sprokovuln 0.2.0

data/vendor/ruby/gems/rack-2.0.5/test/spec_body_proxy.rb

@@ -0,0 +1,85 @@
+require 'minitest/autorun'
+require 'rack/body_proxy'
+require 'stringio'
+
+describe Rack::BodyProxy do
+  it 'call each on the wrapped body' do
+    called = false
+    proxy  = Rack::BodyProxy.new(['foo']) { }
+    proxy.each do |str|
+      called = true
+      str.must_equal 'foo'
+    end
+    called.must_equal true
+  end
+
+  it 'call close on the wrapped body' do
+    body  = StringIO.new
+    proxy = Rack::BodyProxy.new(body) { }
+    proxy.close
+    body.must_be :closed?
+  end
+
+  it 'only call close on the wrapped body if it responds to close' do
+    body  = []
+    proxy = Rack::BodyProxy.new(body) { }
+    proxy.close.must_be_nil
+  end
+
+  it 'call the passed block on close' do
+    called = false
+    proxy  = Rack::BodyProxy.new([]) { called = true }
+    called.must_equal false
+    proxy.close
+    called.must_equal true
+  end
+
+  it 'call the passed block on close even if there is an exception' do
+    object = Object.new
+    def object.close() raise "No!" end
+    called = false
+
+    begin
+      proxy  = Rack::BodyProxy.new(object) { called = true }
+      called.must_equal false
+      proxy.close
+    rescue RuntimeError => e
+    end
+
+    raise "Expected exception to have been raised" unless e
+    called.must_equal true
+  end
+
+  it 'allow multiple arguments in respond_to?' do
+    body  = []
+    proxy = Rack::BodyProxy.new(body) { }
+    proxy.respond_to?(:foo, false).must_equal false
+  end
+
+  it 'not respond to :to_ary' do
+    body = Object.new.tap { |o| def o.to_ary() end }
+    body.respond_to?(:to_ary).must_equal true
+
+    proxy = Rack::BodyProxy.new(body) { }
+    proxy.respond_to?(:to_ary).must_equal false
+    proxy.respond_to?("to_ary").must_equal false
+  end
+
+  it 'not close more than one time' do
+    count = 0
+    proxy = Rack::BodyProxy.new([]) { count += 1; raise "Block invoked more than 1 time!" if count > 1 }
+    2.times { proxy.close }
+    count.must_equal 1
+  end
+
+  it 'be closed when the callback is triggered' do
+    closed = false
+    proxy = Rack::BodyProxy.new([]) { closed = proxy.closed? }
+    proxy.close
+    closed.must_equal true
+  end
+
+  it 'provide an #each method' do
+    Rack::BodyProxy.method_defined?(:each).must_equal true
+  end
+end

