site-inspector 0.1.2 → 1.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 7ba79a277c6611844c2628263b41f8953274bd7a
-  data.tar.gz: bf7e16d237c56018c62977ea0c4aed2df751b83b
+  metadata.gz: 4942c0885c9e08824ecde08d6b29864ef028f94f
+  data.tar.gz: 95b45f2c948946eca91f1d37c46b9c868afb6aa3
 SHA512:
-  metadata.gz: ff18940993447863687a4c0fb5815f753f8cc6d176df67d005f46d30758cfac4e446c099e058544faf6e792a1c378f9c36526e66212c97910039f109a022b9b2
-  data.tar.gz: f756567dc72bff09822b3d9da45d85d9143ff8eeb5bc86a60ca091da29a286a4ce6d06c35154bfc02010154da0950d5255dc9865917abcbdd6a00847639e83ee
+  metadata.gz: 5a953be1f1a17923acfd4b1565ca3ceca28a0b06dc64bf4e9caa9308865496134de31fcde53b1562263dd77ebf7c3aabba3c421ee965040f08d145e2a344093e
+  data.tar.gz: 7e9af2ba7bc62fb0bc4895acb5d99c500673cbb664ba457cd7f00d9a5c90102fbb16bba960fff7d3df6ffa62b0c61312f418058e008e96df8bbc77ae6b25418a

data/bin/site-inspector

@@ -0,0 +1,15 @@
+#!/usr/bin/env ruby
+
+require_relative "../lib/site-inspector"
+require "json"
+
+domain = ARGV[0]
+
+if domain.to_s.empty?
+  puts "Usage: site-inspector [DOMAIN]"
+  exit 1
+end
+
+details = SiteInspector.new(domain).to_hash
+
+puts JSON.pretty_generate(details)

data/lib/site-inspector/dns.rb

@@ -15,7 +15,7 @@ class SiteInspector
   end
 
   def dnssec?
-    @dnssec ||= dns.any? { |record| record.type == "DNSKEY" }
+    @dnssec ||= query("DNSKEY").count != 0
   end
 
   def ipv6?

data/lib/site-inspector/headers.rb

@@ -1,8 +1,9 @@
 class SiteInspector
 
-  # the ? versions could maybe just be dropped
+  # cookies can have multiple set-cookie headers, so this detects
+  # whether cookies are set, but not all their values.
   def has_cookies?
-    !!has_cookies
+    !!headers["set-cookie"]
   end
 
   def strict_transport_security?
@@ -19,28 +20,24 @@ class SiteInspector
 
   # return the found header value
 
-  def has_cookies
-    header_from("Set-Cookie")
-  end
-
   def strict_transport_security
-    header_from("Strict-Transport-Security")
+    headers["strict-transport-security"]
   end
 
   def content_security_policy
-    header_from("Content-Security-Policy")
+    headers["content-security-policy"]
   end
 
   def click_jacking_protection
-    header_from("X-Frame-Options")
+    headers["x-frame-options"]
   end
 
   def server
-    header_from("Server")
+    headers["server"]
   end
 
   def xss_protection
-    header_from("X-XSS-Protection")
+    headers["x-xss-protection"]
   end
 
   # more specific checks than presence of headers
@@ -49,19 +46,14 @@ class SiteInspector
   end
 
   def secure_cookies?
-    return nil if !response || !has_cookies?
-    cookie = header_from("Set-Cookie")
+    return nil if !has_cookies?
+    cookie = headers["set-cookie"]
     cookie = cookie.first if cookie.is_a?(Array)
-    marked_secure = !!(cookie.downcase =~ /secure/)
-    marked_http_only = !!(cookie.downcase =~ /httponly/)
-    marked_secure and marked_http_only
+    !!(cookie =~ /(; secure.*; httponly|; httponly.*; secure)/i)
   end
 
-  # helper function: case-insensitive sweep for header, return value
-  def header_from(header)
-    return nil unless response
-
-    the_header = response.headers.keys.find {|h| h.downcase =~ /^#{header.downcase}/}
-    response.headers[the_header]
+  # Returns an array of hashes of downcased key/value header pairs (or nil)
+  def headers
+    @headers ||= Hash[response.headers.map{ |k,v| [k.downcase,v] }] if response
   end
 end

data/lib/site-inspector.rb

@@ -124,10 +124,10 @@ class SiteInspector
   end
 
   def to_json
-    as_json.to_json
+    to_hash.to_json
   end
 
-  def as_json
+  def to_hash
     {
       :domain => domain.to_s,
       :uri => uri.to_s,

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: site-inspector
 version: !ruby/object:Gem::Version
-  version: 0.1.2
+  version: 1.0.0
 platform: ruby
 authors:
 - Ben Balter
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-12-03 00:00:00.000000000 Z
+date: 2015-02-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: nokogiri
@@ -222,11 +222,13 @@ dependencies:
         version: '1.0'
 description: Returns information about a domain's technology and capabilities
 email: ben@balter.com
-executables: []
+executables:
+- site-inspector
 extensions: []
 extra_rdoc_files: []
 files:
 - LICENSE
+- bin/site-inspector
 - lib/data/cdn.yml
 - lib/data/cloud.yml
 - lib/site-inspector.rb