vigilion-rails 1.0.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (67) hide show
  1. checksums.yaml +7 -0
  2. data/MIT-LICENSE +20 -0
  3. data/Rakefile +33 -0
  4. data/app/controllers/vigilion/vigilion_controller.rb +21 -0
  5. data/config/routes.rb +3 -0
  6. data/lib/generators/vigilion/install_generator.rb +22 -0
  7. data/lib/generators/vigilion/scan/USAGE +7 -0
  8. data/lib/generators/vigilion/scan/scan_generator.rb +20 -0
  9. data/lib/generators/vigilion/scan/templates/add_scan_results_columns.rb.erb +5 -0
  10. data/lib/tasks/vigilion.rake +12 -0
  11. data/lib/vigilion-rails.rb +55 -0
  12. data/lib/vigilion-rails/configuration.rb +13 -0
  13. data/lib/vigilion-rails/engine.rb +10 -0
  14. data/lib/vigilion-rails/integrations/local_integration.rb +7 -0
  15. data/lib/vigilion-rails/integrations/url_integration.rb +7 -0
  16. data/lib/vigilion-rails/version.rb +3 -0
  17. data/spec/dummy/README.rdoc +28 -0
  18. data/spec/dummy/Rakefile +6 -0
  19. data/spec/dummy/app/assets/javascripts/application.js +13 -0
  20. data/spec/dummy/app/assets/stylesheets/application.css +15 -0
  21. data/spec/dummy/app/controllers/application_controller.rb +5 -0
  22. data/spec/dummy/app/helpers/application_helper.rb +2 -0
  23. data/spec/dummy/app/models/agnostic_document.rb +7 -0
  24. data/spec/dummy/app/models/carrierwave_document.rb +4 -0
  25. data/spec/dummy/app/models/dragonfly_document.rb +4 -0
  26. data/spec/dummy/app/models/paperclip_document.rb +4 -0
  27. data/spec/dummy/app/uploaders/attachment_uploader.rb +50 -0
  28. data/spec/dummy/app/views/layouts/application.html.erb +14 -0
  29. data/spec/dummy/bin/bundle +3 -0
  30. data/spec/dummy/bin/rails +4 -0
  31. data/spec/dummy/bin/rake +4 -0
  32. data/spec/dummy/bin/setup +29 -0
  33. data/spec/dummy/config.ru +4 -0
  34. data/spec/dummy/config/application.rb +32 -0
  35. data/spec/dummy/config/boot.rb +5 -0
  36. data/spec/dummy/config/database.yml +25 -0
  37. data/spec/dummy/config/environment.rb +5 -0
  38. data/spec/dummy/config/environments/development.rb +41 -0
  39. data/spec/dummy/config/environments/production.rb +79 -0
  40. data/spec/dummy/config/environments/test.rb +42 -0
  41. data/spec/dummy/config/initializers/assets.rb +11 -0
  42. data/spec/dummy/config/initializers/backtrace_silencers.rb +7 -0
  43. data/spec/dummy/config/initializers/cookies_serializer.rb +3 -0
  44. data/spec/dummy/config/initializers/filter_parameter_logging.rb +4 -0
  45. data/spec/dummy/config/initializers/inflections.rb +16 -0
  46. data/spec/dummy/config/initializers/mime_types.rb +4 -0
  47. data/spec/dummy/config/initializers/session_store.rb +3 -0
  48. data/spec/dummy/config/initializers/wrap_parameters.rb +14 -0
  49. data/spec/dummy/config/locales/en.yml +23 -0
  50. data/spec/dummy/config/routes.rb +3 -0
  51. data/spec/dummy/config/secrets.yml +22 -0
  52. data/spec/dummy/db/migrate/20150616144220_create_carrierwave_documents.rb +8 -0
  53. data/spec/dummy/db/migrate/20150616144227_create_paperclip_documents.rb +8 -0
  54. data/spec/dummy/db/migrate/20150616144235_create_dragonfly_documents.rb +8 -0
  55. data/spec/dummy/db/migrate/20150616144544_create_agnostic_documents.rb +8 -0
  56. data/spec/dummy/db/schema.rb +61 -0
