Contents

require "spec_helper"

describe "Relevance::Tarantula::AttackHandler" do
  before do
    @handler = Relevance::Tarantula::AttackHandler.new
    attack = Relevance::Tarantula::Attack.new({:name => 'foo_name', :input => 'foo_code', :output => '<bad>'})
    @handler.stubs(:attacks).returns([attack])
  end
  
  it "lets safe documents through" do
    result = @handler.handle(Relevance::Tarantula::Result.new(:response => stub(:html? => true, :body => '<a href="/foo">good</a>')))
    result.should == nil
  end
  
  it "detects the supplied code" do
    result = @handler.handle(Relevance::Tarantula::Result.new(:response => stub(:html? => true, :body => '<a href="/foo"><bad></a>')))
    result.success.should == false
  end
end

describe "Attacks without an output specified" do
  it "never matches anything" do
    handler = Relevance::Tarantula::AttackHandler.new
    attack = Relevance::Tarantula::Attack.new({:name => 'foo_name', :input => 'foo_code'})
    Relevance::Tarantula::FormSubmission.stubs(:attacks).returns([attack])
    result = handler.handle(Relevance::Tarantula::Result.new(:response => stub(:html? => true, :body => '<a href="/foo">good</a>')))
    result.should == nil
  end
end

Version data entries

11 entries across 11 versions & 2 rubygems

Version	Path
codez-tarantula-0.5.5	spec/relevance/tarantula/attack_handler_spec.rb
codez-tarantula-0.5.4	spec/relevance/tarantula/attack_handler_spec.rb
codez-tarantula-0.5.3	spec/relevance/tarantula/attack_handler_spec.rb
codez-tarantula-0.5.1	spec/relevance/tarantula/attack_handler_spec.rb
codez-tarantula-0.5.0	spec/relevance/tarantula/attack_handler_spec.rb
tarantula-0.5.1	spec/relevance/tarantula/attack_handler_spec.rb
tarantula-0.5.0	spec/relevance/tarantula/attack_handler_spec.rb
tarantula-0.4.3	spec/relevance/tarantula/attack_handler_spec.rb
tarantula-0.4.2	spec/relevance/tarantula/attack_handler_spec.rb
tarantula-0.4.1	spec/relevance/tarantula/attack_handler_spec.rb
tarantula-0.4.0	spec/relevance/tarantula/attack_handler_spec.rb