vigilion-rails 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (67) hide show
  1. checksums.yaml +7 -0
  2. data/MIT-LICENSE +20 -0
  3. data/Rakefile +33 -0
  4. data/app/controllers/vigilion/vigilion_controller.rb +21 -0
  5. data/config/routes.rb +3 -0
  6. data/lib/generators/vigilion/install_generator.rb +22 -0
  7. data/lib/generators/vigilion/scan/USAGE +7 -0
  8. data/lib/generators/vigilion/scan/scan_generator.rb +20 -0
  9. data/lib/generators/vigilion/scan/templates/add_scan_results_columns.rb.erb +5 -0
  10. data/lib/tasks/vigilion.rake +12 -0
  11. data/lib/vigilion-rails.rb +55 -0
  12. data/lib/vigilion-rails/configuration.rb +13 -0
  13. data/lib/vigilion-rails/engine.rb +10 -0
  14. data/lib/vigilion-rails/integrations/local_integration.rb +7 -0
  15. data/lib/vigilion-rails/integrations/url_integration.rb +7 -0
  16. data/lib/vigilion-rails/version.rb +3 -0
  17. data/spec/dummy/README.rdoc +28 -0
  18. data/spec/dummy/Rakefile +6 -0
  19. data/spec/dummy/app/assets/javascripts/application.js +13 -0
  20. data/spec/dummy/app/assets/stylesheets/application.css +15 -0
  21. data/spec/dummy/app/controllers/application_controller.rb +5 -0
  22. data/spec/dummy/app/helpers/application_helper.rb +2 -0
  23. data/spec/dummy/app/models/agnostic_document.rb +7 -0
  24. data/spec/dummy/app/models/carrierwave_document.rb +4 -0
  25. data/spec/dummy/app/models/dragonfly_document.rb +4 -0
  26. data/spec/dummy/app/models/paperclip_document.rb +4 -0
  27. data/spec/dummy/app/uploaders/attachment_uploader.rb +50 -0
  28. data/spec/dummy/app/views/layouts/application.html.erb +14 -0
  29. data/spec/dummy/bin/bundle +3 -0
  30. data/spec/dummy/bin/rails +4 -0
  31. data/spec/dummy/bin/rake +4 -0
  32. data/spec/dummy/bin/setup +29 -0
  33. data/spec/dummy/config.ru +4 -0
  34. data/spec/dummy/config/application.rb +32 -0
  35. data/spec/dummy/config/boot.rb +5 -0
  36. data/spec/dummy/config/database.yml +25 -0
  37. data/spec/dummy/config/environment.rb +5 -0
  38. data/spec/dummy/config/environments/development.rb +41 -0
  39. data/spec/dummy/config/environments/production.rb +79 -0
  40. data/spec/dummy/config/environments/test.rb +42 -0
  41. data/spec/dummy/config/initializers/assets.rb +11 -0
  42. data/spec/dummy/config/initializers/backtrace_silencers.rb +7 -0
  43. data/spec/dummy/config/initializers/cookies_serializer.rb +3 -0
  44. data/spec/dummy/config/initializers/filter_parameter_logging.rb +4 -0
  45. data/spec/dummy/config/initializers/inflections.rb +16 -0
  46. data/spec/dummy/config/initializers/mime_types.rb +4 -0
  47. data/spec/dummy/config/initializers/session_store.rb +3 -0
  48. data/spec/dummy/config/initializers/wrap_parameters.rb +14 -0
  49. data/spec/dummy/config/locales/en.yml +23 -0
  50. data/spec/dummy/config/routes.rb +3 -0
  51. data/spec/dummy/config/secrets.yml +22 -0
  52. data/spec/dummy/db/migrate/20150616144220_create_carrierwave_documents.rb +8 -0
  53. data/spec/dummy/db/migrate/20150616144227_create_paperclip_documents.rb +8 -0
  54. data/spec/dummy/db/migrate/20150616144235_create_dragonfly_documents.rb +8 -0
  55. data/spec/dummy/db/migrate/20150616144544_create_agnostic_documents.rb +8 -0
  56. data/spec/dummy/db/schema.rb +61 -0