  57. data/spec/dummy/public/404.html +67 -0
  58. data/spec/dummy/public/422.html +67 -0
  59. data/spec/dummy/public/500.html +66 -0
  60. data/spec/dummy/public/favicon.ico +0 -0
  61. data/spec/helper_methods.rb +11 -0
  62. data/spec/lib/integrations/local_integration_spec.rb +13 -0
  63. data/spec/lib/vigilion_rails_spec.rb +122 -0
  64. data/spec/routing/vigilion_routing_spec.rb +9 -0
  65. data/spec/spec_helper.rb +87 -0
  66. data/spec/vigilion_rails_helper.rb +34 -0
  67. metadata +229 -0
@@ -0,0 +1,8 @@
1
+ class CreateAgnosticDocuments < ActiveRecord::Migration
2
+ def change
3
+ create_table :agnostic_documents do |t|
4
+ t.string :attachment_url
5
+ t.string :attachment_scan_results
6
+ end
7
+ end
8
+ end
@@ -0,0 +1,61 @@
1
+ # encoding: UTF-8
2
+ # This file is auto-generated from the current state of the database. Instead
3
+ # of editing this file, please use the migrations feature of Active Record to
4
+ # incrementally modify your database, and then regenerate this schema definition.
5
+ #
6
+ # Note that this schema.rb definition is the authoritative source for your
7
+ # database schema. If you need to create the application database on another
8
+ # system, you should be using db:schema:load, not running all the migrations
9
+ # from scratch. The latter is a flawed and unsustainable approach (the more migrations
10
+ # you'll amass, the slower it'll run and the greater likelihood for issues).
11
+ #
12
+ # It's strongly recommended that you check this file into your version control system.
13
+
14
+ ActiveRecord::Schema.define(version: 20150616144544) do
15
+
16
+ create_table "agnostic_documents", force: :cascade do |t|
17
+ t.string "attachment_url"
18
+ t.string "attachment_scan_results"
19
+ end
20
+
21
+ create_table "carrierwave_documents", force: :cascade do |t|
22
+ t.string "attachment"
23
+ t.string "attachment_scan_results"
24
+ end
25
+
26
+ create_table "documents", force: :cascade do |t|
27
+ t.string "name"
28
+ t.string "attachment"
29
+ t.string "attachment_scan_results"
30
+ t.datetime "created_at", null: false
31
+ t.datetime "updated_at", null: false
32
+ end
33
+
34
+ create_table "dragonfly_documents", force: :cascade do |t|
35
+ t.string "attachment_uid_file_name"
36
+ t.string "attachment_uid_content_type"
37
+ t.integer "attachment_uid_file_size"
38
+ t.datetime "attachment_uid_updated_at"
39
+ t.string "attachment_scan_results"
40
+ end
41
+
42
+ create_table "paperclip_documents", force: :cascade do |t|
43
+ t.string "attachment_file_name"
44
+ t.string "attachment_content_type"
45
+ t.integer "attachment_file_size"
46
+ t.datetime "attachment_updated_at"
47
+ t.string "attachment_scan_results"
48
+ end
49
+
50
+ create_table "users", force: :cascade do |t|
51
+ t.string "name"
52
+ t.datetime "created_at", null: false
53
+ t.datetime "updated_at", null: false
54
+ t.string "picture_file_name"
55
+ t.string "picture_content_type"
56
+ t.integer "picture_file_size"
57
+ t.datetime "picture_updated_at"
58
+ t.string "picture_scan_results"
59
+ end
60
+
61
+ end
@@ -0,0 +1,67 @@
1
+ <!DOCTYPE html>
2
+ <html>
3
+ <head>
4
+ <title>The page you were looking for doesn't exist (404)</title>
5
+ <meta name="viewport" content="width=device-width,initial-scale=1">
