stratagem 0.1.9 → 0.2.0

data/Manifest

@@ -33,6 +33,7 @@ lib/stratagem/extensions.rb
 lib/stratagem/extensions/class.rb
 lib/stratagem/extensions/hash.rb
 lib/stratagem/extensions/module.rb
+lib/stratagem/extensions/net.rb
 lib/stratagem/extensions/object.rb
 lib/stratagem/extensions/red_parse.rb
 lib/stratagem/extensions/string.rb
@@ -40,10 +41,10 @@ lib/stratagem/extensions/trace_compression.rb
 lib/stratagem/framework_extensions.rb
 lib/stratagem/framework_extensions/method_invocation.rb
 lib/stratagem/framework_extensions/models.rb
-lib/stratagem/framework_extensions/models/adapters/active_model/detect.rb
-lib/stratagem/framework_extensions/models/adapters/active_model/extensions.rb
-lib/stratagem/framework_extensions/models/adapters/active_model/metadata.rb
-lib/stratagem/framework_extensions/models/adapters/active_model/tracing.rb
+lib/stratagem/framework_extensions/models/adapters/active_record/detect.rb
+lib/stratagem/framework_extensions/models/adapters/active_record/extensions.rb
+lib/stratagem/framework_extensions/models/adapters/active_record/metadata.rb
+lib/stratagem/framework_extensions/models/adapters/active_record/tracing.rb
 lib/stratagem/framework_extensions/models/adapters/authlogic/detect.rb
 lib/stratagem/framework_extensions/models/adapters/authlogic/extensions.rb
 lib/stratagem/framework_extensions/models/adapters/authlogic/metadata.rb
@@ -52,6 +53,10 @@ lib/stratagem/framework_extensions/models/adapters/common/detect.rb
 lib/stratagem/framework_extensions/models/adapters/common/extensions.rb
 lib/stratagem/framework_extensions/models/adapters/common/metadata.rb
 lib/stratagem/framework_extensions/models/adapters/common/tracing.rb
+lib/stratagem/framework_extensions/models/adapters/devise/detect.rb
+lib/stratagem/framework_extensions/models/adapters/devise/extensions.rb
+lib/stratagem/framework_extensions/models/adapters/devise/metadata.rb
+lib/stratagem/framework_extensions/models/adapters/devise/tracing.rb
 lib/stratagem/framework_extensions/models/adapters/friendly_id/detect.rb
 lib/stratagem/framework_extensions/models/adapters/friendly_id/extensions.rb
 lib/stratagem/framework_extensions/models/adapters/friendly_id/metadata.rb
@@ -70,6 +75,7 @@ lib/stratagem/framework_extensions/rails.rb
 lib/stratagem/framework_extensions/rails2/action_controller.rb
 lib/stratagem/framework_extensions/rails2/action_mailer.rb
 lib/stratagem/framework_extensions/rails3/parameters.rb
+lib/stratagem/framework_extensions/request_forgery_protection.rb
 lib/stratagem/interface/browser.rb
 lib/stratagem/interface/public/images/backgrounds/content.png
 lib/stratagem/interface/public/images/backgrounds/shadow.png

data/Rakefile

@@ -2,7 +2,7 @@ require 'rubygems'
 require 'rake'
 require 'echoe'
 
-Echoe.new('stratagem', '0.1.9') do |p|
+Echoe.new('stratagem', '0.2.0') do |p|
   p.description    = "Intuitive security analysis of your Rails applications"
   p.url            = "http://github.com/stratagem/stratagem"
   p.author         = "Charles Grimes"

data/lib/stratagem/authentication.rb

@@ -28,7 +28,7 @@ module Stratagem
 
     def base_url
       subdomain = credentials ? credentials[:account] : 'www' 
-      "http://#{subdomain}.#{Stratagem.domain}"
+      "https://#{subdomain}.stratagemapp.com"
     end
 
     def project_url

data/lib/stratagem/auto_mock/aquifer.rb

@@ -18,7 +18,7 @@ module Stratagem::AutoMock
       i = 0
       while (objects.size > 0 && ((i+=1) < objects.size))
         objects = objects.select do |instance|
-          puts "deleting #{instance.class.name}"
+          # puts "deleting #{instance.class.name}"
           begin
             instance.destroy
           rescue
@@ -41,13 +41,13 @@ module Stratagem::AutoMock
 
     def instances_of(model_klass)
       objects = (repo[model_klass.name] || []).clone
-      puts "found #{objects.size} instances in well"
+      # puts "found #{objects.size} instances in well"
       objects
     end
 
     def random_instance(model_klass)
       objects = repo[model_klass.name]
-      puts "found #{objects.size} instances in well"
+      # puts "found #{objects.size} instances in well"
       instance = objects[rand objects.size]
       instance
     end
@@ -57,7 +57,7 @@ module Stratagem::AutoMock
       application.models.each do |meta_model|
         models = mock_model(meta_model.klass, model_count) if (meta_model.stratagem?)
       end
-      puts "aquifer full"
+      # puts "aquifer full"
       print
       self
     end

data/lib/stratagem/auto_mock/factory.rb

@@ -76,9 +76,9 @@ module Stratagem::AutoMock
 
       exclude_regex = [/^photo/, /picture/]
       names = object.stratagem.attribute_names.select {|n| n !~ /_id$/ } - exclude
-      puts "mocking names: #{names.inspect}"
-      puts "excluded: #{exclude.inspect}"
-      puts "internal: #{object.stratagem.internal_attributes.inspect}"
+      # puts "mocking names: #{names.inspect}"
+      # puts "excluded: #{exclude.inspect}"
+      # puts "internal: #{object.stratagem.internal_attributes.inspect}"
       names.each do |attr_name|
         next if exclude_regex.find {|r| attr_name =~ r }
         set_attribute_value(object, attr_name, mock_chain)
@@ -182,7 +182,7 @@ module Stratagem::AutoMock
         puts $!.backtrace unless valid
       end
       
-      puts "\t#{object.stratagem.mock_attributes.inspect}" if (valid)
+      # puts "\t#{object.stratagem.mock_attributes.inspect}" if (valid)
       
       valid
     end
@@ -207,7 +207,7 @@ module Stratagem::AutoMock
 
       confirmation_writer = "#{attr_name}_confirmation="
       if object.methods_include?(confirmation_writer) || (object.stratagem.validations(attr_name, :validates_confirmation_of).size > 0)
-        puts "setting confirmation field for #{attr_name}"
+        # puts "setting confirmation field for #{attr_name}"
         object.send(confirmation_writer, value)
         object.stratagem.write_mock_attribute("#{attr_name}_confirmation".to_sym, value)
       end

data/lib/stratagem/client.rb

@@ -9,14 +9,15 @@ module Stratagem
     def send(snapshot)
       Stratagem.logger.debug "Sending report to server"
       url = URI.parse("#{@authentication.base_url}/snapshots")
-      req = Net::HTTP::Post.new(url.path)
+      req = Net::HTTPS::Post.new(url.path)
+      
       req.set_form_data({
         'auth_token' => @authentication.credentials[:token],
         'project_id' => @authentication.credentials[:project],
         'timestamp' => snapshot.timestamp.to_i,
         'model' => snapshot.model.export.to_json
       }, ';')
-      res = Net::HTTP.new(url.host, url.port).start {|http| http.request(req) }
+      res = Net::HTTPS.new(url.host, url.port).start {|http| http.request(req) }
       puts "response:"
       case res
       when Net::HTTPSuccess, Net::HTTPRedirection

data/lib/stratagem/crawler/authentication.rb

@@ -1,6 +1,6 @@
 module Stratagem::Crawler
   class AuthenticationData
-    attr_accessor :success, :login_page, :form, :response_page, :ssl
+    attr_accessor :success, :login_page, :form, :response_page, :ssl, :authenticated_with
   end
 