  57. data/spec/dummy/public/404.html +67 -0
  58. data/spec/dummy/public/422.html +67 -0
  59. data/spec/dummy/public/500.html +66 -0
  60. data/spec/dummy/public/favicon.ico +0 -0
  61. data/spec/helper_methods.rb +11 -0
  62. data/spec/lib/integrations/local_integration_spec.rb +13 -0
  63. data/spec/lib/vigilion_rails_spec.rb +122 -0
  64. data/spec/routing/vigilion_routing_spec.rb +9 -0
  65. data/spec/spec_helper.rb +87 -0
  66. data/spec/vigilion_rails_helper.rb +34 -0
  67. metadata +229 -0
@@ -0,0 +1,8 @@
1
+ class CreateAgnosticDocuments < ActiveRecord::Migration
2
+ def change
3
+ create_table :agnostic_documents do |t|
4
+ t.string :attachment_url
5
+ t.string :attachment_scan_results
6
+ end
7
+ end
8
+ end
@@ -0,0 +1,61 @@
1
+ # encoding: UTF-8
2
+ # This file is auto-generated from the current state of the database. Instead
3
+ # of editing this file, please use the migrations feature of Active Record to
4
+ # incrementally modify your database, and then regenerate this schema definition.
5
+ #
6
+ # Note that this schema.rb definition is the authoritative source for your
7
+ # database schema. If you need to create the application database on another
8
+ # system, you should be using db:schema:load, not running all the migrations
9
+ # from scratch. The latter is a flawed and unsustainable approach (the more migrations
10
+ # you'll amass, the slower it'll run and the greater likelihood for issues).
11
+ #
12
+ # It's strongly recommended that you check this file into your version control system.
13
+
14
+ ActiveRecord::Schema.define(version: 20150616144544) do
15
+
16
+ create_table "agnostic_documents", force: :cascade do |t|
17
+ t.string "attachment_url"
18
+ t.string "attachment_scan_results"
19
+ end
20
+
21
+ create_table "carrierwave_documents", force: :cascade do |t|
22
+ t.string "attachment"
23
+ t.string "attachment_scan_results"
24
+ end
25
+
26
+ create_table "documents", force: :cascade do |t|
27
+ t.string "name"
28
+ t.string "attachment"
29
+ t.string "attachment_scan_results"
30
+ t.datetime "created_at", null: false
31
+ t.datetime "updated_at", null: false
32
+ end
33
+
34
+ create_table "dragonfly_documents", force: :cascade do |t|
35
+ t.string "attachment_uid_file_name"
36
+ t.string "attachment_uid_content_type"
37
+ t.integer "attachment_uid_file_size"
38
+ t.datetime "attachment_uid_updated_at"
39
+ t.string "attachment_scan_results"
40
+ end
41
+
42
+ create_table "paperclip_documents", force: :cascade do |t|
43
+ t.string "attachment_file_name"
44
+ t.string "attachment_content_type"
45
+ t.integer "attachment_file_size"
46
+ t.datetime "attachment_updated_at"
47
+ t.string "attachment_scan_results"
48
+ end
49
+
50
+ create_table "users", force: :cascade do |t|
51
+ t.string "name"
52
+ t.datetime "created_at", null: false
53
+ t.datetime "updated_at", null: false
54
+ t.string "picture_file_name"
55
+ t.string "picture_content_type"
56
+ t.integer "picture_file_size"
57
+ t.datetime "picture_updated_at"
58
+ t.string "picture_scan_results"
59
+ end
60
+
61
+ end
@@ -0,0 +1,67 @@
1
+ <!DOCTYPE html>
2
+ <html>
3
+ <head>
4
+ <title>The page you were looking for doesn't exist (404)</title>
5
+ <meta name="viewport" content="width=device-width,initial-scale=1">