data/vendor/ruby/gems/rack-2.0.5/test/spec_builder.rb

@@ -0,0 +1,233 @@
+require 'minitest/autorun'
+require 'rack/builder'
+require 'rack/lint'
+require 'rack/mock'
+require 'rack/show_exceptions'
+require 'rack/urlmap'
+
+class NothingMiddleware
+  def initialize(app)
+    @app = app
+  end
+  def call(env)
+    @@env = env
+    response = @app.call(env)
+    response
+  end
+  def self.env
+    @@env
+  end
+end
+
+describe Rack::Builder do
+  def builder(&block)
+    Rack::Lint.new Rack::Builder.new(&block)
+  end
+
+  def builder_to_app(&block)
+    Rack::Lint.new Rack::Builder.new(&block).to_app
+  end
+
+  it "supports mapping" do
+    app = builder_to_app do
+      map '/' do |outer_env|
+        run lambda { |inner_env| [200, {"Content-Type" => "text/plain"}, ['root']] }
+      end
+      map '/sub' do
+        run lambda { |inner_env| [200, {"Content-Type" => "text/plain"}, ['sub']] }
+      end
+    end
+    Rack::MockRequest.new(app).get("/").body.to_s.must_equal 'root'
+    Rack::MockRequest.new(app).get("/sub").body.to_s.must_equal 'sub'
+  end
+
+  it "doesn't dupe env even when mapping" do
+    app = builder_to_app do
+      use NothingMiddleware
+      map '/' do |outer_env|
+        run lambda { |inner_env|
+          inner_env['new_key'] = 'new_value'
+          [200, {"Content-Type" => "text/plain"}, ['root']]
+        }
+      end
+    end
+    Rack::MockRequest.new(app).get("/").body.to_s.must_equal 'root'
+    NothingMiddleware.env['new_key'].must_equal 'new_value'
+  end
+
+  it "chains apps by default" do
+    app = builder_to_app do
+      use Rack::ShowExceptions
+      run lambda { |env| raise "bzzzt" }
+    end
+
+    Rack::MockRequest.new(app).get("/").must_be :server_error?
+    Rack::MockRequest.new(app).get("/").must_be :server_error?
+    Rack::MockRequest.new(app).get("/").must_be :server_error?
+  end
+
+  it "has implicit #to_app" do
+    app = builder do
+      use Rack::ShowExceptions
+      run lambda { |env| raise "bzzzt" }
+    end
+
+    Rack::MockRequest.new(app).get("/").must_be :server_error?
+    Rack::MockRequest.new(app).get("/").must_be :server_error?
+    Rack::MockRequest.new(app).get("/").must_be :server_error?
+  end
+
+  it "supports blocks on use" do
+    app = builder do
+      use Rack::ShowExceptions
+      use Rack::Auth::Basic do |username, password|
+        'secret' == password
+      end
+
+      run lambda { |env| [200, {"Content-Type" => "text/plain"}, ['Hi Boss']] }
+    end
+
+    response = Rack::MockRequest.new(app).get("/")
+    response.must_be :client_error?
+    response.status.must_equal 401
+
+    # with auth...
+    response = Rack::MockRequest.new(app).get("/",
+        'HTTP_AUTHORIZATION' => 'Basic ' + ["joe:secret"].pack("m*"))
+    response.status.must_equal 200
+    response.body.to_s.must_equal 'Hi Boss'
+  end
+
+  it "has explicit #to_app" do
+    app = builder do
+      use Rack::ShowExceptions
+      run lambda { |env| raise "bzzzt" }
+    end
+
+    Rack::MockRequest.new(app).get("/").must_be :server_error?
+    Rack::MockRequest.new(app).get("/").must_be :server_error?
+    Rack::MockRequest.new(app).get("/").must_be :server_error?
+  end
+
+  it "can mix map and run for endpoints" do
+    app = builder do
+      map '/sub' do
+        run lambda { |inner_env| [200, {"Content-Type" => "text/plain"}, ['sub']] }
+      end
+      run lambda { |inner_env| [200, {"Content-Type" => "text/plain"}, ['root']] }
+    end
+
+    Rack::MockRequest.new(app).get("/").body.to_s.must_equal 'root'
+    Rack::MockRequest.new(app).get("/sub").body.to_s.must_equal 'sub'
+  end
+
+  it "accepts middleware-only map blocks" do
+    app = builder do
+      map('/foo') { use Rack::ShowExceptions }
+      run lambda { |env| raise "bzzzt" }
+    end
+
+    proc { Rack::MockRequest.new(app).get("/") }.must_raise(RuntimeError)
+    Rack::MockRequest.new(app).get("/foo").must_be :server_error?
+  end
+
+  it "yields the generated app to a block for warmup" do
+    warmed_up_app = nil
+
+    app = Rack::Builder.new do
+      warmup { |a| warmed_up_app = a }
+      run lambda { |env| [200, {}, []] }
+    end.to_app
+
+    warmed_up_app.must_equal app
+  end
+
+  it "initialize apps once" do
+    app = builder do
+      class AppClass
+        def initialize
+          @called = 0
+        end
+        def call(env)
+          raise "bzzzt"  if @called > 0
+        @called += 1
+          [200, {'Content-Type' => 'text/plain'}, ['OK']]
+        end
+      end
+
+      use Rack::ShowExceptions
+      run AppClass.new
+    end
+
+    Rack::MockRequest.new(app).get("/").status.must_equal 200
+    Rack::MockRequest.new(app).get("/").must_be :server_error?
+  end
+
+  it "allows use after run" do
+    app = builder do
+      run lambda { |env| raise "bzzzt" }
+      use Rack::ShowExceptions
+    end
+
+    Rack::MockRequest.new(app).get("/").must_be :server_error?
+    Rack::MockRequest.new(app).get("/").must_be :server_error?
+    Rack::MockRequest.new(app).get("/").must_be :server_error?
+  end
+
+  it 'complains about a missing run' do
+    proc do
+      Rack::Lint.new Rack::Builder.app { use Rack::ShowExceptions }
+    end.must_raise(RuntimeError)
+  end
+
+  describe "parse_file" do
+    def config_file(name)
+      File.join(File.dirname(__FILE__), 'builder', name)
+    end
+
+    it "parses commented options" do
+      app, options = Rack::Builder.parse_file config_file('options.ru')
+      options[:debug].must_equal true
+      options[:environment].must_equal 'test'
+      options[:Port].must_equal '2929'
+      Rack::MockRequest.new(app).get("/").body.to_s.must_equal 'OK'
+    end
+
+    it "removes __END__ before evaluating app" do
+      app, _ = Rack::Builder.parse_file config_file('end.ru')
+      Rack::MockRequest.new(app).get("/").body.to_s.must_equal 'OK'
+    end
+
+    it "supports multi-line comments" do
+      proc, env = Rack::Builder.parse_file(config_file('comment.ru'))
+      proc.must_be_kind_of Proc
+      env.must_equal({})
+    end
+
+    it "requires anything not ending in .ru" do
+      $: << File.dirname(__FILE__)
+      app, * = Rack::Builder.parse_file 'builder/anything'
+      Rack::MockRequest.new(app).get("/").body.to_s.must_equal 'OK'
+      $:.pop
+    end
+
+    it 'requires an_underscore_app not ending in .ru' do
+      $: << File.dirname(__FILE__)
+      app, * = Rack::Builder.parse_file 'builder/an_underscore_app'
+      Rack::MockRequest.new(app).get('/').body.to_s.must_equal 'OK'
+      $:.pop
+    end
+
+    it "sets __LINE__ correctly" do
+      app, _ = Rack::Builder.parse_file config_file('line.ru')
+      Rack::MockRequest.new(app).get("/").body.to_s.must_equal '1'
+    end
+  end
+
+  describe 'new_from_string' do
+    it "builds a rack app from string" do
+      app, = Rack::Builder.new_from_string "run lambda{|env| [200, {'Content-Type' => 'text/plane'}, ['OK']] }"
+      Rack::MockRequest.new(app).get("/").body.to_s.must_equal 'OK'
+    end
+  end
+end