 
@@ -44,7 +44,7 @@ module Stratagem::Crawler
       route = application_model.routes.recognize(request.path, :post)
 
       redirected_to = nil
-      page = site_model.add(route, request, response) {|redirect_url| redirected_to = redirect_url }
+      page = site_model.add(route, controller, request, response) {|redirect_url| redirected_to = redirect_url }
       authentication.response_page = page
 
       begin
@@ -61,9 +61,11 @@ module Stratagem::Crawler
       puts "authenticated? #{authentication.success}"
       if (response && authentication.success)
         authentication.ssl = request.ssl?
+        authentication.authenticated_with = user
         yield 
         logout
       else
+        puts response.body
         false
       end
     end
@@ -74,11 +76,8 @@ module Stratagem::Crawler
         puts "locating login page"
         puts "testing #{site_models.first.pages.size} pages"
         site_models.first.pages.sort {|a,b| b.inbound_edges(:redirect).size <=> a.inbound_edges(:redirect).size }.each do |page|
-          puts "Testing page #{page.url} for sign in form"
-          # page.reload {|url| get url; response }
-          # form = page.login_form
           if (page.login_form)
-            puts "FOUND! - #{page.login_form}"
+            puts "\tfound login form - #{page.login_form}"
             authentication.login_page = page
             return page
           end
@@ -96,7 +95,6 @@ module Stratagem::Crawler
     def login(user)
       populate_login_form(user).submit {|action,params| 
         post(action, params)
-        # puts response.body
       }
     end
 
@@ -122,10 +120,7 @@ module Stratagem::Crawler
     def populate_login_form(user)
       # set up the form
       page = find_login_form
-      p page.login_form
       page.reload {|url| get url; [request,response] }
-      p page.login_form
-      p page.response.body
       form = page.login_form
 
       # map the input values
@@ -161,9 +156,6 @@ module Stratagem::Crawler
           puts user.stratagem.mock_attributes.inspect
           puts "ERROR: Cannot find attribute #{attribute_name} in model #{user.class.name}"
         end
-
-        puts "3 authentication field: #{input.name} -> #{input.value}"
-
       end
       form
     end

data/lib/stratagem/crawler/form.rb

@@ -1,7 +1,7 @@
 # Primarily used to fill out login forms rather than trying to fudge the before_filters
 module Stratagem::Crawler
   class Form
-    attr_accessor :action, :method, :fields, :buttons
+    attr_accessor :action, :method, :fields, :buttons, :page
     attr_reader :inputs, :buttons
 
     def initialize
@@ -17,6 +17,12 @@ module Stratagem::Crawler
       end
     end
 
+    def implied_method
+      implied = inputs.find {|i| i.name == '_method' }
+      implied ? implied.value : nil
+    end
+
+
     def password?
       !(inputs.find {|i| i.type == 'password' }.nil?)
     end
@@ -25,6 +31,10 @@ module Stratagem::Crawler
       response = block.call(action, generate_parameters)
     end
 
+    def parameter_keys
+      @parameter_keys ||= inputs.map {|input| input.name }
+    end
+
     def generate_parameters
       params = {}
       inputs.each do |input|

data/lib/stratagem/crawler/parameter_resolver.rb

@@ -2,21 +2,18 @@ module Stratagem::Crawler
   module ParameterResolver
 
     def resolve_parameter_types(route_container)
-      log "\tresolving parameter types"
       resolved_params = {}
       route_infos, params = build_url(route_container, resolved_params)
       route_info = route_infos.first
       unknown_params = params.keys
-      log "\tunknown params: #{unknown_params.inspect} - #{unknown_params.size}"
 
-      resolve_with_convention(unknown_params, resolved_params)
-      log "\tunknown params after convention: #{unknown_params.inspect} - #{unknown_params.size}"
+      if (unknown_params.size > 0)
+        resolve_with_convention(unknown_params, resolved_params)
+        resolve_with_instrumentation(route_container, resolved_params)
 
-      resolve_with_instrumentation(route_container, resolved_params)
-      log "\tunknown params after instrumentation: #{unknown_params.inspect} - #{unknown_params.size}"
+        log "\tresolved parameter types - #{resolved_params.inspect}"
+      end
       
-      p resolved_params
-
       if (resolved_params.size > 0)
         resolved_params
       else
@@ -33,7 +30,6 @@ module Stratagem::Crawler
       while ((unknown_params.size > 0) && (progress.nil? || (progress > 0)))
         progress = 0
 
-        puts "\tloading model invocations for request"
         delta = model_invocations_for_request do
           call_route(route_info, false)
         end

data/lib/stratagem/crawler/route_invoker.rb

@@ -2,8 +2,10 @@ module Stratagem::Crawler
   module RouteInvoker
     include Stratagem::Crawler::ParameterResolver
 
+    IGNORE_PARAMETERS = [:utf8, :_method, :authenticity_token, 'utf8', '_method', 'authenticity_token']
+
     def visit(route_container)
-      puts "Visiting #{route_container.route}"
+      # puts "Visiting #{route_container.route}"
       build_urls(route_container).each do |route_info|
         call_route(route_info)
       end
@@ -21,7 +23,7 @@ module Stratagem::Crawler
     def call_route!(route_info, track_invocations=true)
       return if route_info.nil?
 
-      puts 'CALLING: .'+route_info[:verb].downcase+". - "+route_info[:path]
+      puts route_info[:verb].downcase+" "+route_info[:path]
       verb = route_info[:verb].downcase
       verb = 'get' if verb == '' || verb == 'any'
 
@@ -43,8 +45,11 @@ module Stratagem::Crawler
         if (track_invocations)
           changes = detect_attribute_changes_in_models(invocations)
           puts "\tfound #{invocations.size} invocations"
+          invocations.each do |i|
+            puts "\t\t#{i.controller_action} -> #{i.model_class}"
+          end
           puts "\tchanges: #{changes.values.inspect}" if changes.size > 0
-          site_model.add(route_info[:route_container], request, response, invocations, changes) {|redirect_url| redirect_proc.call(redirect_url) }
+          site_model.add(route_info[:route_container], controller, request, response, invocations, changes) {|redirect_url| redirect_proc.call(redirect_url) }
         end
       else
         puts "ERROR: did not call #{route_info.inspect}"
@@ -56,12 +61,31 @@ module Stratagem::Crawler
     end
 
     def do_put(route_info)
+      raise "unable to invoke PUT requests, application must first be crawled with GET requests for phase #{phase}." unless site_model.pages.size > 0
 
-      # note: this should fail to generate anything meaningful, as we have not yet set up the parameters
-      put route_info[:path]
+      form = guess_form_for_route(route_info)
+      
+      params = {}
 
+      # note: this should fail to generate anything meaningful, as we have not yet set up the parameters
+      hash_reads = Hash.track_parameter_reads do
+        begin
+          put route_info[:path], params
+        rescue
+          # TODO - log error as page response
+          puts "ERROR: #{response.code}"
+        end
+      end
+      
+      p hash_reads
+      
       # let's find out what the method is looking for in the params object
-      params = map_models_to_attributes(infer_models_for_param_reads(route_info[:route_container],controller.params.hash_reads))
+      models_by_hash_key = infer_models_for_param_reads(route_info[:route_container],hash_reads)
+      params = map_models_to_attributes(models_by_hash_key)
+      
+      p params
+      
+      guess_unknown_params(models_by_hash_key, params, form)
 
       # run again with the params
       puts "PUTTING: #{route_info[:path]} with #{params.inspect}"
@@ -73,6 +97,54 @@ module Stratagem::Crawler
 
     private
     
+    def guess_unknown_params(models_by_hash_key, known_params, form)
+      (form.parameter_keys - IGNORE_PARAMETERS) .each {|path_s|
+        path = path_s.split('[')
+        path.last.gsub!(']', '')
+        value = known_params
+        model = nil
+        path.each do |key|
+          key = key.to_sym
+          model = models_by_hash_key[key] if models_by_hash_key[key]
+          new_value = value[key]
+          if (new_value.nil?)
+            new_value = guess_form_value(form, model, key, path_s)
+            puts "\t\tno key for #{key}, setting to -> #{new_value}"
+            value[key] = new_value if (new_value)
+          end
+          value = new_value
+        end
+      }
+    end
+    
+    def guess_form_value(form, model, attribute, qualified_attribute)
+      # simple guessing for the time being, more sophisticated analysis as required
+      if (attribute =~ /password/)
+        authentication.authenticated_with.stratagem.read_mock_attribute(:password)
+      elsif (form)
+        # return the value from the form
+        input = form.inputs.find {|i| i.name == qualified_attribute}
+        input ? input.value : nil
+      else
+        nil
+      end
+    end
+    
+    def guess_form_for_route(route_info)
+      forms = []
+      pages = site_models.map {|sm| sm.pages }.flatten
+      site_models.each do |site_model|
+        site_model.pages.each do |page|
+          page.forms.each do |form|
+            usable = route_info[:route_container].responds_to?(form.action, form.implied_method || form.method)
+            # puts "\t#{form.action} - #{form.method} - #{form.implied_method}" 
+            # puts "\tUSABLE" if usable
+            forms << form if (usable)
+          end
+        end
+      end
+      forms.sort {|a,b| a.inputs.size <=> b.inputs.size }.last
+    end
 
     def map_models_to_attributes(models)
       result = {}
@@ -175,7 +247,6 @@ module Stratagem::Crawler
 
       routes = []
       url_permutations(route_container,insert_values) do |path|
-        puts "yielded: #{path}"
         permutation = {:verb => verb, :path => path, :route_container => route_container}
         routes << permutation
       end

data/lib/stratagem/crawler/session.rb

@@ -30,7 +30,6 @@ module Stratagem::Crawler::Session
   include Stratagem::Crawler::TraceUtils
   include Stratagem::Crawler::Authentication
   include Stratagem::Crawler::RouteInvoker
-
   attr_writer :aquifer
 