6
+ <style>
7
+ body {
8
+ background-color: #EFEFEF;
9
+ color: #2E2F30;
10
+ text-align: center;
11
+ font-family: arial, sans-serif;
12
+ margin: 0;
13
+ }
14
+
15
+ div.dialog {
16
+ width: 95%;
17
+ max-width: 33em;
18
+ margin: 4em auto 0;
19
+ }
20
+
21
+ div.dialog > div {
22
+ border: 1px solid #CCC;
23
+ border-right-color: #999;
24
+ border-left-color: #999;
25
+ border-bottom-color: #BBB;
26
+ border-top: #B00100 solid 4px;
27
+ border-top-left-radius: 9px;
28
+ border-top-right-radius: 9px;
29
+ background-color: white;
30
+ padding: 7px 12% 0;
31
+ box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
32
+ }
33
+
34
+ h1 {
35
+ font-size: 100%;
36
+ color: #730E15;
37
+ line-height: 1.5em;
38
+ }
39
+
40
+ div.dialog > p {
41
+ margin: 0 0 1em;
42
+ padding: 1em;
43
+ background-color: #F7F7F7;
44
+ border: 1px solid #CCC;
45
+ border-right-color: #999;
46
+ border-left-color: #999;
47
+ border-bottom-color: #999;
48
+ border-bottom-left-radius: 4px;
49
+ border-bottom-right-radius: 4px;
50
+ border-top-color: #DADADA;
51
+ color: #666;
52
+ box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
53
+ }
54
+ </style>
55
+ </head>
56
+
57
+ <body>
58
+ <!-- This file lives in public/404.html -->
59
+ <div class="dialog">
60
+ <div>
61
+ <h1>The page you were looking for doesn't exist.</h1>
62
+ <p>You may have mistyped the address or the page may have moved.</p>
63
+ </div>
64
+ <p>If you are the application owner check the logs for more information.</p>
65
+ </div>
66
+ </body>
67
+ </html>
@@ -0,0 +1,67 @@
1
+ <!DOCTYPE html>
2
+ <html>
3
+ <head>
4
+ <title>The change you wanted was rejected (422)</title>
5
+ <meta name="viewport" content="width=device-width,initial-scale=1">
6
+ <style>
7
+ body {
8
+ background-color: #EFEFEF;
9
+ color: #2E2F30;
10
+ text-align: center;
11
+ font-family: arial, sans-serif;
12
+ margin: 0;
13
+ }
14
+
15
+ div.dialog {
16
+ width: 95%;
17
+ max-width: 33em;
18
+ margin: 4em auto 0;
19
+ }
20
+
21
+ div.dialog > div {
22
+ border: 1px solid #CCC;
23
+ border-right-color: #999;
24
+ border-left-color: #999;
25
+ border-bottom-color: #BBB;
26
+ border-top: #B00100 solid 4px;
27
+ border-top-left-radius: 9px;
28
+ border-top-right-radius: 9px;
29
+ background-color: white;
30
+ padding: 7px 12% 0;
31
+ box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
32
+ }
33
+
34
+ h1 {
35
+ font-size: 100%;
36
+ color: #730E15;
37
+ line-height: 1.5em;
38
+ }
39
+
40
+ div.dialog > p {
41
+ margin: 0 0 1em;
42
+ padding: 1em;
43
+ background-color: #F7F7F7;
44
+ border: 1px solid #CCC;
45
+ border-right-color: #999;
46
+ border-left-color: #999;
47
+ border-bottom-color: #999;
48
+ border-bottom-left-radius: 4px;
49
+ border-bottom-right-radius: 4px;
50
+ border-top-color: #DADADA;
51
+ color: #666;
52
+ box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
53
+ }
54
+ </style>
55
+ </head>
56
+
57
+ <body>
58
+ <!-- This file lives in public/422.html -->
59
+ <div class="dialog">
60
+ <div>
61
+ <h1>The change you wanted was rejected.</h1>
62
+ <p>Maybe you tried to change something you didn't have access to.</p>
63
+ </div>
64
+ <p>If you are the application owner check the logs for more information.</p>
65
+ </div>
66
+ </body>
67