data/vendor/ruby/gems/rack-2.0.5/test/spec_cascade.rb

@@ -0,0 +1,63 @@
+require 'minitest/autorun'
+require 'rack'
+require 'rack/cascade'
+require 'rack/file'
+require 'rack/lint'
+require 'rack/urlmap'
+require 'rack/mock'
+
+describe Rack::Cascade do
+  def cascade(*args)
+    Rack::Lint.new Rack::Cascade.new(*args)
+  end
+
+  docroot = File.expand_path(File.dirname(__FILE__))
+  app1 = Rack::File.new(docroot)
+
+  app2 = Rack::URLMap.new("/crash" => lambda { |env| raise "boom" })
+
+  app3 = Rack::URLMap.new("/foo" => lambda { |env|
+                            [200, { "Content-Type" => "text/plain"}, [""]]})
+
+  it "dispatch onward on 404 and 405 by default" do
+    cascade = cascade([app1, app2, app3])
+    Rack::MockRequest.new(cascade).get("/cgi/test").must_be :ok?
+    Rack::MockRequest.new(cascade).get("/foo").must_be :ok?
+    Rack::MockRequest.new(cascade).get("/toobad").must_be :not_found?
+    Rack::MockRequest.new(cascade).get("/cgi/../..").must_be :client_error?
+
+    # Put is not allowed by Rack::File so it'll 405.
+    Rack::MockRequest.new(cascade).put("/foo").must_be :ok?
+  end
+
+  it "dispatch onward on whatever is passed" do
+    cascade = cascade([app1, app2, app3], [404, 403])
+    Rack::MockRequest.new(cascade).get("/cgi/../bla").must_be :not_found?
+  end
+
+  it "return 404 if empty" do
+    Rack::MockRequest.new(cascade([])).get('/').must_be :not_found?
+  end
+
+  it "append new app" do
+    cascade = Rack::Cascade.new([], [404, 403])
+    Rack::MockRequest.new(cascade).get('/').must_be :not_found?
+    cascade << app2
+    Rack::MockRequest.new(cascade).get('/cgi/test').must_be :not_found?
+    Rack::MockRequest.new(cascade).get('/cgi/../bla').must_be :not_found?
+    cascade << app1
+    Rack::MockRequest.new(cascade).get('/cgi/test').must_be :ok?
+    Rack::MockRequest.new(cascade).get('/cgi/../..').must_be :client_error?
+    Rack::MockRequest.new(cascade).get('/foo').must_be :not_found?
+    cascade << app3
+    Rack::MockRequest.new(cascade).get('/foo').must_be :ok?
+  end
+
+  it "close the body on cascade" do
+    body = StringIO.new
+    closer = lambda { |env| [404, {}, body] }
+    cascade = Rack::Cascade.new([closer, app3], [404])
+    Rack::MockRequest.new(cascade).get("/foo").must_be :ok?
+    body.must_be :closed?
+  end
+end

