unxf 1.0.0

data/test/test_unxf.rb

@@ -0,0 +1,85 @@
+require "test/unit"
+require "logger"
+require "stringio"
+require "rack"
+require "rack/lobster"
+require "unxf"
+
+class TestUnXF < Test::Unit::TestCase
+
+  def setup
+    @env = nil
+    @io = StringIO.new
+    @req = { "rack.logger" => Logger.new(@io) }
+    app = lambda { |env| @env = env; [ 200, {}, [] ] }
+    @app = Rack::ContentLength.new(Rack::ContentType.new(app, 'text/plain'))
+  end
+
+  def test_single_proxy
+    req = Rack::MockRequest.new(UnXF.new(@app))
+    env = {
+      "HTTP_X_FORWARDED_FOR" => "0.6.6.6",
+      "REMOTE_ADDR" => "127.0.0.1",
+    }
+    r = req.get("http://example.com/", @req.merge(env))
+    assert_equal 200, r.status.to_i
+    assert_equal "0.6.6.6", @env["REMOTE_ADDR"]
+    assert ! @env.key?("HTTP_X_FORWARDED_FOR")
+  end
+
+  def test_multiple_proxies
+    req = Rack::MockRequest.new(UnXF.new(@app))
+    env = {
+      "HTTP_X_FORWARDED_FOR" => "0.6.6.6,192.168.1.1",
+      "REMOTE_ADDR" => "127.0.0.1",
+    }
+    r = req.get("http://example.com/", @req.merge(env))
+    assert_equal "0.6.6.6", @env["REMOTE_ADDR"]
+    assert_equal 200, r.status.to_i
+    assert ! @env.key?("HTTP_X_FORWARDED_FOR")
+  end
+
+  def test_spoofed
+    req = Rack::MockRequest.new(UnXF.new(@app))
+    env = {
+      "HTTP_X_FORWARDED_FOR" => "0.6.6.6",
+      "REMOTE_ADDR" => "227.0.0.1",
+    }
+    r = req.get("http://example.com/", @req.merge(env))
+    assert_equal r.status.to_i, 400
+  end
+
+  def test_trusted_chain
+    req = Rack::MockRequest.new(UnXF.new(@app))
+    env = {
+      "HTTP_X_FORWARDED_FOR" => "0.6.6.6,192.168.0.1",
+      "REMOTE_ADDR" => "127.0.0.1",
+    }
+    r = req.get("http://example.com/", @req.merge(env))
+    assert_equal 200, r.status.to_i
+    assert_equal "0.6.6.6", @env["REMOTE_ADDR"]
+    assert ! @env.key?("HTTP_X_FORWARDED_FOR")
+  end
+
+  def test_spoofed_in_chain
+    req = Rack::MockRequest.new(UnXF.new(@app))
+    env = {
+      "HTTP_X_FORWARDED_FOR" => "0.6.6.6,8.8.8.8",
+      "REMOTE_ADDR" => "127.0.0.1",
+    }
+    r = req.get("http://example.com/", @req.merge(env))
+    assert_equal r.status.to_i, 400
+    assert_match /0\.6\.6\.6,8\.8\.8\.8/, @io.string
+  end
+
+  def test_spoofed_null_safe
+    req = Rack::MockRequest.new(UnXF.new(@app))
+    env = {
+      "HTTP_X_FORWARDED_FOR" => "\0.6.6.6,8.8.8.8",
+      "REMOTE_ADDR" => "127.0.0.1",
+    }
+    r = req.get("http://example.com/", @req.merge(env))
+    assert_equal r.status.to_i, 400
+    assert_match /\\x00\.6\.6\.6,8\.8\.8\.8/, @io.string
+  end
+end