+ </html>
@@ -0,0 +1,66 @@
1
+ <!DOCTYPE html>
2
+ <html>
3
+ <head>
4
+ <title>We're sorry, but something went wrong (500)</title>
5
+ <meta name="viewport" content="width=device-width,initial-scale=1">
6
+ <style>
7
+ body {
8
+ background-color: #EFEFEF;
9
+ color: #2E2F30;
10
+ text-align: center;
11
+ font-family: arial, sans-serif;
12
+ margin: 0;
13
+ }
14
+
15
+ div.dialog {
16
+ width: 95%;
17
+ max-width: 33em;
18
+ margin: 4em auto 0;
19
+ }
20
+
21
+ div.dialog > div {
22
+ border: 1px solid #CCC;
23
+ border-right-color: #999;
24
+ border-left-color: #999;
25
+ border-bottom-color: #BBB;
26
+ border-top: #B00100 solid 4px;
27
+ border-top-left-radius: 9px;
28
+ border-top-right-radius: 9px;
29
+ background-color: white;
30
+ padding: 7px 12% 0;
31
+ box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
32
+ }
33
+
34
+ h1 {
35
+ font-size: 100%;
36
+ color: #730E15;
37
+ line-height: 1.5em;
38
+ }
39
+
40
+ div.dialog > p {
41
+ margin: 0 0 1em;
42
+ padding: 1em;
43
+ background-color: #F7F7F7;
44
+ border: 1px solid #CCC;
45
+ border-right-color: #999;
46
+ border-left-color: #999;
47
+ border-bottom-color: #999;
48
+ border-bottom-left-radius: 4px;
49
+ border-bottom-right-radius: 4px;
50
+ border-top-color: #DADADA;
51
+ color: #666;
52
+ box-shadow: 0 3px 8px rgba(50, 50, 50, 0.17);
53
+ }
54
+ </style>
55
+ </head>
56
+
57
+ <body>
58
+ <!-- This file lives in public/500.html -->
59
+ <div class="dialog">
60
+ <div>
61
+ <h1>We're sorry, but something went wrong.</h1>
62
+ </div>
63
+ <p>If you are the application owner check the logs for more information.</p>
64
+ </div>
65
+ </body>
66
+ </html>
File without changes
@@ -0,0 +1,11 @@
1
+ module VigilionRails::HelperMethods
2
+ def disable_loopback
3
+ before do
4
+ Vigilion::Configuration.loopback = false
5
+ end
6
+
7
+ after do
8
+ Vigilion::Configuration.loopback = true
9
+ end
10
+ end
11
+ end
@@ -0,0 +1,13 @@
1
+ require "vigilion_rails_helper"
2
+
3
+ describe VigilionRails::LocalIntegration do
4
+ disable_loopback
5
+
6
+ describe "#scan" do
7
+ it "calls vigilion scanner" do
8
+ document = CarrierwaveDocument.new
9
+ expect(Vigilion).to receive(:scan_path)
10
+ document.scan_attachment!
11
+ end
12
+ end
13
+ end
@@ -0,0 +1,122 @@
1
+ require "vigilion_rails_helper"
2
+
3
+ describe VigilionRails do
4
+ describe "#clean?" do
5
+ context "without scan results" do
6
+ it "is not clean" do
7
+ document = AgnosticDocument.new
8
+ document.attachment_scan_results = nil
9
+ expect(document).not_to be_clean
10
+ end
11
+ end
12
+
13
+ context "with infected scan results" do
14
+ it "is not clean" do
15
+ document = AgnosticDocument.new
16
+ document.attachment_scan_results = "infected"
17
+ expect(document).not_to be_clean
18
+ end
19
+ end
20
+
21
+ context "with clean scan results" do
22
+ it "is clean" do
23
+ document = AgnosticDocument.new
24
+ document.attachment_scan_results = "clean"
25
+ expect(document).to be_clean
26
+ end
27
+ end
28
+ end
29
+
30
+ describe "#scan_attachment!" do
31
+ context "without loopback (normal behavior)" do
32
+ disable_loopback
33
+
34
+ it "calls vigilion scanner" do
35
+ document = AgnosticDocument.new
36
+ expect(Vigilion).to receive(:scan_url)
37
+ document.scan_attachment!