   # def self.app
@@ -82,6 +81,9 @@ module Stratagem::Crawler::Session
   end
 
   def page_set(name, &block)
+    log "---------------------------------------"
+    log "Crawling page set #{name}"
+    log "---------------------------------------"
     reset!
     site_models << Stratagem::Crawler::SiteModel.new(name)
     yield site_model
@@ -108,12 +110,7 @@ module Stratagem::Crawler::Session
     
     # grab all pages independently
 
-    authentication_controller = nil
-    if (site_model.authentication)
-      route = application_model.routes.recognize(authentication.login_page)
-      authentication_controller = route.controller if route
-    end
-    
+    authentication_controller = session_controller()
     application_model.routes.each {|route_container|
       if authentication_controller && route_container.controller && (route_container.controller.klass == authentication_controller.klass)
         log "Skipping authentication routes #{route_container.route.to_s}"
@@ -136,6 +133,16 @@ module Stratagem::Crawler::Session
     site_model
   end
 
+  def session_controller
+    authentication_controller = nil
+    if (site_model.authentication)
+      route = application_model.routes.recognize(authentication.login_page)
+      authentication_controller = route.controller if route
+    end
+
+    authentication_controller
+  end
+
   private
 
   def handle_redirect(redirect_url)
@@ -147,7 +154,7 @@ module Stratagem::Crawler::Session
         get redirect_url
       end
 
-      site_model.add(nil, request, response) {|redirect_url|
+      site_model.add(nil, controller, request, response) {|redirect_url|
         # TODO - record as bug!
         puts "recursive redirect #{redirect_url}"
       }

data/lib/stratagem/crawler/site_model.rb

@@ -29,8 +29,8 @@ module Stratagem::Crawler
       self.edges << Edge.new(from,to,type)
     end
 
-    def add(route, request, response, invocations=[], model_changes={}, &block)
-      page = Page.new(self, request, response, invocations, model_changes, &block)
+    def add(route, controller, request, response, invocations=[], model_changes={}, &block)
+      page = Page.new(self, controller, request, response, invocations, model_changes, &block)
       self.pages << page
       page
     end
@@ -75,10 +75,11 @@ module Stratagem::Crawler
     attr_accessor :redirected_to
     attr_accessor :document
 
-    def initialize(site_model, request, response, invocations, model_changes, &block)
+    def initialize(site_model, controller, request, response, invocations, model_changes, &block)
       @site_model = site_model
       @invocations = invocations
       @model_changes = model_changes
+      @authenticity_checked = controller.authenticity_checked?
       init(request, response, &block)
     end
 
@@ -96,6 +97,7 @@ module Stratagem::Crawler
         :route_external_id => route ? route.object_id : nil,
         :references => @invocations.map {|i| i.to_reference.export },
         :model_changes => Hash[@model_changes.map {|model,changes| [model.object_id, changes] }].to_json,
+        :authenticity_checked => @authenticity_checked,
         :parameters => @request.parameters.to_json
       }
       h
@@ -123,7 +125,13 @@ module Stratagem::Crawler
     end
 
     def forms
-      self.parse_forms(@document)
+      @forms ||= begin
+        forms = self.parse_forms(@document)
+        forms.each do |form|
+          form.page = self
+        end
+        forms
+      end
     end
 
     def login_form

data/lib/stratagem/extensions.rb

@@ -1,3 +1,4 @@
+require 'stratagem/extensions/net'
 require 'stratagem/extensions/red_parse'
 require 'stratagem/extensions/class'
 require 'stratagem/extensions/string'

data/lib/stratagem/extensions/hash.rb

@@ -2,11 +2,22 @@ class Hash
   alias_method :ruby_get, :[]
   attr_reader :hash_reads, :hash_writes
 
+  @@listeners = {}
+
   def [](name)
-    (@hash_reads ||= []) << name if (@auditing)
+    if (@auditing)
+      @@listeners.values.each {|listener| listener << name }
+      (@hash_reads ||= []) << name
+    end
     ruby_get name
   end
 
+  def self.track_parameter_reads(&block)
+    @@listeners[block] = []
+    yield
+    @@listeners.delete(block)
+  end
+
   def enable_auditing
     @auditing = true
   end

data/lib/stratagem/extensions/net.rb

@@ -0,0 +1,10 @@
+require 'net/http'
+
+module Net
+  class HTTPS < HTTP
+    def initialize(address, port = nil)
+      super(address, port)
+      self.use_ssl = true
+    end
+  end
+end

data/lib/stratagem/framework_extensions.rb

@@ -3,6 +3,7 @@ module Stratagem::ApplicationExtensions; end
 require 'stratagem/framework_extensions/rails'
 require 'stratagem/framework_extensions/method_invocation'
 require 'stratagem/framework_extensions/models'
+require 'stratagem/framework_extensions/request_forgery_protection'
 
 if (Stratagem.rails_3?)
   require 'stratagem/framework_extensions/rails3/parameters'

data/lib/stratagem/framework_extensions/method_invocation.rb

@@ -10,6 +10,7 @@ module Stratagem::ApplicationExtensions
       args.each_with_index do |val,i|
         self.send("#{arg_keys[i].to_s}=", val)
       end
+      self.controller_path = controller_path.gsub(/.*?\/app/, 'app') if controller_path
     end
 
     def <=>(other)
@@ -28,10 +29,17 @@ module Stratagem::ApplicationExtensions
       }.nil?
     end
 
-    def to_reference
+    def controller
       app = Stratagem::Model::Application.instance
-      model = model_class ? app.models.find {|model| model.klass == model_class } : nil
       controller = controller_path ? app.controllers.find {|controller| controller.path == controller_path } : nil
+    end
+
+    def model
+      app = Stratagem::Model::Application.instance
+      model = model_class ? app.models.find {|model| model.klass.name == model_class.name } : nil
+    end
+
+    def to_reference
       Stratagem::Model::Component::Reference.new(
         :from_component => controller,
         :to_component => model,

data/lib/stratagem/framework_extensions/models/adapters/{active_model → active_record}/tracing.rb

@@ -53,7 +53,7 @@ module Stratagem::ApplicationExtensions::Models::Adapters::ActiveRecord
             end
           end
 
