RubyGems - sprokovuln - Versions diffs - 0.2.0 - Mend

sprokovuln 0.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (578) hide show

data/vendor/ruby/gems/rack-2.0.5/test/spec_directory.rb ADDED Viewed

@@ -0,0 +1,148 @@
+require 'minitest/autorun'
+require 'rack/directory'
+require 'rack/lint'
+require 'rack/mock'
+require 'tempfile'
+require 'fileutils'
+describe Rack::Directory do
+  DOCROOT = File.expand_path(File.dirname(__FILE__)) unless defined? DOCROOT
+  FILE_CATCH = proc{|env| [200, {'Content-Type'=>'text/plain', "Content-Length" => "7"}, ['passed!']] }
+  attr_reader :app
+  def setup
+    @app = Rack::Lint.new(Rack::Directory.new(DOCROOT, FILE_CATCH))
+  end
+  it 'serves directories with + in the name' do
+    Dir.mktmpdir do |dir|
+      plus_dir = "foo+bar"
+      full_dir = File.join(dir, plus_dir)
+      FileUtils.mkdir full_dir
+      FileUtils.touch File.join(full_dir, "omg.txt")
+      app = Rack::Directory.new(dir, FILE_CATCH)
+      env = Rack::MockRequest.env_for("/#{plus_dir}/")
+      status,_,body = app.call env
+      assert_equal 200, status
+      str = ''
+      body.each { |x| str << x }
+      assert_match "foo+bar", str
+    end
+  end
+  it "serve directory indices" do
+    res = Rack::MockRequest.new(Rack::Lint.new(app)).
+      get("/cgi/")
+    res.must_be :ok?
+    assert_match(res, /<html><head>/)
+  end
+  it "pass to app if file found" do
+    res = Rack::MockRequest.new(Rack::Lint.new(app)).
+      get("/cgi/test")
+    res.must_be :ok?
+    assert_match(res, /passed!/)
+  end
+  it "serve uri with URL encoded filenames" do
+    res = Rack::MockRequest.new(Rack::Lint.new(app)).
+      get("/%63%67%69/") # "/cgi/test"
+    res.must_be :ok?
+    assert_match(res, /<html><head>/)
+    res = Rack::MockRequest.new(Rack::Lint.new(app)).
+      get("/cgi/%74%65%73%74") # "/cgi/test"
+    res.must_be :ok?
+    assert_match(res, /passed!/)
+  end
+  it "serve uri with URL encoded null byte (%00) in filenames" do
+    res = Rack::MockRequest.new(Rack::Lint.new(app))
+      .get("/cgi/test%00")
+    res.must_be :bad_request?
+  end
+  it "not allow directory traversal" do
+    res = Rack::MockRequest.new(Rack::Lint.new(app)).
+      get("/cgi/../test")
+    res.must_be :forbidden?
+    res = Rack::MockRequest.new(Rack::Lint.new(app)).
+      get("/cgi/%2E%2E/test")
+    res.must_be :forbidden?
+  end
+  it "404 if it can't find the file" do
+    res = Rack::MockRequest.new(Rack::Lint.new(app)).
+      get("/cgi/blubb")
+    res.must_be :not_found?
+  end
+  it "uri escape path parts" do # #265, properly escape file names
+    mr = Rack::MockRequest.new(Rack::Lint.new(app))
+    res = mr.get("/cgi/test%2bdirectory")
+    res.must_be :ok?
+    res.body.must_match(%r[/cgi/test\+directory/test\+file])
+    res = mr.get("/cgi/test%2bdirectory/test%2bfile")
+    res.must_be :ok?
+  end
+  it "correctly escape script name with spaces" do
+    Dir.mktmpdir do |dir|
+      space_dir = "foo bar"
+      full_dir = File.join(dir, space_dir)
+      FileUtils.mkdir full_dir
+      FileUtils.touch File.join(full_dir, "omg omg.txt")
+      app = Rack::Directory.new(dir, FILE_CATCH)
+      env = Rack::MockRequest.env_for(Rack::Utils.escape_path("/#{space_dir}/"))
+      status,_,body = app.call env
+      assert_equal 200, status
+      str = ''
+      body.each { |x| str << x }
+      assert_match "/foo%20bar/omg%20omg.txt", str
+    end
+  end
+  it "correctly escape script name" do
+    _app = app
+    app2 = Rack::Builder.new do
+      map '/script-path' do
+        run _app
+      end
+    end
+    mr = Rack::MockRequest.new(Rack::Lint.new(app2))
+    res = mr.get("/script-path/cgi/test%2bdirectory")
+    res.must_be :ok?
+    res.body.must_match(%r[/script-path/cgi/test\+directory/test\+file])
+    res = mr.get("/script-path/cgi/test+directory/test+file")
+    res.must_be :ok?
+  end
+  it "return error when file not found for head request" do
+    res = Rack::MockRequest.new(Rack::Lint.new(app)).
+      head("/cgi/missing")
+    res.must_be :not_found?
+    res.body.must_be :empty?
+  end
+end