data/vendor/ruby/gems/rack-2.0.5/test/spec_cgi.rb

@@ -0,0 +1,84 @@
+require 'helper'
+
+if defined? LIGHTTPD_PID
+
+require File.expand_path('../testrequest', __FILE__)
+require 'rack/handler/cgi'
+
+describe Rack::Handler::CGI do
+  include TestRequest::Helpers
+
+  before do
+    @host = '127.0.0.1'
+    @port = 9203
+  end
+
+  if `which lighttpd` && !$?.success?
+    raise "lighttpd not found"
+  end
+
+  it "respond" do
+    sleep 1
+    GET("/test")
+    response.wont_be :nil?
+  end
+
+  it "be a lighttpd" do
+    GET("/test")
+    status.must_equal 200
+    response["SERVER_SOFTWARE"].must_match(/lighttpd/)
+    response["HTTP_VERSION"].must_equal "HTTP/1.1"
+    response["SERVER_PROTOCOL"].must_equal "HTTP/1.1"
+    response["SERVER_PORT"].must_equal @port.to_s
+    response["SERVER_NAME"].must_equal @host
+  end
+
+  it "have rack headers" do
+    GET("/test")
+    response["rack.version"].must_equal [1,3]
+    assert_equal false, response["rack.multithread"]
+    assert_equal true, response["rack.multiprocess"]
+    assert_equal true, response["rack.run_once"]
+  end
+
+  it "have CGI headers on GET" do
+    GET("/test")
+    response["REQUEST_METHOD"].must_equal "GET"
+    response["SCRIPT_NAME"].must_equal "/test"
+    response["REQUEST_PATH"].must_equal "/"
+    response["PATH_INFO"].must_be_nil
+    response["QUERY_STRING"].must_equal ""
+    response["test.postdata"].must_equal ""
+
+    GET("/test/foo?quux=1")
+    response["REQUEST_METHOD"].must_equal "GET"
+    response["SCRIPT_NAME"].must_equal "/test"
+    response["REQUEST_PATH"].must_equal "/"
+    response["PATH_INFO"].must_equal "/foo"
+    response["QUERY_STRING"].must_equal "quux=1"
+  end
+
+  it "have CGI headers on POST" do
+    POST("/test", {"rack-form-data" => "23"}, {'X-test-header' => '42'})
+    status.must_equal 200
+    response["REQUEST_METHOD"].must_equal "POST"
+    response["SCRIPT_NAME"].must_equal "/test"
+    response["REQUEST_PATH"].must_equal "/"
+    response["QUERY_STRING"].must_equal ""
+    response["HTTP_X_TEST_HEADER"].must_equal "42"
+    response["test.postdata"].must_equal "rack-form-data=23"
+  end
+
+  it "support HTTP auth" do
+    GET("/test", {:user => "ruth", :passwd => "secret"})
+    response["HTTP_AUTHORIZATION"].must_equal "Basic cnV0aDpzZWNyZXQ="
+  end
+
+  it "set status" do
+    GET("/test?secret")
+    status.must_equal 403
+    response["rack.url_scheme"].must_equal "http"
+  end
+end
+
+end # if defined? LIGHTTPD_PID