-          stratagem.write_invocation(self, alternate_model || self.class, action.to_sym, args)
+          stratagem.write_invocation(self, alternate_model || self.class, action ? action.to_sym : '', args)
           old_create_or_update(*args)
         end
         

data/lib/stratagem/framework_extensions/models/adapters/devise/detect.rb

@@ -0,0 +1,11 @@
+module Stratagem::ApplicationExtensions::Models::Adapters::Devise
+  class Detect < Stratagem::ApplicationExtensions::Models::Detect
+    def self.supports?(model)
+      begin
+        model.methods.include?(:devise_modules)
+      rescue
+        false
+      end
+    end
+  end
+end

data/lib/stratagem/framework_extensions/models/adapters/devise/metadata.rb

@@ -0,0 +1,30 @@
+module Stratagem::ApplicationExtensions::Models::Adapters::Devise
+
+  # prefix method names with  to avoid collision
+  class Metadata
+    include Stratagem::ApplicationExtensions::Models::Adapters::Common::AuthenticationMetadata
+
+    VIRTUAL_COLUMNS = [:password, :password_confirmation]
+
+    def authenticates?
+      true
+    end
+
+    def initialize(model)
+      @model = model
+    end
+
+    def attribute_names
+      VIRTUAL_COLUMNS
+    end
+
+    def internal_attributes
+      [:encrypted_password, :password_salt]
+    end
+
+    def attribute_type(name)
+      :string
+    end
+  end
+
+end

data/lib/stratagem/framework_extensions/models/adapters/devise/tracing.rb

@@ -0,0 +1,4 @@
+module Stratagem::ApplicationExtensions::Models::Adapters::Devise
+  module Tracing
+  end
+end

data/lib/stratagem/framework_extensions/models/tracing.rb

@@ -75,6 +75,7 @@ module Stratagem::ApplicationExtensions::Models
 
     def parse_trace_line(trace_line)
       path,line,action = trace_line.split(':')
+      path = path.gsub(/.*?\/app/, 'app')
       if (action)
         action.gsub!(/[`']/, '').gsub!('in ', '')
         line = line.to_i

data/lib/stratagem/framework_extensions/request_forgery_protection.rb

@@ -0,0 +1,16 @@
+module ActionController #:nodoc:
+  module RequestForgeryProtection
+    def authenticity_checked?
+      @authenticity_checked || false
+    end
+
+    def authenticity_checked
+      @authenticity_checked = true
+    end
+
+    def verify_authenticity_token
+      authenticity_checked
+      true
+    end
+  end
+end

data/lib/stratagem/model/application.rb

@@ -104,6 +104,10 @@ module Stratagem::Model
       @components.find{|component| yield component } 
     end
 
+    def clear
+      @components.clear
+    end
+
     def size
       @components.size
     end
@@ -144,7 +148,15 @@ module Stratagem::Model
       else
         path = page
       end
-      self.find {|r| r.responds_to?(path, method) }
+
+      unless path.nil?
+        # path = path.gsub('http://www.example.com', '')
+        route = self.find {|r| r.responds_to?(path, method) }
+        puts "route: #{route.path}"
+        route
+      else
+        nil
+      end
     end
   end
   

data/lib/stratagem/model/components/base.rb

@@ -6,7 +6,7 @@ module Stratagem::Model::Component
     attr_accessor :app_model
 
     def initialize(path, parse_tree, klass)
-      @path = path
+      @path = path.gsub(/.*?\/app/, 'app')
       @parse_tree = parse_tree
       @klass = klass
     end

data/lib/stratagem/model/components/controller.rb

@@ -12,20 +12,27 @@ module Stratagem::Model::Component
     end
 
     def model_invocations(type=nil)
+      puts "MODEL INVOCATIONS FOR: #{controller.klass.name} / #{name}"
+      puts "\t#{Stratagem::ApplicationExtensions::Models::Tracing.invocations_audit.size} total invocations"
       invocations = []
       Stratagem::ApplicationExtensions::Models::Tracing.invocations_audit.each {|invocation|
         if ((invocation.controller_path == controller.path) && (invocation.controller_action.to_s == self.name.to_s))
           invocations << invocation unless invocations.include?(invocation) 
         end
       }
+      puts "\t#{invocations.size} filtered"
       invocations = invocations.select {|i| i.type == type } if type
+      puts "\t#{invocations.size} selected"
+      invocations.each do |i|
+        puts "\t\t#{i.model.class.name} - #{i.controller.class.name}"
+      end
       invocations
     end
 
   end
   
   class Controller < Base
-    attr_reader :clazz, :actions
+    attr_reader :actions
     attr_accessor :invalid_routes # named routes linked to the controller that are invalid
 
     def initialize(*args)

data/lib/stratagem/model/components/model.rb

@@ -134,7 +134,7 @@ module Stratagem::Model::Component
         :component_type => :model, 
         :path => @path.gsub(RAILS_ROOT+'/', ''), 
         :class_name => @klass.name, 
-        :superclass => @klass.superclass.name, 
+        :superclass => @klass.methods.include?(:superclass) ? @klass.superclass.name : nil, 
         :included_modules => @klass.included_modules.map {|m| m.name},
         :attributes => @model_attributes,
         :foreign_keys => @model_foreign_keys,

data/lib/stratagem/model/components/route.rb

@@ -22,7 +22,6 @@ module Stratagem::Model::Component
         @controller_name = @controller_path.gsub('/','::').split('::').map {|part| part.camelcase }.join('::')
         @controller_name << 'Controller'
       end
-      puts "CONTROLLER INFO: #{@controller_name}, #{@action_name}, #{@verb}, #{controller}"
     end
 
     def responds_to?(path, request_method)
@@ -41,13 +40,14 @@ module Stratagem::Model::Component
       if (controller_name)
         begin
           controller_class = controller_name.constantize
-          Stratagem::Model::Application.instance.controllers.find {|c| c.klass == controller_class }
+          Stratagem::Model::Application.instance.controllers.find {|c| c.klass.name == controller_class.name }
         rescue
           puts "unable to determine controller: #{route.requirements[:controller]}"
           puts $!.message
           nil
         end
       else
+        puts "ERROR: no controller name"
         nil
       end
     end

data/lib/stratagem/model_builder.rb

@@ -33,6 +33,7 @@ module Stratagem
     end
 
     def load_plugins()
+      @model.plugins.clear
       if (Stratagem.rails_3?)
         @model.plugins << Rails.application.railties.plugins
       else
@@ -43,6 +44,8 @@ module Stratagem
     end
 
     def load_models()
+      @model.models.clear
+      
       # load files into classes
       log "loading models"
       root = File.join(RAILS_ROOT, 'app','models')
@@ -57,6 +60,8 @@ module Stratagem
     end
 
     def load_public
+      @model.static_files.clear
+      
       log "loading static files"
       Dir[File.join(RAILS_ROOT, 'public', '**', '*.html')].each {|static|
         static.gsub!(RAILS_ROOT, '').gsub!(/^\/public\//, '')
@@ -67,6 +72,8 @@ module Stratagem
     end
 
     def load_template_paths
+      @model.views.clear
+
       log "loading templates"
       root = File.join(RAILS_ROOT, 'app','views')
       load_files(root).map {|template|
@@ -77,58 +84,32 @@ module Stratagem
     end
 
     def load_routes
+      @model.routes.clear
+      @model.controllers.clear
+
       log 'loading routes'
       root = File.join(RAILS_ROOT, 'app','controllers')
       ActionController::Routing::Routes.routes.each {|route|
         route_container = Stratagem::Model::Component::Route.new(route)
         @model.routes << route_container 
-
+        p route.requirements
+        
         begin
-          controller = route_container.controller || begin
-            controller_class = route_container.controller_name.constantize
-            filename = File.join(root, "#{route_container.controller_path}_controller.rb")
-            if (File.exists?(filename))
-              parse_tree = RedParse.new(File.read(filename)).parse
-            else
-              parse_tree = nil
-            end
-            controller_container = Stratagem::Model::Component::Controller.new(filename, parse_tree, controller_class)
-            configure_route(route_container, controller_container)
-            @model.controllers << controller_container
+          puts "loading controller - #{route_container.controller_name}"
+          controller_class = route_container.controller_name.constantize
+          filename = File.join(root, "#{route_container.controller_path}_controller.rb")
+          if (File.exists?(filename))
+            parse_tree = RedParse.new(File.read(filename)).parse
+          else
+            parse_tree = nil
           end
+          controller_container = Stratagem::Model::Component::Controller.new(filename, parse_tree, controller_class)
+          configure_route(route_container, controller_container)
+          @model.controllers << controller_container
         rescue
           log "\tinvalid route #{route.to_s} - #{$!.message}"
           @model.routes.invalid << Stratagem::Model::Component::Route.new(route)
         end
-        
-        # begin
-        #   filename = File.join(root, "#{route_container.controller_path}_controller.rb")
-        #   controllers = @model.controllers.select {|c| c.path == filename }
-        # 
-        #   unless controllers.size > 0
-        #     controllers = Stratagem::Model::Component::Controller.load_all(filename)
-        #     puts "loading controllers from #{filename} -> controllers #{controllers.map {|c| c.klass.name }.inspect}"
-        #     @model.controllers << controllers
-        #   end
-        # 
-        #   configure_route(route_container, controllers)
-        # 
-        # rescue Errno::ENOENT, MissingSourceFile
-        #   begin
-        #     controller_class = route_container.controller
-        #     if (controller_class)
-        #       log "Attempting to load external controller for: #{route_container.controller_name}"
-        #       controllers = [Stratagem::Model::Component::Controller.new(nil, nil, controller_class)]
-        #       @model.controllers << controllers
-        #       configure_route(route_container, controllers)
-        #     else
-        #       log "\tinvalid route #{route.to_s} - unable to load external controller"
-        #     end
-        #   rescue
-        #     log "\tinvalid route #{route.to_s} - #{$!.message}"
-        #     @model.routes.invalid << Stratagem::Model::Component::Route.new(route)
-        #   end
-        # end
       }
       log ""
     end