6
+ <style>
7
+ body {
8
+ background-color: #EFEFEF;
9
+ color: #2E2F30;
10
+ text-align: center;
11
+ font-family: arial, sans-serif;
12
+ margin: 0;
13
+ }
14
+
15
+ div.dialog {
16
+ width: 95%;
17
+ max-width: 33em;
18
+ margin: 4em auto 0;
19
+ }
20
+
21
+ div.dialog > div {
22
+ border: 1px solid #CCC;
23
+ border-right-color: #999;
24
+ border-left-color: #999;
25
+ border-bottom-color: #BBB;
26
+ border-top: #B00100 solid 4px;
27
+ border-top-left-radius: 9px;
28
+ border-top-right-radius: 9px;
29
+ background-color: white;
30
+ padding: 7px 12% 0;
31
+ box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
32
+ }
33
+
34
+ h1 {
35
+ font-size: 100%;
36
+ color: #730E15;
37
+ line-height: 1.5em;
38
+ }
39
+
40
+ div.dialog > p {
41
+ margin: 0 0 1em;
42
+ padding: 1em;
43
+ background-color: #F7F7F7;
44
+ border: 1px solid #CCC;
45
+ border-right-color: #999;
46
+ border-left-color: #999;
47
+ border-bottom-color: #999;
48
+ border-bottom-left-radius: 4px;
49
+ border-bottom-right-radius: 4px;
50
+ border-top-color: #DADADA;
51
+ color: #666;
52
+ box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
53
+ }
54
+ </style>
55
+ </head>
56
+
57
+ <body>
58
+ <!-- This file lives in public/404.html -->
59
+ <div class="dialog">
60
+ <div>
61
+ <h1>The page you were looking for doesn't exist.</h1>
62
+ <p>You may have mistyped the address or the page may have moved.</p>
63
+ </div>
64
+ <p>If you are the application owner check the logs for more information.</p>
65
+ </div>
66
+ </body>
67
+ </html>
@@ -0,0 +1,67 @@
1
+ <!DOCTYPE html>
2
+ <html>
3
+ <head>
4
+ <title>The change you wanted was rejected (422)</title>
5
+ <meta name="viewport" content="width=device-width,initial-scale=1">
6
+ <style>
7
+ body {
8
+ background-color: #EFEFEF;
9
+ color: #2E2F30;
10
+ text-align: center;
11
+ font-family: arial, sans-serif;
12
+ margin: 0;
13
+ }
14
+
15
+ div.dialog {
16
+ width: 95%;
17
+ max-width: 33em;
18
+ margin: 4em auto 0;
19
+ }
20
+
21
+ div.dialog > div {
22
+ border: 1px solid #CCC;
23
+ border-right-color: #999;
24
+ border-left-color: #999;
25
+ border-bottom-color: #BBB;
26
+ border-top: #B00100 solid 4px;
27
+ border-top-left-radius: 9px;
28
+ border-top-right-radius: 9px;
29
+ background-color: white;
30
+ padding: 7px 12% 0;
31
+ box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
32
+ }
33
+
34
+ h1 {
35
+ font-size: 100%;
36
+ color: #730E15;
37
+ line-height: 1.5em;
38
+ }
39
+
40
+ div.dialog > p {
41
+ margin: 0 0 1em;
42
+ padding: 1em;
43
+ background-color: #F7F7F7;
44
+ border: 1px solid #CCC;
45
+ border-right-color: #999;
46
+ border-left-color: #999;
47
+ border-bottom-color: #999;
48
+ border-bottom-left-radius: 4px;
49
+ border-bottom-right-radius: 4px;
50
+ border-top-color: #DADADA;
51
+ color: #666;
52
+ box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
53
+ }
54
+ </style>
55
+ </head>
56
+
57
+ <body>
58
+ <!-- This file lives in public/422.html -->
59
+ <div class="dialog">
60
+ <div>
61
+ <h1>The change you wanted was rejected.</h1>
62
+ <p>Maybe you tried to change something you didn't have access to.</p>
63
+ </div>
64
+ <p>If you are the application owner check the logs for more information.</p>
65
+ </div>
66
+ </body>
67
+ </html>
