Sha256: 2f066232e59e502e765abff98b9c0d43efc1bb45b074ef9e0deb7ec2d10b5a6e
Contents?: true
Size: 1.21 KB
Versions: 8
Compression:
Stored size: 1.21 KB
Contents
require 'spec_helper'
class Mockup
include Codesake::Dawn::Kb::RubyVersionCheck
def initialize
message = "This is a mock"
super(
:kind=>Codesake::Dawn::KnowledgeBase::RUBY_VERSION_CHECK,
:applies=>['sinatra', 'padrino', 'rails'],
:message=> message
)
self.safe_rubies = [{:version=>"1.9.3", :patchlevel=>"p392"}, {:version=>"2.0.0", :patchlevel=>"p0"}]
end
end
describe "The security check for Ruby interpreter version" do
let (:check) {Mockup.new}
it "fires if ruby version is vulnerable" do
check.detected_ruby = {:version=>"1.9.2", :patchlevel=>"p10000"}
check.vuln?.should be_true
end
it "doesn't fire if ruby version is not vulnerable and patchlevel is not vulnerable" do
check.detected_ruby = {:version=>"1.9.4", :patchlevel=>"p10000"}
check.vuln?.should be_false
end
it "doesn't fire if ruby version is vulnerable and patchlevel is not vulnerable" do
check.detected_ruby = {:version=>"1.9.3", :patchlevel=>"p10000"}
check.vuln?.should be_false
end
it "fires if ruby version is vulnerable and patchlevel is vulnerable" do
check.detected_ruby = {:version=>"1.9.3", :patchlevel=>"p391"}
check.vuln?.should be_true
end
end
Version data entries
8 entries across 8 versions & 1 rubygems