data/stratagem.gemspec

@@ -2,17 +2,17 @@
 
 Gem::Specification.new do |s|
   s.name = %q{stratagem}
-  s.version = "0.1.9"
+  s.version = "0.2.0"
 
   s.required_rubygems_version = Gem::Requirement.new(">= 1.2") if s.respond_to? :required_rubygems_version=
   s.authors = ["Charles Grimes"]
-  s.date = %q{2010-09-30}
+  s.date = %q{2010-10-06}
   s.default_executable = %q{stratagem}
   s.description = %q{Intuitive security analysis of your Rails applications}
   s.email = %q{cj@stratagemapp.com}
   s.executables = ["stratagem"]
-  s.extra_rdoc_files = ["bin/stratagem", "lib/bootstrap.rb", "lib/generators/stratagem/install/USAGE", "lib/generators/stratagem/install/install_base.rb", "lib/generators/stratagem/install/install_generator.rb", "lib/stratagem.rb", "lib/stratagem/authentication.rb", "lib/stratagem/auto_mock.rb", "lib/stratagem/auto_mock/aquifer.rb", "lib/stratagem/auto_mock/factory.rb", "lib/stratagem/auto_mock/value_generator.rb", "lib/stratagem/blocker.rb", "lib/stratagem/client.rb", "lib/stratagem/command.rb", "lib/stratagem/commands.rb", "lib/stratagem/commands/analyze.rb", "lib/stratagem/commands/base.rb", "lib/stratagem/commands/devel_mock.rb", "lib/stratagem/crawler.rb", "lib/stratagem/crawler/authentication.rb", "lib/stratagem/crawler/form.rb", "lib/stratagem/crawler/html_utils.rb", "lib/stratagem/crawler/parameter_resolver.rb", "lib/stratagem/crawler/route_invoker.rb", "lib/stratagem/crawler/session.rb", "lib/stratagem/crawler/site_model.rb", "lib/stratagem/crawler/trace_utils.rb", "lib/stratagem/extensions.rb", "lib/stratagem/extensions/class.rb", "lib/stratagem/extensions/hash.rb", "lib/stratagem/extensions/module.rb", "lib/stratagem/extensions/object.rb", "lib/stratagem/extensions/red_parse.rb", "lib/stratagem/extensions/string.rb", "lib/stratagem/extensions/trace_compression.rb", "lib/stratagem/framework_extensions.rb", "lib/stratagem/framework_extensions/method_invocation.rb", "lib/stratagem/framework_extensions/models.rb", "lib/stratagem/framework_extensions/models/adapters/active_model/detect.rb", "lib/stratagem/framework_extensions/models/adapters/active_model/extensions.rb", "lib/stratagem/framework_extensions/models/adapters/active_model/metadata.rb", "lib/stratagem/framework_extensions/models/adapters/active_model/tracing.rb", "lib/stratagem/framework_extensions/models/adapters/authlogic/detect.rb", "lib/stratagem/framework_extensions/models/adapters/authlogic/extensions.rb", "lib/stratagem/framework_extensions/models/adapters/authlogic/metadata.rb", "lib/stratagem/framework_extensions/models/adapters/authlogic/tracing.rb", "lib/stratagem/framework_extensions/models/adapters/common/detect.rb", "lib/stratagem/framework_extensions/models/adapters/common/extensions.rb", "lib/stratagem/framework_extensions/models/adapters/common/metadata.rb", "lib/stratagem/framework_extensions/models/adapters/common/tracing.rb", "lib/stratagem/framework_extensions/models/adapters/friendly_id/detect.rb", "lib/stratagem/framework_extensions/models/adapters/friendly_id/extensions.rb", "lib/stratagem/framework_extensions/models/adapters/friendly_id/metadata.rb", "lib/stratagem/framework_extensions/models/adapters/friendly_id/tracing.rb", "lib/stratagem/framework_extensions/models/adapters/restful_authentication/detect.rb", "lib/stratagem/framework_extensions/models/adapters/restful_authentication/extensions.rb", "lib/stratagem/framework_extensions/models/adapters/restful_authentication/metadata.rb", "lib/stratagem/framework_extensions/models/adapters/restful_authentication/tracing.rb", "lib/stratagem/framework_extensions/models/adapters/util/authentication_metadata.rb", "lib/stratagem/framework_extensions/models/annotations.rb", "lib/stratagem/framework_extensions/models/detect.rb", "lib/stratagem/framework_extensions/models/metadata.rb", "lib/stratagem/framework_extensions/models/mocking.rb", "lib/stratagem/framework_extensions/models/tracing.rb", "lib/stratagem/framework_extensions/rails.rb", "lib/stratagem/framework_extensions/rails2/action_controller.rb", "lib/stratagem/framework_extensions/rails2/action_mailer.rb", "lib/stratagem/framework_extensions/rails3/parameters.rb", "lib/stratagem/interface/browser.rb", "lib/stratagem/interface/public/images/backgrounds/content.png", "lib/stratagem/interface/public/images/backgrounds/shadow.png", "lib/stratagem/interface/public/javascripts/jquery-1.4.2.min.js", "lib/stratagem/interface/public/javascripts/stratagem.js", "lib/stratagem/interface/public/javascripts/stratagem_debug.js", "lib/stratagem/interface/public/stylesheets/960.css", "lib/stratagem/interface/public/stylesheets/reset.css", "lib/stratagem/interface/public/stylesheets/stratagem.css", "lib/stratagem/interface/public/stylesheets/stratagem_debug.css", "lib/stratagem/interface/views/debug.haml", "lib/stratagem/interface/views/index.haml", "lib/stratagem/labs/auto_mock.rb", "lib/stratagem/labs/crawler.rb", "lib/stratagem/logger.rb", "lib/stratagem/model.rb", "lib/stratagem/model/application.rb", "lib/stratagem/model/components/base.rb", "lib/stratagem/model/components/controller.rb", "lib/stratagem/model/components/model.rb", "lib/stratagem/model/components/reference.rb", "lib/stratagem/model/components/route.rb", "lib/stratagem/model/components/static_file.rb", "lib/stratagem/model/components/view.rb", "lib/stratagem/model/parse_util.rb", "lib/stratagem/model_builder.rb", "lib/stratagem/recipes/deploy.rb", "lib/stratagem/scan.rb", "lib/stratagem/scan/checks/capistrano/secure_deploy.rb", "lib/stratagem/scan/checks/email_address.rb", "lib/stratagem/scan/checks/error_pages.rb", "lib/stratagem/scan/result.rb", "lib/stratagem/scanner.rb", "lib/stratagem/site_crawler.rb", "lib/stratagem/snapshot.rb"]
-  s.files = ["Manifest", "Rakefile", "bin/stratagem", "generators/stratagem/stratagem_generator.rb", "init.rb", "lib/bootstrap.rb", "lib/generators/stratagem/install/USAGE", "lib/generators/stratagem/install/install_base.rb", "lib/generators/stratagem/install/install_generator.rb", "lib/stratagem.rb", "lib/stratagem/authentication.rb", "lib/stratagem/auto_mock.rb", "lib/stratagem/auto_mock/aquifer.rb", "lib/stratagem/auto_mock/factory.rb", "lib/stratagem/auto_mock/value_generator.rb", "lib/stratagem/blocker.rb", "lib/stratagem/client.rb", "lib/stratagem/command.rb", "lib/stratagem/commands.rb", "lib/stratagem/commands/analyze.rb", "lib/stratagem/commands/base.rb", "lib/stratagem/commands/devel_mock.rb", "lib/stratagem/crawler.rb", "lib/stratagem/crawler/authentication.rb", "lib/stratagem/crawler/form.rb", "lib/stratagem/crawler/html_utils.rb", "lib/stratagem/crawler/parameter_resolver.rb", "lib/stratagem/crawler/route_invoker.rb", "lib/stratagem/crawler/session.rb", "lib/stratagem/crawler/site_model.rb", "lib/stratagem/crawler/trace_utils.rb", "lib/stratagem/extensions.rb", "lib/stratagem/extensions/class.rb", "lib/stratagem/extensions/hash.rb", "lib/stratagem/extensions/module.rb", "lib/stratagem/extensions/object.rb", "lib/stratagem/extensions/red_parse.rb", "lib/stratagem/extensions/string.rb", "lib/stratagem/extensions/trace_compression.rb", "lib/stratagem/framework_extensions.rb", "lib/stratagem/framework_extensions/method_invocation.rb", "lib/stratagem/framework_extensions/models.rb", "lib/stratagem/framework_extensions/models/adapters/active_model/detect.rb", "lib/stratagem/framework_extensions/models/adapters/active_model/extensions.rb", "lib/stratagem/framework_extensions/models/adapters/active_model/metadata.rb", "lib/stratagem/framework_extensions/models/adapters/active_model