data/vendor/ruby/gems/rack-2.0.5/test/spec_etag.rb ADDED Viewed

@@ -0,0 +1,108 @@
+require 'minitest/autorun'
+require 'rack/etag'
+require 'rack/lint'
+require 'rack/mock'
+require 'time'
+describe Rack::ETag do
+  def etag(app, *args)
+    Rack::Lint.new Rack::ETag.new(app, *args)
+  end
+  def request
+    Rack::MockRequest.env_for
+  end
+  def sendfile_body
+    res = ['Hello World']
+    def res.to_path ; "/tmp/hello.txt" ; end
+    res
+  end
+  it "set ETag if none is set if status is 200" do
+    app = lambda { |env| [200, {'Content-Type' => 'text/plain'}, ["Hello, World!"]] }
+    response = etag(app).call(request)
+    response[1]['ETag'].must_equal "W/\"dffd6021bb2bd5b0af676290809ec3a5\""
+  end
+  it "set ETag if none is set if status is 201" do
+    app = lambda { |env| [201, {'Content-Type' => 'text/plain'}, ["Hello, World!"]] }
+    response = etag(app).call(request)
+    response[1]['ETag'].must_equal "W/\"dffd6021bb2bd5b0af676290809ec3a5\""
+  end
+  it "set Cache-Control to 'max-age=0, private, must-revalidate' (default) if none is set" do
+    app = lambda { |env| [201, {'Content-Type' => 'text/plain'}, ["Hello, World!"]] }
+    response = etag(app).call(request)
+    response[1]['Cache-Control'].must_equal 'max-age=0, private, must-revalidate'
+  end
+  it "set Cache-Control to chosen one if none is set" do
+    app = lambda { |env| [201, {'Content-Type' => 'text/plain'}, ["Hello, World!"]] }
+    response = etag(app, nil, 'public').call(request)
+    response[1]['Cache-Control'].must_equal 'public'
+  end
+  it "set a given Cache-Control even if digest could not be calculated" do
+    app = lambda { |env| [200, {'Content-Type' => 'text/plain'}, []] }
+    response = etag(app, 'no-cache').call(request)
+    response[1]['Cache-Control'].must_equal 'no-cache'
+  end
+  it "not set Cache-Control if it is already set" do
+    app = lambda { |env| [201, {'Content-Type' => 'text/plain', 'Cache-Control' => 'public'}, ["Hello, World!"]] }
+    response = etag(app).call(request)
+    response[1]['Cache-Control'].must_equal 'public'
+  end
+  it "not set Cache-Control if directive isn't present" do
+    app = lambda { |env| [200, {'Content-Type' => 'text/plain'}, ["Hello, World!"]] }
+    response = etag(app, nil, nil).call(request)
+    response[1]['Cache-Control'].must_be_nil
+  end
+  it "not change ETag if it is already set" do
+    app = lambda { |env| [200, {'Content-Type' => 'text/plain', 'ETag' => '"abc"'}, ["Hello, World!"]] }
+    response = etag(app).call(request)
+    response[1]['ETag'].must_equal "\"abc\""
+  end
+  it "not set ETag if body is empty" do
+    app = lambda { |env| [200, {'Content-Type' => 'text/plain', 'Last-Modified' => Time.now.httpdate}, []] }
+    response = etag(app).call(request)
+    response[1]['ETag'].must_be_nil
+  end
+  it "not set ETag if Last-Modified is set" do
+    app = lambda { |env| [200, {'Content-Type' => 'text/plain', 'Last-Modified' => Time.now.httpdate}, ["Hello, World!"]] }
+    response = etag(app).call(request)
+    response[1]['ETag'].must_be_nil
+  end
+  it "not set ETag if a sendfile_body is given" do
+    app = lambda { |env| [200, {'Content-Type' => 'text/plain'}, sendfile_body] }
+    response = etag(app).call(request)
+    response[1]['ETag'].must_be_nil
+  end
+  it "not set ETag if a status is not 200 or 201" do
+    app = lambda { |env| [401, {'Content-Type' => 'text/plain'}, ['Access denied.']] }
+    response = etag(app).call(request)
+    response[1]['ETag'].must_be_nil
+  end
+  it "not set ETag if no-cache is given" do
+    app = lambda { |env| [200, {'Content-Type' => 'text/plain', 'Cache-Control' => 'no-cache, must-revalidate'}, ['Hello, World!']] }
+    response = etag(app).call(request)
+    response[1]['ETag'].must_be_nil
+  end
+  it "close the original body" do
+    body = StringIO.new
+    app = lambda { |env| [200, {}, body] }
+    response = etag(app).call(request)
+    body.wont_be :closed?
+    response[2].close
+    body.must_be :closed?
+  end
+end

