Sha256: 280bf93052a274ad6f5bf8320c3c9a9bc92a942114bb23e2e0147335e68ee7cb

Contents?: true

Size: 1.48 KB

Versions: 8

Compression:

Stored size: 1.48 KB

Contents

require 'spec_helper'
describe "The CVE-2015-1840 vulnerability" do
	before(:all) do
		@check_a = Dawn::Kb::CVE_2015_1840_a.new
		@check_b = Dawn::Kb::CVE_2015_1840_b.new
	end
  it "is reported when vulnerable jquery-rails gem is used (3.1.2)" do
    @check_a.dependencies = [{:name=>"jquery-rails", :version=>'3.1.2'}]
    expect(@check_a.vuln?).to   eq(true)
  end
  it "is reported when vulnerable jquery-rails gem is used 4.0.1)" do
    @check_a.dependencies = [{:name=>"jquery-rails", :version=>'4.0.1'}]
    expect(@check_a.vuln?).to   eq(true)
  end
  it "is reported when vulnerable jquery-ujs gem is used 1.0.3)" do
    @check_b.dependencies = [{:name=>"jquery-ujs", :version=>'1.0.3'}]
    expect(@check_b.vuln?).to   eq(true)
  end

  it "is reported when vulnerable jquery-rails gem is used (3.1.3)" do
    @check_a.dependencies = [{:name=>"jquery-rails", :version=>'3.1.3'}]
    expect(@check_a.vuln?).to   eq(false)
  end
  it "is reported when vulnerable jquery-rails gem is used (3.1.4)" do
    @check_a.dependencies = [{:name=>"jquery-rails", :version=>'3.1.4'}]
    expect(@check_a.vuln?).to   eq(false)
  end
  it "is reported when vulnerable jquery-rails gem is used 4.0.2)" do
    @check_a.dependencies = [{:name=>"jquery-rails", :version=>'4.0.2'}]
    expect(@check_a.vuln?).to   eq(false)
  end
  it "is reported when vulnerable jquery-ujs gem is used 1.0.4)" do
    @check_b.dependencies = [{:name=>"jquery-ujs", :version=>'1.0.4'}]
    expect(@check_b.vuln?).to   eq(false)
  end



end

Version data entries

8 entries across 8 versions & 1 rubygems

Version Path
dawnscanner-1.6.9 spec/lib/kb/cve_2015_1840_spec.rb
dawnscanner-1.6.8 spec/lib/kb/cve_2015_1840_spec.rb
dawnscanner-1.6.7 spec/lib/kb/cve_2015_1840_spec.rb
dawnscanner-1.6.6 spec/lib/kb/cve_2015_1840_spec.rb
dawnscanner-1.6.5 spec/lib/kb/cve_2015_1840_spec.rb
dawnscanner-1.6.4 spec/lib/kb/cve_2015_1840_spec.rb
dawnscanner-1.6.3 spec/lib/kb/cve_2015_1840_spec.rb
dawnscanner-1.6.2 spec/lib/kb/cve_2015_1840_spec.rb