new_example_prg_path %>