data/vendor/ruby/gems/rack-2.0.5/test/spec_events.rb ADDED Viewed

@@ -0,0 +1,133 @@
+require 'helper'
+require 'rack/events'
+module Rack
+  class TestEvents < Rack::TestCase
+    class EventMiddleware
+      attr_reader :events
+      def initialize events
+        @events = events
+      end
+      def on_start req, res
+        events << [self, __method__]
+      end
+      def on_commit req, res
+        events << [self, __method__]
+      end
+      def on_send req, res
+        events << [self, __method__]
+      end
+      def on_finish req, res
+        events << [self, __method__]
+      end
+      def on_error req, res, e
+        events << [self, __method__]
+      end
+    end
+    def test_events_fire
+      events = []
+      ret = [200, {}, []]
+      app = lambda { |env| events << [app, :call]; ret }
+      se = EventMiddleware.new events
+      e = Events.new app, [se]
+      triple = e.call({})
+      response_body = []
+      triple[2].each { |x| response_body << x }
+      triple[2].close
+      triple[2] = response_body
+      assert_equal ret, triple
+      assert_equal [[se, :on_start],
+                    [app, :call],
+                    [se, :on_commit],
+                    [se, :on_send],
+                    [se, :on_finish],
+      ], events
+    end
+    def test_send_and_finish_are_not_run_until_body_is_sent
+      events = []
+      ret = [200, {}, []]
+      app = lambda { |env| events << [app, :call]; ret }
+      se = EventMiddleware.new events
+      e = Events.new app, [se]
+      triple = e.call({})
+      assert_equal [[se, :on_start],
+                    [app, :call],
+                    [se, :on_commit],
+      ], events
+    end
+    def test_send_is_called_on_each
+      events = []
+      ret = [200, {}, []]
+      app = lambda { |env| events << [app, :call]; ret }
+      se = EventMiddleware.new events
+      e = Events.new app, [se]
+      triple = e.call({})
+      triple[2].each { |x| }
+      assert_equal [[se, :on_start],
+                    [app, :call],
+                    [se, :on_commit],
+                    [se, :on_send],
+      ], events
+    end
+    def test_finish_is_called_on_close
+      events = []
+      ret = [200, {}, []]
+      app = lambda { |env| events << [app, :call]; ret }
+      se = EventMiddleware.new events
+      e = Events.new app, [se]
+      triple = e.call({})
+      triple[2].each { |x| }
+      triple[2].close
+      assert_equal [[se, :on_start],
+                    [app, :call],
+                    [se, :on_commit],
+                    [se, :on_send],
+                    [se, :on_finish],
+      ], events
+    end
+    def test_finish_is_called_in_reverse_order
+      events = []
+      ret = [200, {}, []]
+      app = lambda { |env| events << [app, :call]; ret }
+      se1 = EventMiddleware.new events
+      se2 = EventMiddleware.new events
+      se3 = EventMiddleware.new events
+      e = Events.new app, [se1, se2, se3]
+      triple = e.call({})
+      triple[2].each { |x| }
+      triple[2].close
+      groups = events.group_by { |x| x.last }
+      assert_equal groups[:on_start].map(&:first), groups[:on_finish].map(&:first).reverse
+      assert_equal groups[:on_commit].map(&:first), groups[:on_finish].map(&:first)
+      assert_equal groups[:on_send].map(&:first), groups[:on_finish].map(&:first)
+    end
+    def test_finish_is_called_if_there_is_an_exception
+      events = []
+      ret = [200, {}, []]
+      app = lambda { |env| raise }
+      se = EventMiddleware.new events
+      e = Events.new app, [se]
+      assert_raises(RuntimeError) do
+        e.call({})
+      end
+      assert_equal [[se, :on_start],
+                    [se, :on_error],
+                    [se, :on_finish],
+      ], events
+    end
+  end
+end