/tracing.rb", "lib/stratagem/framework_extensions/models/adapters/authlogic/detect.rb", "lib/stratagem/framework_extensions/models/adapters/authlogic/extensions.rb", "lib/stratagem/framework_extensions/models/adapters/authlogic/metadata.rb", "lib/stratagem/framework_extensions/models/adapters/authlogic/tracing.rb", "lib/stratagem/framework_extensions/models/adapters/common/detect.rb", "lib/stratagem/framework_extensions/models/adapters/common/extensions.rb", "lib/stratagem/framework_extensions/models/adapters/common/metadata.rb", "lib/stratagem/framework_extensions/models/adapters/common/tracing.rb", "lib/stratagem/framework_extensions/models/adapters/friendly_id/detect.rb", "lib/stratagem/framework_extensions/models/adapters/friendly_id/extensions.rb", "lib/stratagem/framework_extensions/models/adapters/friendly_id/metadata.rb", "lib/stratagem/framework_extensions/models/adapters/friendly_id/tracing.rb", "lib/stratagem/framework_extensions/models/adapters/restful_authentication/detect.rb", "lib/stratagem/framework_extensions/models/adapters/restful_authentication/extensions.rb", "lib/stratagem/framework_extensions/models/adapters/restful_authentication/metadata.rb", "lib/stratagem/framework_extensions/models/adapters/restful_authentication/tracing.rb", "lib/stratagem/framework_extensions/models/adapters/util/authentication_metadata.rb", "lib/stratagem/framework_extensions/models/annotations.rb", "lib/stratagem/framework_extensions/models/detect.rb", "lib/stratagem/framework_extensions/models/metadata.rb", "lib/stratagem/framework_extensions/models/mocking.rb", "lib/stratagem/framework_extensions/models/tracing.rb", "lib/stratagem/framework_extensions/rails.rb", "lib/stratagem/framework_extensions/rails2/action_controller.rb", "lib/stratagem/framework_extensions/rails2/action_mailer.rb", "lib/stratagem/framework_extensions/rails3/parameters.rb", "lib/stratagem/interface/browser.rb", "lib/stratagem/interface/public/images/backgrounds/content.png", "lib/stratagem/interface/public/images/backgrounds/shadow.png", "lib/stratagem/interface/public/javascripts/jquery-1.4.2.min.js", "lib/stratagem/interface/public/javascripts/stratagem.js", "lib/stratagem/interface/public/javascripts/stratagem_debug.js", "lib/stratagem/interface/public/stylesheets/960.css", "lib/stratagem/interface/public/stylesheets/reset.css", "lib/stratagem/interface/public/stylesheets/stratagem.css", "lib/stratagem/interface/public/stylesheets/stratagem_debug.css", "lib/stratagem/interface/views/debug.haml", "lib/stratagem/interface/views/index.haml", "lib/stratagem/labs/auto_mock.rb", "lib/stratagem/labs/crawler.rb", "lib/stratagem/logger.rb", "lib/stratagem/model.rb", "lib/stratagem/model/application.rb", "lib/stratagem/model/components/base.rb", "lib/stratagem/model/components/controller.rb", "lib/stratagem/model/components/model.rb", "lib/stratagem/model/components/reference.rb", "lib/stratagem/model/components/route.rb", "lib/stratagem/model/components/static_file.rb", "lib/stratagem/model/components/view.rb", "lib/stratagem/model/parse_util.rb", "lib/stratagem/model_builder.rb", "lib/stratagem/recipes/deploy.rb", "lib/stratagem/scan.rb", "lib/stratagem/scan/checks/capistrano/secure_deploy.rb", "lib/stratagem/scan/checks/email_address.rb", "lib/stratagem/scan/checks/error_pages.rb", "lib/stratagem/scan/result.rb", "lib/stratagem/scanner.rb", "lib/stratagem/site_crawler.rb", "lib/stratagem/snapshot.rb", "templates/install/environments/stratagem.rb.erb", "templates/install/tasks/stratagem.rake", "stratagem.gemspec"]
+  s.extra_rdoc_files = ["bin/stratagem", "lib/bootstrap.rb", "lib/generators/stratagem/install/USAGE", "lib/generators/stratagem/install/install_base.rb", "lib/generators/stratagem/install/install_generator.rb", "lib/stratagem.rb", "lib/stratagem/authentication.rb", "lib/stratagem/auto_mock.rb", "lib/stratagem/auto_mock/aquifer.rb", "lib/stratagem/auto_mock/factory.rb", "lib/stratagem/auto_mock/value_generator.rb", "lib/stratagem/blocker.rb", "lib/stratagem/client.rb", "lib/stratagem/command.rb", "lib/stratagem/commands.rb", "lib/stratagem/commands/analyze.rb", "lib/stratagem/commands/base.rb", "lib/stratagem/commands/devel_mock.rb", "lib/stratagem/crawler.rb", "lib/stratagem/crawler/authentication.rb", "lib/stratagem/crawler/form.rb", "lib/stratagem/crawler/html_utils.rb", "lib/stratagem/crawler/parameter_resolver.rb", "lib/stratagem/crawler/route_invoker.rb", "lib/stratagem/crawler/session.rb", "lib/stratagem/crawler/site_model.rb", "lib/stratagem/crawler/trace_utils.rb", "lib/stratagem/extensions.rb", "lib/stratagem/extensions/class.rb", "lib/stratagem/extensions/hash.rb", "lib/stratagem/extensions/module.rb", "lib/stratagem/extensions/net.rb", "lib/stratagem/extensions/object.rb", "lib/stratagem/extensions/red_parse.rb", "lib/stratagem/extensions/string.rb", "lib/stratagem/extensions/trace_compression.rb", "lib/stratagem/framework_extensions.rb", "lib/stratagem/framework_extensions/method_invocation.rb", "lib/stratagem/framework_extensions/models.rb", "lib/stratagem/framework_extensions/models/adapters/active_record/detect.rb", "lib/stratagem/framework_extensions/models/adapters/active_record/extensions.rb", "lib/stratagem/framework_extensions/models/adapters/active_record/metadata.rb", "lib/stratagem/framework_extensions/models/adapters/active_record/tracing.rb", "lib/stratagem/framework_extensions/models/adapters/authlogic/detect.rb", "lib/stratagem/framework_extensions/models/adapters/authlogic/extensions.rb", "lib/stratagem/framework_extensions/models/adapters/authlogic/metadata.rb", "lib/stratagem/framework_extensions/models/adapters/authlogic/tracing.rb", "lib/stratagem/framework_extensions/models/adapters/common/detect.rb", "lib/stratagem/framework_extensions/models/adapters/common/extensions.rb", "lib/stratagem/framework_extensions/models/adapters/common/metadata.rb", "lib/stratagem/framework_extensions/models/adapters/common/tracing.rb", "lib/stratagem/framework_extensions/models/adapters/devise/detect.rb", "lib/stratagem/framework_extensions/models/adapters/devise/extensions.rb", "lib/stratagem/framework_extensions/models/adapters/devise/metadata.rb", "lib/stratagem/framework_extensions/models/adapters/devise/tracing.rb", "lib/stratagem/framework_extensions/models/adapters/friendly_id/detect.rb", "lib/stratagem/framework_extensions/models/adapters/friendly_id/extensions.rb", "lib/stratagem/framework_extensions/models/adapters/friendly_id/metadata.rb", "lib/stratagem/framework_extensions/models/adapters/friendly_id/tracing.rb", "lib/stratagem/framework_extensions/models/adapters/restful_authentication/detect.rb", "lib/stratagem/framework_extensions/models/adapters/restful_authentication/extensions.rb", "lib/stratagem/framework_extensions/models/adapters/restful_authentication/metadata.rb", "lib/stratagem/framework_extensions/models/adapters/restful_authentication/tracing.rb", "lib/stratagem/framework_extensions/models/adapters/util/authentication_metadata.rb", "lib/stratagem/framework_extensions/models/annotations.rb", "lib/stratagem/framework_extensions/models/detect.rb", "lib/stratagem/framework_extensions/models/metadata.rb", "lib/stratagem/framework_extensions/models/mocking.rb", "lib/stratagem/framework_extensions/models/tracing.rb", "lib/stratagem/framework_extensions/rails.rb", "lib/stratagem/framework_extensions/rails2/action_controller.rb", "lib/stratagem/framework_extensions/rails2/action_mailer.rb", "lib/stratagem/framework_extensions/rails3/parameters.rb", "lib/stratagem/framework_