38
+ end
39
+ end
40
+
41
+ context "with loopback (local environments and tests)" do
42
+ it "doesn't call vigilion scanner" do
43
+ document = AgnosticDocument.create
44
+ expect(Vigilion).not_to receive(:scan_url)
45
+ document.scan_attachment!
46
+ end
47
+
48
+ # We want to simulate the real behavior so we don't provide
49
+ # the scan results without reloading the model.
50
+ # In a real scenario you also have to wait a random amount of
51
+ # time.
52
+ it "doesn't have scan results before reloading" do
53
+ Vigilion::Configuration.loopback_response = "infected"
54
+ document = AgnosticDocument.create
55
+ document.scan_attachment!
56
+
57
+ expect(document.attachment_scan_results).to eq nil
58
+ end
59
+
60
+ it "has scan results after reloading" do
61
+ Vigilion::Configuration.loopback_response = "infected"
62
+ document = AgnosticDocument.create
63
+ document.scan_attachment!
64
+ document.reload
65
+
66
+ expect(document.attachment_scan_results).to eq "infected"
67
+ end
68
+ end
69
+ end
70
+
71
+ describe "#on_scan_attachment" do
72
+ it "updates the scan column status" do
73
+ document = AgnosticDocument.new
74
+ document.on_scan_attachment status: "infected"
75
+ expect(document.attachment_scan_results).to eq "infected"
76
+ end
77
+ end
78
+
79
+ context "on save" do
80
+ disable_loopback
81
+
82
+ context "with a new instance" do
83
+ let(:document){ AgnosticDocument.new(attachment_url: 'http://something') }
84
+
85
+ it "calls vigilion scanner" do
86
+ expect(Vigilion).to receive(:scan_url)
87
+ document.save!
88
+ end
89
+ end
90
+
91
+ context "with a different attachment.url" do
92
+ it "calls vigilion scanner twice" do
93
+ document = AgnosticDocument.new(attachment_url: 'http://something')
94
+ expect(Vigilion).to receive(:scan_url).twice
95
+ document.save!
96
+ document.attachment_url = "http://different/url"
97
+ document.save!
98
+ end
99
+ end
100
+
101
+ context "with the same attachment.url" do
102
+ it "calls vigilion scanner once" do
103
+ document = AgnosticDocument.new(attachment_url: 'http://something')
104
+ expect(Vigilion).to receive(:scan_url).once
105
+ document.save!
106
+ document.save!
107
+ end
108
+
109
+ context "saving and retrieving the record" do
110
+ before do
111
+ document = AgnosticDocument.new(attachment_url: 'http://something')
112
+ expect(Vigilion).to receive(:scan_url).once
113
+ document.save!
114
+ end
115
+
116
+ it "doesn't call vigilion scanner" do
117
+ AgnosticDocument.last.save!
118
+ end
119
+ end
120
+ end
121
+ end
122
+ end
@@ -0,0 +1,9 @@
1
+ require "vigilion_rails_helper"
2
+
3
+ describe "VigilionController" do
4
+ describe "routing" do
5
+ it "routes to #index" do
6
+ expect(post("/vigilion/callback")).to route_to("vigilion/vigilion#callback")
7
+ end
8
+ end
9
+ end
@@ -0,0 +1,87 @@
1
+ # This file was generated by the `rails generate rspec:install` command. Conventionally, all
2
+ # specs live under a `spec` directory, which RSpec adds to the `$LOAD_PATH`.
3
+ # The generated `.rspec` file contains `--require spec_helper` which will cause
4
+ # this file to always be loaded, without a need to explicitly require it in any
5
+ # files.