@@ -0,0 +1,66 @@
1
+ <!DOCTYPE html>
2
+ <html>
3
+ <head>
4
+ <title>We're sorry, but something went wrong (500)</title>
5
+ <meta name="viewport" content="width=device-width,initial-scale=1">
6
+ <style>
7
+ body {
8
+ background-color: #EFEFEF;
9
+ color: #2E2F30;
10
+ text-align: center;
11
+ font-family: arial, sans-serif;
12
+ margin: 0;
13
+ }
14
+
15
+ div.dialog {
16
+ width: 95%;
17
+ max-width: 33em;
18
+ margin: 4em auto 0;
19
+ }
20
+
21
+ div.dialog > div {
22
+ border: 1px solid #CCC;
23
+ border-right-color: #999;
24
+ border-left-color: #999;
25
+ border-bottom-color: #BBB;
26
+ border-top: #B00100 solid 4px;
27
+ border-top-left-radius: 9px;
28
+ border-top-right-radius: 9px;
29
+ background-color: white;
30
+ padding: 7px 12% 0;
31
+ box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
32
+ }
33
+
34
+ h1 {
35
+ font-size: 100%;
36
+ color: #730E15;
37
+ line-height: 1.5em;
38
+ }
39
+
40
+ div.dialog > p {
41
+ margin: 0 0 1em;
42
+ padding: 1em;
43
+ background-color: #F7F7F7;
44
+ border: 1px solid #CCC;
45
+ border-right-color: #999;
46
+ border-left-color: #999;
47
+ border-bottom-color: #999;
48
+ border-bottom-left-radius: 4px;
49
+ border-bottom-right-radius: 4px;
50
+ border-top-color: #DADADA;
51
+ color: #666;
52
+ box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
53
+ }
54
+ </style>
55
+ </head>
56
+
57
+ <body>
58
+ <!-- This file lives in public/500.html -->
59
+ <div class="dialog">
60
+ <div>
61
+ <h1>We're sorry, but something went wrong.</h1>
62
+ </div>
63
+ <p>If you are the application owner check the logs for more information.</p>
64
+ </div>
65
+ </body>
66
+ </html>
File without changes
@@ -0,0 +1,11 @@
1
+ module VigilionRails::HelperMethods
2
+ def disable_loopback
3
+ before do
4
+ Vigilion::Configuration.loopback = false
5
+ end
6
+
7
+ after do
8
+ Vigilion::Configuration.loopback = true
9
+ end
10
+ end
11
+ end
@@ -0,0 +1,13 @@
1
+ require "vigilion_rails_helper"
2
+
3
+ describe VigilionRails::LocalIntegration do
4
+ disable_loopback
5
+
6
+ describe "#scan" do
7
+ it "calls vigilion scanner" do
8
+ document = CarrierwaveDocument.new
9
+ expect(Vigilion).to receive(:scan_path)
10
+ document.scan_attachment!
11
+ end
12
+ end
13
+ end
@@ -0,0 +1,122 @@
1
+ require "vigilion_rails_helper"
2
+
3
+ describe VigilionRails do
4
+ describe "#clean?" do
5
+ context "without scan results" do
6
+ it "is not clean" do
7
+ document = AgnosticDocument.new
8
+ document.attachment_scan_results = nil
9
+ expect(document).not_to be_clean
10
+ end
11
+ end
12
+
13
+ context "with infected scan results" do
14
+ it "is not clean" do
15
+ document = AgnosticDocument.new
16
+ document.attachment_scan_results = "infected"
17
+ expect(document).not_to be_clean
18
+ end
19
+ end
20
+
21
+ context "with clean scan results" do
22
+ it "is clean" do
23
+ document = AgnosticDocument.new
24
+ document.attachment_scan_results = "clean"
25
+ expect(document).to be_clean
26
+ end
27
+ end
28
+ end
29
+
30
+ describe "#scan_attachment!" do
31
+ context "without loopback (normal behavior)" do
32
+ disable_loopback
33
+
34
+ it "calls vigilion scanner" do
35
+ document = AgnosticDocument.new
36
+ expect(Vigilion).to receive(:scan_url)
37
+ document.scan_attachment!