data/vendor/ruby/gems/rack-2.0.5/test/spec_fastcgi.rb ADDED Viewed

@@ -0,0 +1,85 @@
+require 'helper'
+if defined? LIGHTTPD_PID
+require File.expand_path('../testrequest', __FILE__)
+require 'rack/handler/fastcgi'
+describe Rack::Handler::FastCGI do
+  include TestRequest::Helpers
+  before do
+    @host = '127.0.0.1'
+    @port = 9203
+  end
+  it "respond" do
+    sleep 1
+    GET("/test")
+    response.wont_be :nil?
+  end
+  it "respond via rackup server" do
+    GET("/sample_rackup.ru")
+    status.must_equal 200
+  end
+  it "be a lighttpd" do
+    GET("/test.fcgi")
+    status.must_equal 200
+    response["SERVER_SOFTWARE"].must_match(/lighttpd/)
+    response["HTTP_VERSION"].must_equal "HTTP/1.1"
+    response["SERVER_PROTOCOL"].must_equal "HTTP/1.1"
+    response["SERVER_PORT"].must_equal @port.to_s
+    response["SERVER_NAME"].must_equal @host
+  end
+  it "have rack headers" do
+    GET("/test.fcgi")
+    response["rack.version"].must_equal [1,3]
+    assert_equal false, response["rack.multithread"]
+    assert_equal true, response["rack.multiprocess"]
+    assert_equal false, response["rack.run_once"]
+  end
+  it "have CGI headers on GET" do
+    GET("/test.fcgi")
+    response["REQUEST_METHOD"].must_equal "GET"
+    response["SCRIPT_NAME"].must_equal "/test.fcgi"
+    response["REQUEST_PATH"].must_equal "/"
+    response["PATH_INFO"].must_equal ""
+    response["QUERY_STRING"].must_equal ""
+    response["test.postdata"].must_equal ""
+    GET("/test.fcgi/foo?quux=1")
+    response["REQUEST_METHOD"].must_equal "GET"
+    response["SCRIPT_NAME"].must_equal "/test.fcgi"
+    response["REQUEST_PATH"].must_equal "/"
+    response["PATH_INFO"].must_equal "/foo"
+    response["QUERY_STRING"].must_equal "quux=1"
+  end
+  it "have CGI headers on POST" do
+    POST("/test.fcgi", {"rack-form-data" => "23"}, {'X-test-header' => '42'})
+    status.must_equal 200
+    response["REQUEST_METHOD"].must_equal "POST"
+    response["SCRIPT_NAME"].must_equal "/test.fcgi"
+    response["REQUEST_PATH"].must_equal "/"
+    response["QUERY_STRING"].must_equal ""
+    response["HTTP_X_TEST_HEADER"].must_equal "42"
+    response["test.postdata"].must_equal "rack-form-data=23"
+  end
+  it "support HTTP auth" do
+    GET("/test.fcgi", {:user => "ruth", :passwd => "secret"})
+    response["HTTP_AUTHORIZATION"].must_equal "Basic cnV0aDpzZWNyZXQ="
+  end
+  it "set status" do
+    GET("/test.fcgi?secret")
+    status.must_equal 403
+    response["rack.url_scheme"].must_equal "http"
+  end
+end
+end # if defined? LIGHTTPD_PID