extensions/request_forgery_protection.rb", "lib/stratagem/interface/browser.rb", "lib/stratagem/interface/public/images/backgrounds/content.png", "lib/stratagem/interface/public/images/backgrounds/shadow.png", "lib/stratagem/interface/public/javascripts/jquery-1.4.2.min.js", "lib/stratagem/interface/public/javascripts/stratagem.js", "lib/stratagem/interface/public/javascripts/stratagem_debug.js", "lib/stratagem/interface/public/stylesheets/960.css", "lib/stratagem/interface/public/stylesheets/reset.css", "lib/stratagem/interface/public/stylesheets/stratagem.css", "lib/stratagem/interface/public/stylesheets/stratagem_debug.css", "lib/stratagem/interface/views/debug.haml", "lib/stratagem/interface/views/index.haml", "lib/stratagem/labs/auto_mock.rb", "lib/stratagem/labs/crawler.rb", "lib/stratagem/logger.rb", "lib/stratagem/model.rb", "lib/stratagem/model/application.rb", "lib/stratagem/model/components/base.rb", "lib/stratagem/model/components/controller.rb", "lib/stratagem/model/components/model.rb", "lib/stratagem/model/components/reference.rb", "lib/stratagem/model/components/route.rb", "lib/stratagem/model/components/static_file.rb", "lib/stratagem/model/components/view.rb", "lib/stratagem/model/parse_util.rb", "lib/stratagem/model_builder.rb", "lib/stratagem/recipes/deploy.rb", "lib/stratagem/scan.rb", "lib/stratagem/scan/checks/capistrano/secure_deploy.rb", "lib/stratagem/scan/checks/email_address.rb", "lib/stratagem/scan/checks/error_pages.rb", "lib/stratagem/scan/result.rb", "lib/stratagem/scanner.rb", "lib/stratagem/site_crawler.rb", "lib/stratagem/snapshot.rb"]
+  s.files = ["Manifest", "Rakefile", "bin/stratagem", "generators/stratagem/stratagem_generator.rb", "init.rb", "lib/bootstrap.rb", "lib/generators/stratagem/install/USAGE", "lib/generators/stratagem/install/install_base.rb", "lib/generators/stratagem/install/install_generator.rb", "lib/stratagem.rb", "lib/stratagem/authentication.rb", "lib/stratagem/auto_mock.rb", "lib/stratagem/auto_mock/aquifer.rb", "lib/stratagem/auto_mock/factory.rb", "lib/stratagem/auto_mock/value_generator.rb", "lib/stratagem/blocker.rb", "lib/stratagem/client.rb", "lib/stratagem/command.rb", "lib/stratagem/commands.rb", "lib/stratagem/commands/analyze.rb", "lib/stratagem/commands/base.rb", "lib/stratagem/commands/devel_mock.rb", "lib/stratagem/crawler.rb", "lib/stratagem/crawler/authentication.rb", "lib/stratagem/crawler/form.rb", "lib/stratagem/crawler/html_utils.rb", "lib/stratagem/crawler/parameter_resolver.rb", "lib/stratagem/crawler/route_invoker.rb", "lib/stratagem/crawler/session.rb", "lib/stratagem/crawler/site_model.rb", "lib/stratagem/crawler/trace_utils.rb", "lib/stratagem/extensions.rb", "lib/stratagem/extensions/class.rb", "lib/stratagem/extensions/hash.rb", "lib/stratagem/extensions/module.rb", "lib/stratagem/extensions/net.rb", "lib/stratagem/extensions/object.rb", "lib/stratagem/extensions/red_parse.rb", "lib/stratagem/extensions/string.rb", "lib/stratagem/extensions/trace_compression.rb", "lib/stratagem/framework_extensions.rb", "lib/stratagem/framework_extensions/method_invocation.rb", "lib/stratagem/framework_extensions/models.rb", "lib/stratagem/framework_extensions/models/adapters/active_record/detect.rb", "lib/stratagem/framework_extensions/models/adapters/active_record/extensions.rb", "lib/stratagem/framework_extensions/models/adapters/active_record/metadata.rb", "lib/stratagem/framework_extensions/models/adapters/active_record/tracing.rb", "lib/stratagem/framework_extensions/models/adapters/authlogic/detect.rb", "lib/stratagem/framework_extensions/models/adapters/authlogic/extensions.rb", "lib/stratagem/framework_extensions/models/adapters/authlogic/metadata.rb", "lib/stratagem/framework_extensions/models/adapters/authlogic/tracing.rb", "lib/stratagem/framework_extensions/models/adapters/common/detect.rb", "lib/stratagem/framework_extensions/models/adapters/common/extensions.rb", "lib/stratagem/framework_extensions/models/adapters/common/metadata.rb", "lib/stratagem/framework_extensions/models/adapters/common/tracing.rb", "lib/stratagem/framework_extensions/models/adapters/devise/detect.rb", "lib/stratagem/framework_extensions/models/adapters/devise/extensions.rb", "lib/stratagem/framework_extensions/models/adapters/devise/metadata.rb", "lib/stratagem/framework_extensions/models/adapters/devise/tracing.rb", "lib/stratagem/framework_extensions/models/adapters/friendly_id/detect.rb", "lib/stratagem/framework_extensions/models/adapters/friendly_id/extensions.rb", "lib/stratagem/framework_extensions/models/adapters/friendly_id/metadata.rb", "lib/stratagem/framework_extensions/models/adapters/friendly_id/tracing.rb", "lib/stratagem/framework_extensions/models/adapters/restful_authentication/detect.rb", "lib/stratagem/framework_extensions/models/adapters/restful_authentication/extensions.rb", "lib/stratagem/framework_extensions/models/adapters/restful_authentication/metadata.rb", "lib/stratagem/framework_extensions/models/adapters/restful_authentication/tracing.rb", "lib/stratagem/framework_extensions/models/adapters/util/authentication_metadata.rb", "lib/stratagem/framework_extensions/models/annotations.rb", "lib/stratagem/framework_extensions/models/detect.rb", "lib/stratagem/framework_extensions/models/metadata.rb", "lib/stratagem/framework_extensions/models/mocking.rb", "lib/stratagem/framework_extensions/models/tracing.rb", "lib/stratagem/framework_extensions/rails.rb", "lib/stratagem/framework_extensions/rails2/action_controller.rb", "lib/stratagem/framework_extensions/rails2/action_mailer.rb", "lib/stratagem/framework_extensions/rails3/parameters.rb", "lib/stratagem/framework_extensions/request_forgery_protection.rb", "lib/stratagem/interface/browser.rb", "lib/stratagem/interface/public/images/backgrounds/content.png", "lib/stratagem/interface/public/images/backgrounds/shadow.png", "lib/stratagem/interface/public/javascripts/jquery-1.4.2.min.js", "lib/stratagem/interface/public/javascripts/stratagem.js", "lib/stratagem/interface/public/javascripts/stratagem_debug.js", "lib/stratagem/interface/public/stylesheets/960.css", "lib/stratagem/interface/public/stylesheets/reset.css", "lib/stratagem/interface/public/stylesheets/stratagem.css", "lib/stratagem/interface/public/stylesheets/stratagem_debug.css", "lib/stratagem/interface/views/debug.haml", "lib/stratagem/interface/views/index.haml", "lib/stratagem/labs/auto_mock.rb", "lib/stratagem/labs/crawler.rb", "lib/stratagem/logger.rb", "lib/stratagem/model.rb", "lib/stratagem/model/application.rb", "lib/stratagem/model/components/base.rb", "lib/stratagem/model/components/controller.rb", "lib/stratagem/model/components/model.rb", "lib/stratagem/model/components/reference.rb", "lib/stratagem/model/components/route.rb", "lib/stratagem/model/components/static_file.rb", "lib/stratagem/model/components/view.rb", "lib/stratagem/model/parse_util.rb", "lib/stratagem/model_builder.rb", "lib/stratagem/recipes/deploy.rb", "lib/stratagem/scan.rb", "lib/stratagem/scan/checks/capistrano/secure_deploy.rb", "lib/stratagem/scan/checks/email_address.rb", "lib/stratagem/scan/checks/error_pages.rb", "lib/stratagem/scan/result.rb", "lib/stratagem/scanner.rb", "lib/stratagem/site_crawler.rb", "lib/stratagem/snapshot.rb", "templates/install/environments/stratagem.rb.erb", "templates/install/tasks/stratagem.rake", "stratagem.gemspec"]
   s.homepage = %q{http://github.com/stratagem/stratagem}
   s.rdoc_options = ["--line-numbers", "--inline-source", "--title", "Stratagem"]
   s.require_paths = ["lib"]