data/vendor/ruby/gems/rack-2.0.5/test/spec_chunked.rb

@@ -0,0 +1,103 @@
+require 'minitest/autorun'
+require 'rack/chunked'
+require 'rack/lint'
+require 'rack/mock'
+
+describe Rack::Chunked do
+  def chunked(app)
+    proc do |env|
+      app = Rack::Chunked.new(app)
+      response = Rack::Lint.new(app).call(env)
+      # we want to use body like an array, but it only has #each
+      response[2] = response[2].to_enum.to_a
+      response
+    end
+  end
+
+  before do
+    @env = Rack::MockRequest.
+      env_for('/', 'HTTP_VERSION' => '1.1', 'REQUEST_METHOD' => 'GET')
+  end
+
+  it 'chunk responses with no Content-Length' do
+    app = lambda { |env| [200, {"Content-Type" => "text/plain"}, ['Hello', ' ', 'World!']] }
+    response = Rack::MockResponse.new(*chunked(app).call(@env))
+    response.headers.wont_include 'Content-Length'
+    response.headers['Transfer-Encoding'].must_equal 'chunked'
+    response.body.must_equal "5\r\nHello\r\n1\r\n \r\n6\r\nWorld!\r\n0\r\n\r\n"
+  end
+
+  it 'chunks empty bodies properly' do
+    app = lambda { |env| [200, {"Content-Type" => "text/plain"}, []] }
+    response = Rack::MockResponse.new(*chunked(app).call(@env))
+    response.headers.wont_include 'Content-Length'
+    response.headers['Transfer-Encoding'].must_equal 'chunked'
+    response.body.must_equal "0\r\n\r\n"
+  end
+
+  it 'chunks encoded bodies properly' do
+    body = ["\uFFFEHello", " ", "World"].map {|t| t.encode("UTF-16LE") }
+    app  = lambda { |env| [200, {"Content-Type" => "text/plain"}, body] }
+    response = Rack::MockResponse.new(*chunked(app).call(@env))
+    response.headers.wont_include 'Content-Length'
+    response.headers['Transfer-Encoding'].must_equal 'chunked'
+    response.body.encoding.to_s.must_equal "ASCII-8BIT"
+    response.body.must_equal "c\r\n\xFE\xFFH\x00e\x00l\x00l\x00o\x00\r\n2\r\n \x00\r\na\r\nW\x00o\x00r\x00l\x00d\x00\r\n0\r\n\r\n".force_encoding("BINARY")
+    response.body.must_equal "c\r\n\xFE\xFFH\x00e\x00l\x00l\x00o\x00\r\n2\r\n \x00\r\na\r\nW\x00o\x00r\x00l\x00d\x00\r\n0\r\n\r\n".force_encoding(Encoding::BINARY)
+  end
+
+  it 'not modify response when Content-Length header present' do
+    app = lambda { |env|
+      [200, {"Content-Type" => "text/plain", 'Content-Length'=>'12'}, ['Hello', ' ', 'World!']]
+    }
+    status, headers, body = chunked(app).call(@env)
+    status.must_equal 200
+    headers.wont_include 'Transfer-Encoding'
+    headers.must_include 'Content-Length'
+    body.join.must_equal 'Hello World!'
+  end
+
+  it 'not modify response when client is HTTP/1.0' do
+    app = lambda { |env| [200, {"Content-Type" => "text/plain"}, ['Hello', ' ', 'World!']] }
+    @env['HTTP_VERSION'] = 'HTTP/1.0'
+    status, headers, body = chunked(app).call(@env)
+    status.must_equal 200
+    headers.wont_include 'Transfer-Encoding'
+    body.join.must_equal 'Hello World!'
+  end
+
+  it 'not modify response when client is ancient, pre-HTTP/1.0' do
+    app = lambda { |env| [200, {"Content-Type" => "text/plain"}, ['Hello', ' ', 'World!']] }
+    check = lambda do
+      status, headers, body = chunked(app).call(@env.dup)
+      status.must_equal 200
+      headers.wont_include 'Transfer-Encoding'
+      body.join.must_equal 'Hello World!'
+    end
+
+    @env.delete('HTTP_VERSION') # unicorn will do this on pre-HTTP/1.0 requests
+    check.call
+
+    @env['HTTP_VERSION'] = 'HTTP/0.9' # not sure if this happens in practice
+    check.call
+  end
+
+  it 'not modify response when Transfer-Encoding header already present' do
+    app = lambda { |env|
+      [200, {"Content-Type" => "text/plain", 'Transfer-Encoding' => 'identity'}, ['Hello', ' ', 'World!']]
+    }
+    status, headers, body = chunked(app).call(@env)
+    status.must_equal 200
+    headers['Transfer-Encoding'].must_equal 'identity'
+    body.join.must_equal 'Hello World!'
+  end
+
+  [100, 204, 304].each do |status_code|
+    it "not modify response when status code is #{status_code}" do
+      app = lambda { |env| [status_code, {}, []] }
+      status, headers, _ = chunked(app).call(@env)
+      status.must_equal status_code
+      headers.wont_include 'Transfer-Encoding'
+    end
+  end
+end

