Skip to content

Commit 6978925

Browse files
committed
Merge pull request #33 from jrgifford/master
Updated rails to avoid ActionPack vuls.
2 parents 9227519 + a1fd6f9 commit 6978925

File tree

3 files changed

+117
-52
lines changed

3 files changed

+117
-52
lines changed

Gemfile

+8-8
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,9 @@
11
source 'https://rubygems.org'
22

33
# Core gems
4-
gem 'rails', '3.2.2'
4+
gem 'rails', '3.2.11'
55

6-
group :development do
6+
group :development, :test do
77
gem 'sqlite3'
88
end
99
# Database adapters
@@ -42,9 +42,9 @@ group :assets do
4242
end
4343

4444
# Test gems, obviously
45-
# group :test do
46-
# gem 'rspec-rails'
47-
# gem 'shoulda-matchers'
48-
# gem 'factory_girl_rails'
49-
# gem 'jasmine', :git => "https://github.com/pivotal/jasmine-gem.git", :branch => "1.2.rc1", :group => [:development, :test]
50-
# end
45+
group :test do
46+
gem 'rspec-rails'
47+
gem 'shoulda-matchers'
48+
gem 'factory_girl_rails'
49+
gem 'jasmine', :git => "https://github.com/pivotal/jasmine-gem.git", :branch => "1.2.rc1", :group => [:development, :test]
50+
end