38
+ end
39
+ end
40
+
41
+ context "with loopback (local environments and tests)" do
42
+ it "doesn't call vigilion scanner" do
43
+ document = AgnosticDocument.create
44
+ expect(Vigilion).not_to receive(:scan_url)
45
+ document.scan_attachment!
46
+ end
47
+
48
+ # We want to simulate the real behavior so we don't provide
49
+ # the scan results without reloading the model.
50
+ # In a real scenario you also have to wait a random amount of
51
+ # time.
52
+ it "doesn't have scan results before reloading" do
53
+ Vigilion::Configuration.loopback_response = "infected"
54
+ document = AgnosticDocument.create
55
+ document.scan_attachment!
56
+
57
+ expect(document.attachment_scan_results).to eq nil
58
+ end
59
+
60
+ it "has scan results after reloading" do
61
+ Vigilion::Configuration.loopback_response = "infected"
62
+ document = AgnosticDocument.create
63
+ document.scan_attachment!
64
+ document.reload
65
+
66
+ expect(document.attachment_scan_results).to eq "infected"
67
+ end
68
+ end
69
+ end
70
+
71
+ describe "#on_scan_attachment" do
72
+ it "updates the scan column status" do
73
+ document = AgnosticDocument.new
74
+ document.on_scan_attachment status: "infected"
75
+ expect(document.attachment_scan_results).to eq "infected"
76
+ end
77
+ end
78
+
79
+ context "on save" do
80
+ disable_loopback
81
+
82
+ context "with a new instance" do
83
+ let(:document){ AgnosticDocument.new(attachment_url: 'http://something') }
84
+
85
+ it "calls vigilion scanner" do
86
+ expect(Vigilion).to receive(:scan_url)
87
+ document.save!
88
+ end
89
+ end
90
+
91
+ context "with a different attachment.url" do
92
+ it "calls vigilion scanner twice" do
93
+ document = AgnosticDocument.new(attachment_url: 'http://something')
94
+ expect(Vigilion).to receive(:scan_url).twice
95
+ document.save!
96
+ document.attachment_url = "http://different/url"
97
+ document.save!
98
+ end
99
+ end
100
+
101
+ context "with the same attachment.url" do
102
+ it "calls vigilion scanner once" do
103
+ document = AgnosticDocument.new(attachment_url: 'http://something')
104
+ expect(Vigilion).to receive(:scan_url).once
105
+ document.save!
106
+ document.save!
107
+ end
108
+
109
+ context "saving and retrieving the record" do
110
+ before do
111
+ document = AgnosticDocument.new(attachment_url: 'http://something')
112
+ expect(Vigilion).to receive(:scan_url).once
113
+ document.save!
114
+ end
115
+
116
+ it "doesn't call vigilion scanner" do
117
+ AgnosticDocument.last.save!
118
+ end
119
+ end
120
+ end
121
+ end
122
+ end
@@ -0,0 +1,9 @@
1
+ require "vigilion_rails_helper"
2
+
3
+ describe "VigilionController" do
4
+ describe "routing" do
5
+ it "routes to #index" do
6
+ expect(post("/vigilion/callback")).to route_to("vigilion/vigilion#callback")
7
+ end
8
+ end
9
+ end
@@ -0,0 +1,87 @@
1
+ # This file was generated by the `rails generate rspec:install` command. Conventionally, all
2
+ # specs live under a `spec` directory, which RSpec adds to the `$LOAD_PATH`.
3
+ # The generated `.rspec` file contains `--require spec_helper` which will cause
4
+ # this file to always be loaded, without a need to explicitly require it in any
5
+ # files.