data/vendor/ruby/gems/rack-2.0.5/test/spec_common_logger.rb

@@ -0,0 +1,95 @@
+require 'minitest/autorun'
+require 'rack/common_logger'
+require 'rack/lint'
+require 'rack/mock'
+
+require 'logger'
+
+describe Rack::CommonLogger do
+  obj = 'foobar'
+  length = obj.size
+
+  app = Rack::Lint.new lambda { |env|
+    [200,
+     {"Content-Type" => "text/html", "Content-Length" => length.to_s},
+     [obj]]}
+  app_without_length = Rack::Lint.new lambda { |env|
+    [200,
+     {"Content-Type" => "text/html"},
+     []]}
+  app_with_zero_length = Rack::Lint.new lambda { |env|
+    [200,
+     {"Content-Type" => "text/html", "Content-Length" => "0"},
+     []]}
+
+  it "log to rack.errors by default" do
+    res = Rack::MockRequest.new(Rack::CommonLogger.new(app)).get("/")
+
+    res.errors.wont_be :empty?
+    res.errors.must_match(/"GET \/ " 200 #{length} /)
+  end
+
+  it "log to anything with +write+" do
+    log = StringIO.new
+    Rack::MockRequest.new(Rack::CommonLogger.new(app, log)).get("/")
+
+    log.string.must_match(/"GET \/ " 200 #{length} /)
+  end
+
+  it "work with standartd library logger" do
+    logdev = StringIO.new
+    log = Logger.new(logdev)
+    Rack::MockRequest.new(Rack::CommonLogger.new(app, log)).get("/")
+
+    logdev.string.must_match(/"GET \/ " 200 #{length} /)
+  end
+
+  it "log - content length if header is missing" do
+    res = Rack::MockRequest.new(Rack::CommonLogger.new(app_without_length)).get("/")
+
+    res.errors.wont_be :empty?
+    res.errors.must_match(/"GET \/ " 200 - /)
+  end
+
+  it "log - content length if header is zero" do
+    res = Rack::MockRequest.new(Rack::CommonLogger.new(app_with_zero_length)).get("/")
+
+    res.errors.wont_be :empty?
+    res.errors.must_match(/"GET \/ " 200 - /)
+  end
+
+  def with_mock_time(t = 0)
+    mc = class << Time; self; end
+    mc.send :alias_method, :old_now, :now
+    mc.send :define_method, :now do
+      at(t)
+    end
+    yield
+  ensure
+    mc.send :undef_method, :now
+    mc.send :alias_method, :now, :old_now
+  end
+
+  it "log in common log format" do
+    log = StringIO.new
+    with_mock_time do
+      Rack::MockRequest.new(Rack::CommonLogger.new(app, log)).get("/")
+    end
+
+    md = /- - - \[([^\]]+)\] "(\w+) \/ " (\d{3}) \d+ ([\d\.]+)/.match(log.string)
+    md.wont_equal nil
+    time, method, status, duration = *md.captures
+    time.must_equal Time.at(0).strftime("%d/%b/%Y:%H:%M:%S %z")
+    method.must_equal "GET"
+    status.must_equal "200"
+    (0..1).must_include duration.to_f
+  end
+
+  def length
+    123
+  end
+
+  def self.obj
+    "hello world"
+  end
+end