6
+ #
7
+ # Given that it is always loaded, you are encouraged to keep this file as
8
+ # light-weight as possible. Requiring heavyweight dependencies from this file
9
+ # will add to the boot time of your test suite on EVERY test run, even for an
10
+ # individual file that may not need all of that loaded. Instead, consider making
11
+ # a separate helper file that requires the additional dependencies and performs
12
+ # the additional setup, and require it from the spec files that actually need
13
+ # it.
14
+ #
15
+ # The `.rspec` file also contains a few flags that are not defaults but that
16
+ # users commonly want.
17
+ #
18
+ # See http://rubydoc.info/gems/rspec-core/RSpec/Core/Configuration
19
+ RSpec.configure do |config|
20
+ # rspec-expectations config goes here. You can use an alternate
21
+ # assertion/expectation library such as wrong or the stdlib/minitest
22
+ # assertions if you prefer.
23
+ config.expect_with :rspec do |expectations|
24
+ # This option will default to `true` in RSpec 4. It makes the `description`
25
+ # and `failure_message` of custom matchers include text for helper methods
26
+ # defined using `chain`, e.g.:
27
+ # be_bigger_than(2).and_smaller_than(4).description
28
+ # # => "be bigger than 2 and smaller than 4"
29
+ # ...rather than:
30
+ # # => "be bigger than 2"
31
+ expectations.include_chain_clauses_in_custom_matcher_descriptions = true
32
+ end
33
+
34
+ # rspec-mocks config goes here. You can use an alternate test double
35
+ # library (such as bogus or mocha) by changing the `mock_with` option here.
36
+ config.mock_with :rspec do |mocks|
37
+ # Prevents you from mocking or stubbing a method that does not exist on
38
+ # a real object. This is generally recommended, and will default to
39
+ # `true` in RSpec 4.
40
+ mocks.verify_partial_doubles = true
41
+ end
42
+
43
+ # The settings below are suggested to provide a good initial experience
44
+ # with RSpec, but feel free to customize to your heart's content.
45
+ =begin
46
+ # These two settings work together to allow you to limit a spec run
47
+ # to individual examples or groups you care about by tagging them with
48
+ # `:focus` metadata. When nothing is tagged with `:focus`, all examples
49
+ # get run.
50
+ config.filter_run :focus
51
+ config.run_all_when_everything_filtered = true
52
+
53
+ # Limits the available syntax to the non-monkey patched syntax that is
54
+ # recommended. For more details, see:
55
+ # - http://myronmars.to/n/dev-blog/2012/06/rspecs-new-expectation-syntax
56
+ # - http://teaisaweso.me/blog/2013/05/27/rspecs-new-message-expectation-syntax/
57
+ # - http://myronmars.to/n/dev-blog/2014/05/notable-changes-in-rspec-3#new__config_option_to_disable_rspeccore_monkey_patching
58
+ config.disable_monkey_patching!
59
+
60
+ # Many RSpec users commonly either run the entire suite or an individual
61
+ # file, and it's useful to allow more verbose output when running an
62
+ # individual spec file.
63
+ if config.files_to_run.one?
64
+ # Use the documentation formatter for detailed output,
65
+ # unless a formatter has already been configured
66
+ # (e.g. via a command-line flag).
67
+ config.default_formatter = 'doc'
68
+ end
69
+
70
+ # Print the 10 slowest examples and example groups at the
71
+ # end of the spec run, to help surface which specs are running
72
+ # particularly slow.
73
+ config.profile_examples = 10
74
+
75
+ # Run specs in random order to surface order dependencies. If you find an
76
+ # order dependency and want to debug it, you can fix the order by providing
77
+ # the seed, which is printed after each run.
78
+ # --seed 1234
79
+ config.order = :random
80
+
81
+ # Seed global randomization in this process using the `--seed` CLI option.
82
+ # Setting this allows you to use `--seed` to deterministically reproduce
83
+ # test failures related to randomization by passing the same `--seed` value
84
+ # as the one that triggered the failure.
85
+ Kernel.srand config.seed
86
+ =end
87
+ end