Gemfile.lock

+103-44
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,14 @@
1+
GIT
2+
remote: https://github.com/pivotal/jasmine-gem.git
3+
revision: 5a7524ae9eaea4fe106a7aaa90ccfb1bc137abe7
4+
branch: 1.2.rc1
5+
specs:
6+
jasmine (1.2.0.rc1)
7+
jasmine-core (>= 1.2.0.rc1)
8+
rack (>= 1.1)
9+
rspec (>= 1.3.1)
10+
selenium-webdriver (>= 0.1.3)
11+
112
GEM
213
remote: https://rubygems.org/
314
specs:
@@ -10,31 +21,31 @@ GEM
1021
yajl-ruby (>= 1.0.0)
1122
_bushido-faye-websocket (0.4.4)
1223
eventmachine (>= 0.12.0)
13-
actionmailer (3.2.2)
14-
actionpack (= 3.2.2)
15-
mail (~> 2.4.0)
16-
actionpack (3.2.2)
17-
activemodel (= 3.2.2)
18-
activesupport (= 3.2.2)
24+
actionmailer (3.2.11)
25+
actionpack (= 3.2.11)
26+
mail (~> 2.4.4)
27+
actionpack (3.2.11)
28+
activemodel (= 3.2.11)
29+
activesupport (= 3.2.11)
1930
builder (~> 3.0.0)
2031
erubis (~> 2.7.0)
21-
journey (~> 1.0.1)
32+
journey (~> 1.0.4)
2233
rack (~> 1.4.0)
23-
rack-cache (~> 1.1)
34+
rack-cache (~> 1.2)
2435
rack-test (~> 0.6.1)
25-
sprockets (~> 2.1.2)
26-
activemodel (3.2.2)
27-
activesupport (= 3.2.2)
36+
sprockets (~> 2.2.1)
37+
activemodel (3.2.11)
38+
activesupport (= 3.2.11)
2839
builder (~> 3.0.0)
29-
activerecord (3.2.2)
30-
activemodel (= 3.2.2)
31-
activesupport (= 3.2.2)
40+
activerecord (3.2.11)
41+
activemodel (= 3.2.11)
42+
activesupport (= 3.2.11)
3243
arel (~> 3.0.2)
3344
tzinfo (~> 0.3.29)
34-
activeresource (3.2.2)
35-
activemodel (= 3.2.2)
36-
activesupport (= 3.2.2)
37-
activesupport (3.2.2)
45+
activeresource (3.2.11)
46+
activemodel (= 3.2.11)
47+
activesupport (= 3.2.11)
48+
activesupport (3.2.11)
3849
i18n (~> 0.6)
3950
multi_json (~> 1.0)
4051
addressable (2.2.7)
@@ -50,7 +61,11 @@ GEM
5061
bcrypt-ruby (3.0.1)
5162
bourbon (1.4.0)
5263
sass (>= 3.1)
53-
builder (3.0.0)
64+
bourne (1.1.2)
65+
mocha (= 0.10.5)
66+
builder (3.0.4)
67+
childprocess (0.3.6)
68+
ffi (~> 1.0, >= 1.0.6)
5469
cloudfuji (0.0.39)
5570
highline (>= 1.6.1)
5671
json (>= 1.4.6)
@@ -79,6 +94,7 @@ GEM
7994
devise_cloudfuji_authenticatable (1.0.5)
8095
devise (= 1.5.3)
8196
rubycas-client (>= 2.2.1)
97+
diff-lcs (1.1.3)
8298
eco (1.0.0)
8399
coffee-script
84100
eco-source
@@ -93,88 +109,127 @@ GEM
93109
eventmachine (0.12.10)
94110
execjs (1.3.0)
95111
multi_json (~> 1.0)
112+
factory_girl (4.1.0)
113+
activesupport (>= 3.0.0)
114+
factory_girl_rails (4.1.0)
115+
factory_girl (~> 4.1.0)
116+
railties (>= 3.0.0)
117+
ffi (1.3.0)
96118
highline (1.6.11)
97119
hike (1.2.1)
98120
httparty (0.8.1)
99121
multi_json
100122
multi_xml
101-
i18n (0.6.0)
102-
journey (1.0.3)
123+
i18n (0.6.1)
124+
jasmine-core (1.3.1)
125+
journey (1.0.4)
103126
jquery-rails (2.0.1)
104127
railties (>= 3.2.0, < 5.0)
105128
thor (~> 0.14)
106-
json (1.6.5)
129+
json (1.7.6)
107130
kaminari (0.13.0)
108131
actionpack (>= 3.0.0)
109132
activesupport (>= 3.0.0)
110133
railties (>= 3.0.0)
111-
mail (2.4.3)
134+
libwebsocket (0.1.7.1)
135+
addressable
136+
websocket
137+
mail (2.4.4)
112138
i18n (>= 0.4.0)
113139
mime-types (~> 1.16)
114140
treetop (~> 1.4.8)
115-
mime-types (1.18)
116-
multi_json (1.3.2)
141+
metaclass (0.0.1)
142+
mime-types (1.19)
143+
mocha (0.10.5)
144+
metaclass (~> 0.0.1)
145+
multi_json (1.5.0)
117146
multi_xml (0.4.2)
118147
nokogiri (1.5.0)
119148