data/templates/install/tasks/stratagem.rake

@@ -8,7 +8,7 @@ namespace :stratagem do
       ENV['RAILS_ENV'] = 'stratagem'
       RAILS_ENV = ENV['RAILS_ENV']
     end
-    require 'config/environment'
+    require './config/environment'
 
     raise "Unable to set the Rails environment" unless Rails.env == 'stratagem'
 

metadata

@@ -4,9 +4,9 @@ version: !ruby/object:Gem::Version
   prerelease: false
   segments: 
   - 0
-  - 1
-  - 9
-  version: 0.1.9
+  - 2
+  - 0
+  version: 0.2.0
 platform: ruby
 authors: 
 - Charles Grimes
@@ -14,7 +14,7 @@ autorequire:
 bindir: bin
 cert_chain: []
 
-date: 2010-09-30 00:00:00 -06:00
+date: 2010-10-06 00:00:00 -06:00
 default_executable: 
 dependencies: 
 - !ruby/object:Gem::Dependency 
@@ -203,6 +203,7 @@ extra_rdoc_files:
 - lib/stratagem/extensions/class.rb
 - lib/stratagem/extensions/hash.rb
 - lib/stratagem/extensions/module.rb
+- lib/stratagem/extensions/net.rb
 - lib/stratagem/extensions/object.rb
 - lib/stratagem/extensions/red_parse.rb
 - lib/stratagem/extensions/string.rb
@@ -210,10 +211,10 @@ extra_rdoc_files:
 - lib/stratagem/framework_extensions.rb
 - lib/stratagem/framework_extensions/method_invocation.rb
 - lib/stratagem/framework_extensions/models.rb
-- lib/stratagem/framework_extensions/models/adapters/active_model/detect.rb
-- lib/stratagem/framework_extensions/models/adapters/active_model/extensions.rb
-- lib/stratagem/framework_extensions/models/adapters/active_model/metadata.rb
-- lib/stratagem/framework_extensions/models/adapters/active_model/tracing.rb
+- lib/stratagem/framework_extensions/models/adapters/active_record/detect.rb
+- lib/stratagem/framework_extensions/models/adapters/active_record/extensions.rb
+- lib/stratagem/framework_extensions/models/adapters/active_record/metadata.rb
+- lib/stratagem/framework_extensions/models/adapters/active_record/tracing.rb
 - lib/stratagem/framework_extensions/models/adapters/authlogic/detect.rb
 - lib/stratagem/framework_extensions/models/adapters/authlogic/extensions.rb
 - lib/stratagem/framework_extensions/models/adapters/authlogic/metadata.rb
@@ -222,6 +223,10 @@ extra_rdoc_files:
 - lib/stratagem/framework_extensions/models/adapters/common/extensions.rb
 - lib/stratagem/framework_extensions/models/adapters/common/metadata.rb
 - lib/stratagem/framework_extensions/models/adapters/common/tracing.rb
+- lib/stratagem/framework_extensions/models/adapters/devise/detect.rb
+- lib/stratagem/framework_extensions/models/adapters/devise/extensions.rb
+- lib/stratagem/framework_extensions/models/adapters/devise/metadata.rb
+- lib/stratagem/framework_extensions/models/adapters/devise/tracing.rb
 - lib/stratagem/framework_extensions/models/adapters/friendly_id/detect.rb
 - lib/stratagem/framework_extensions/models/adapters/friendly_id/extensions.rb
 - lib/stratagem/framework_extensions/models/adapters/friendly_id/metadata.rb
@@ -240,6 +245,7 @@ extra_rdoc_files:
 - lib/stratagem/framework_extensions/rails2/action_controller.rb
 - lib/stratagem/framework_extensions/rails2/action_mailer.rb
 - lib/stratagem/framework_extensions/rails3/parameters.rb
+- lib/stratagem/framework_extensions/request_forgery_protection.rb
 - lib/stratagem/interface/browser.rb
 - lib/stratagem/interface/public/images/backgrounds/content.png
 - lib/stratagem/interface/public/images/backgrounds/shadow.png
@@ -311,6 +317,7 @@ files:
 - lib/stratagem/extensions/class.rb
 - lib/stratagem/extensions/hash.rb
 - lib/stratagem/extensions/module.rb
+- lib/stratagem/extensions/net.rb
 - lib/stratagem/extensions/object.rb
 - lib/stratagem/extensions/red_parse.rb
 - lib/stratagem/extensions/string.rb
@@ -318,10 +325,10 @@ files:
 - lib/stratagem/framework_extensions.rb
 - lib/stratagem/framework_extensions/method_invocation.rb
 - lib/stratagem/framework_extensions/models.rb
-- lib/stratagem/framework_extensions/models/adapters/active_model/detect.rb
-- lib/stratagem/framework_extensions/models/adapters/active_model/extensions.rb
-- lib/stratagem/framework_extensions/models/adapters/active_model/metadata.rb
-- lib/stratagem/framework_extensions/models/adapters/active_model/tracing.rb
+- lib/stratagem/framework_extensions/models/adapters/active_record/detect.rb
+- lib/stratagem/framework_extensions/models/adapters/active_record/extensions.rb
+- lib/stratagem/framework_extensions/models/adapters/active_record/metadata.rb
+- lib/stratagem/framework_extensions/models/adapters/active_record/tracing.rb
 - lib/stratagem/framework_extensions/models/adapters/authlogic/detect.rb
 - lib/stratagem/framework_extensions/models/adapters/authlogic/extensions.rb
 - lib/stratagem/framework_extensions/models/adapters/authlogic/metadata.rb
@@ -330,6 +337,10 @@ files:
 - lib/stratagem/framework_extensions/models/adapters/common/extensions.rb
 - lib/stratagem/framework_extensions/models/adapters/common/metadata.rb
 - lib/stratagem/framework_extensions/models/adapters/common/tracing.rb
+- lib/stratagem/framework_extensions/models/adapters/devise/detect.rb
+- lib/stratagem/framework_extensions/models/adapters/devise/extensions.rb
+- lib/stratagem/framework_extensions/models/adapters/devise/metadata.rb
+- lib/stratagem/framework_extensions/models/adapters/devise/tracing.rb
 - lib/stratagem/framework_extensions/models/adapters/friendly_id/detect.rb
 - lib/stratagem/framework_extensions/models/adapters/friendly_id/extensions.rb
 - lib/stratagem/framework_extensions/models/adapters/friendly_id/metadata.rb
@@ -348,6 +359,7 @@ files:
 - lib/stratagem/framework_extensions/rails2/action_controller.rb
 - lib/stratagem/framework_extensions/rails2/action_mailer.rb
 - lib/stratagem/framework_extensions/rails3/parameters.rb
+- lib/stratagem/framework_extensions/request_forgery_protection.rb
 - lib/stratagem/interface/browser.rb
 - lib/stratagem/interface/public/images/backgrounds/content.png
 - lib/stratagem/interface/public/images/backgrounds/shadow.png