6
+ #
7
+ # Given that it is always loaded, you are encouraged to keep this file as
8
+ # light-weight as possible. Requiring heavyweight dependencies from this file
9
+ # will add to the boot time of your test suite on EVERY test run, even for an
10
+ # individual file that may not need all of that loaded. Instead, consider making
11
+ # a separate helper file that requires the additional dependencies and performs
12
+ # the additional setup, and require it from the spec files that actually need
13
+ # it.
14
+ #
15
+ # The `.rspec` file also contains a few flags that are not defaults but that
16
+ # users commonly want.
17
+ #
18
+ # See http://rubydoc.info/gems/rspec-core/RSpec/Core/Configuration
19
+ RSpec.configure do |config|
20
+ # rspec-expectations config goes here. You can use an alternate
21
+ # assertion/expectation library such as wrong or the stdlib/minitest
22
+ # assertions if you prefer.
23
+ config.expect_with :rspec do |expectations|
24
+ # This option will default to `true` in RSpec 4. It makes the `description`
25
+ # and `failure_message` of custom matchers include text for helper methods
26
+ # defined using `chain`, e.g.:
27
+ # be_bigger_than(2).and_smaller_than(4).description
28
+ # # => "be bigger than 2 and smaller than 4"
29
+ # ...rather than:
30
+ # # => "be bigger than 2"
31
+ expectations.include_chain_clauses_in_custom_matcher_descriptions = true
32
+ end
33
+
34
+ # rspec-mocks config goes here. You can use an alternate test double
35
+ # library (such as bogus or mocha) by changing the `mock_with` option here.
36
+ config.mock_with :rspec do |mocks|
37
+ # Prevents you from mocking or stubbing a method that does not exist on
38
+ # a real object. This is generally recommended, and will default to
39
+ # `true` in RSpec 4.
40
+ mocks.verify_partial_doubles = true
41
+ end
42
+
43
+ # The settings below are suggested to provide a good initial experience
44
+ # with RSpec, but feel free to customize to your heart's content.
45
+ =begin
46
+ # These two settings work together to allow you to limit a spec run
47
+ # to individual examples or groups you care about by tagging them with
48
+ # `:focus` metadata. When nothing is tagged with `:focus`, all examples
49
+ # get run.
50
+ config.filter_run :focus
51
+ config.run_all_when_everything_filtered = true
52
+
53
+ # Limits the available syntax to the non-monkey patched syntax that is
54
+ # recommended. For more details, see:
55
+ # - http://myronmars.to/n/dev-blog/2012/06/rspecs-new-expectation-syntax
56
+ # - http://teaisaweso.me/blog/2013/05/27/rspecs-new-message-expectation-syntax/
57
+ # - http://myronmars.to/n/dev-blog/2014/05/notable-changes-in-rspec-3#new__config_option_to_disable_rspeccore_monkey_patching
58
+ config.disable_monkey_patching!
59
+
60
+ # Many RSpec users commonly either run the entire suite or an individual
61
+ # file, and it's useful to allow more verbose output when running an
62
+ # individual spec file.
63
+ if config.files_to_run.one?
64
+ # Use the documentation formatter for detailed output,
65
+ # unless a formatter has already been configured
66
+ # (e.g. via a command-line flag).
67
+ config.default_formatter = 'doc'
68
+ end
69
+
70
+ # Print the 10 slowest examples and example groups at the
71
+ # end of the spec run, to help surface which specs are running
72
+ # particularly slow.
73
+ config.profile_examples = 10
74
+
75
+ # Run specs in random order to surface order dependencies. If you find an
76
+ # order dependency and want to debug it, you can fix the order by providing
77
+ # the seed, which is printed after each run.
78
+ # --seed 1234
79
+ config.order = :random
80
+
81
+ # Seed global randomization in this process using the `--seed` CLI option.
82
+ # Setting this allows you to use `--seed` to deterministically reproduce
83
+ # test failures related to randomization by passing the same `--seed` value
84
+ # as the one that triggered the failure.
85
+ Kernel.srand config.seed
86
+ =end
87
+ end