orm_adapter (0.0.6)
120149
pg (0.12.2)
121150
polyglot (0.3.3)
122-
rack (1.4.1)
151+
rack (1.4.3)
123152
rack-cache (1.2)
124153
rack (>= 0.4)
125154
rack-ssl (1.3.2)
126155
rack
127-
rack-test (0.6.1)
156+
rack-test (0.6.2)
128157
rack (>= 1.0)
129-
rails (3.2.2)
130-
actionmailer (= 3.2.2)
131-
actionpack (= 3.2.2)
132-
activerecord (= 3.2.2)
133-
activeresource (= 3.2.2)
134-
activesupport (= 3.2.2)
158+
rails (3.2.11)
159+
actionmailer (= 3.2.11)
160+
actionpack (= 3.2.11)
161+
activerecord (= 3.2.11)
162+
activeresource (= 3.2.11)
163+
activesupport (= 3.2.11)
135164
bundler (~> 1.0)
136-
railties (= 3.2.2)
137-
railties (3.2.2)
138-
actionpack (= 3.2.2)
139-
activesupport (= 3.2.2)
165+
railties (= 3.2.11)
166+
railties (3.2.11)
167+
actionpack (= 3.2.11)
168+
activesupport (= 3.2.11)
140169
rack-ssl (~> 1.3.2)
141170
rake (>= 0.8.7)
142171
rdoc (~> 3.4)
143-
thor (~> 0.14.6)
144-
rake (0.9.2.2)
172+
thor (>= 0.14.6, < 2.0)
173+
rake (10.0.3)
145174
rdoc (3.12)
146175
json (~> 1.4)
147176
remotipart (1.0.2)
148177
rest-client (1.6.7)
149178
mime-types (>= 1.16)
179+
rspec (2.12.0)
180+
rspec-core (~> 2.12.0)
181+
rspec-expectations (~> 2.12.0)
182+
rspec-mocks (~> 2.12.0)
183+
rspec-core (2.12.2)
184+
rspec-expectations (2.12.1)
185+
diff-lcs (~> 1.1.3)
186+
rspec-mocks (2.12.1)
187+
rspec-rails (2.12.1)
188+
actionpack (>= 3.0)
189+
activesupport (>= 3.0)
190+
railties (>= 3.0)
191+
rspec-core (~> 2.12.0)
192+
rspec-expectations (~> 2.12.0)
193+
rspec-mocks (~> 2.12.0)
150194
rubycas-client (2.3.8)
151195
activesupport
196+
rubyzip (0.9.9)
152197
sass (3.1.15)
153198
sass-rails (3.2.4)
154199
railties (~> 3.2.0)
155200
sass (>= 3.1.10)
156201
tilt (~> 1.3)
157-
sprockets (2.1.2)
202+
selenium-webdriver (2.27.2)
203+
childprocess (>= 0.2.5)
204+
libwebsocket (~> 0.1.3)
205+
multi_json (~> 1.0)
206+
rubyzip
207+
shoulda-matchers (1.4.2)
208+
activesupport (>= 3.0.0)
209+
bourne (~> 1.1.2)
210+
sprockets (2.2.2)
158211
hike (~> 1.2)
212+
multi_json (~> 1.0)
159213
rack (~> 1.0)
160214
tilt (~> 1.1, != 1.3.0)
161215
sqlite3 (1.3.6)
162216
thin (1.3.1)
163217
daemons (>= 1.0.9)
164218
eventmachine (>= 0.12.6)
165219
rack (>= 1.0.0)
166-
thor (0.14.6)
220+
thor (0.16.0)
167221
tilt (1.3.3)
168-
treetop (1.4.10)
222+
treetop (1.4.12)
169223
polyglot
170224
polyglot (>= 0.3.1)
171-
tzinfo (0.3.33)
225+
tzinfo (0.3.35)
172226
uglifier (1.2.3)
173227
execjs (>= 0.3.0)
174228
multi_json (>= 1.0.2)
175229
uuidtools (2.1.2)
176230
warden (1.1.1)
177231
rack (>= 1.0)
232+
websocket (1.0.6)
178233
yajl-ruby (1.1.0)
179234

180235
PLATFORMS
@@ -192,12 +247,16 @@ DEPENDENCIES
192247
devise_cloudfuji_authenticatable
193248
eco
194249
execjs
250+
factory_girl_rails
251+
jasmine!
195252
jquery-rails
196253
kaminari
197254
pg (= 0.12.2)
198-
rails (= 3.2.2)
255+
rails (= 3.2.11)
199256
remotipart
257+
rspec-rails
200258
sass-rails (~> 3.2.3)
259+
shoulda-matchers
201260
sqlite3
202261
thin
203262
uglifier (>= 1.0.3)

config/database.yml

+6
Original file line numberDiff line numberDiff line change
@@ -12,3 +12,9 @@ development:
1212
database: db/development.sqlite3
1313
pool: 5
1414
timeout: 5000
15+
16+
test:
17+
adapter: sqlite3
18+
database: db/test.sqlite3
19+
pool: 5
20+
timeout: 5000

0 commit comments

Comments
 (0)