data/unxf.gemspec

@@ -0,0 +1,27 @@
+ENV["VERSION"] or abort "VERSION= must be specified"
+manifest = File.readlines('.manifest').map! { |x| x.chomp! }
+test_files = manifest.grep(%r{\Atest/test_.*\.rb\z})
+require 'wrongdoc'
+extend Wrongdoc::Gemspec
+name, summary, title = readme_metadata
+
+Gem::Specification.new do |s|
+  s.name = %q{unxf}
+  s.version = ENV["VERSION"].dup
+  s.homepage = Wrongdoc.config[:rdoc_url]
+  s.authors = ["#{name} hackers"]
+  s.date = Time.now.utc.strftime('%Y-%m-%d')
+  s.description = readme_description
+  s.email = %q{unxf@librelist.org}
+  s.extra_rdoc_files = extra_rdoc_files(manifest)
+  s.files = manifest
+  s.rdoc_options = rdoc_options
+  s.rubyforge_project = %q{rainbows}
+  s.summary = summary
+  s.test_files = test_files
+  s.add_dependency('rack', '~> 1.1')
+  s.add_development_dependency('wrongdoc', '~> 1.5')
+  s.add_development_dependency('rpatricia', '~> 0.07')
+
+  # s.license = %w(GPL) # disabled for compatibility with older RubyGems
+end

metadata

@@ -0,0 +1,137 @@
+--- !ruby/object:Gem::Specification 
+name: unxf
+version: !ruby/object:Gem::Version 
+  hash: 23
+  prerelease: 
+  segments: 
+  - 1
+  - 0
+  - 0
+  version: 1.0.0
+platform: ruby
+authors: 
+- UnXF hackers
+autorequire: 
+bindir: bin
+cert_chain: []
+
+date: 2011-05-24 00:00:00 Z
+dependencies: 
+- !ruby/object:Gem::Dependency 
+  name: rack
+  prerelease: false
+  requirement: &id001 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ~>
+      - !ruby/object:Gem::Version 
+        hash: 13
+        segments: 
+        - 1
+        - 1
+        version: "1.1"
+  type: :runtime
+  version_requirements: *id001
+- !ruby/object:Gem::Dependency 
+  name: wrongdoc
+  prerelease: false
+  requirement: &id002 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ~>
+      - !ruby/object:Gem::Version 
+        hash: 5
+        segments: 
+        - 1
+        - 5
+        version: "1.5"
+  type: :development
+  version_requirements: *id002
+- !ruby/object:Gem::Dependency 
+  name: rpatricia
+  prerelease: false
+  requirement: &id003 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ~>
+      - !ruby/object:Gem::Version 
+        hash: 5
+        segments: 
+        - 0
+        - 7
+        version: "0.07"
+  type: :development
+  version_requirements: *id003
+description: |-
+  Removes X-Forwarded-For in the Rack environment and replaces REMOTE_ADDR
+  with the correct value (assuming REMOTE_ADDR and the X-Forwarded-For
+  chain is provided).
+email: unxf@librelist.org
+executables: []
+
+extensions: []
+
+extra_rdoc_files: 
+- README
+- NEWS
+- ChangeLog
+- LATEST
+- lib/unxf.rb
+- LICENSE
+files: 
+- .document
+- .gitignore
+- .manifest
+- .wrongdoc.yml
+- COPYING
+- ChangeLog
+- GIT-VERSION-FILE
+- GIT-VERSION-GEN
+- GNUmakefile
+- LATEST
+- LICENSE
+- NEWS
+- README
+- lib/unxf.rb
+- pkg.mk
+- setup.rb
+- test/test_unxf.rb
+- unxf.gemspec
+homepage: http://bogomips.org/unxf/
+licenses: []
+
+post_install_message: 
+rdoc_options: 
+- -t
+- UnXF - Un-X-Forward* the Rack environment
+- -W
+- http://bogomips.org/unxf.git/tree/%s
+require_paths: 
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement 
+  none: false
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      hash: 3
+      segments: 
+      - 0
+      version: "0"
+required_rubygems_version: !ruby/object:Gem::Requirement 
+  none: false
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      hash: 3
+      segments: 
+      - 0
+      version: "0"
+requirements: []
+
+rubyforge_project: rainbows
+rubygems_version: 1.8.2
+signing_key: 
+specification_version: 3
+summary: Un-X-Forward* the Rack environment
+test_files: 
+- test/test_unxf.rb