Alvin Lai alvinlai

Install Rails 3.1

gem install rails

generate new app, skipping Test::Unit file generation

rails new my_app -T

Set up Gemfile

Researchers investigating the Rails parameter parsing vulnerability discovered that the same or similar vulnerable code had made its way into multiple other libraries. If your application uses these libraries to process untrusted data, it may still be vulnerable even if you have upgraded Rails. Check your Gemfile and Gemfile.lock for vulnerable versions of the following libraries.

Directly vulnerable libraries

rails

Vulnerable: <= 3.2.10, <= 3.1.9, <= 3.0.18, <= 2.3.14

Fixed: 3.2.11, 3.1.10, 3.0.19, 2.3.15

multi_xml

Basic pre-requisites

Some utilities:

sudo apt-get install vim tmux git

Copy/paste from the command line:

sudo apt-get install xclip

	$stack, $draws = [], {}

	def method_missing *args
	return if args[0][/^to_/]
	$stack << args.map { \|a\| a or $stack.pop }
	$draws[$stack.pop(2)[0][0]] = args[1] if args[0] == :<
	end

	class Array
	def +@

	#!/usr/bin/env bash
	apt-get -y update
	apt-get -y install build-essential zlib1g-dev libssl-dev libreadline5-dev libyaml-dev
	cd /tmp
	wget ftp://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.3-p125.tar.gz
	tar -xvzf ruby-1.9.3-p125.tar.gz
	cd ruby-1.9.3-p125/
	./configure --prefix=/usr/local
	make
	make install

	# 0. Make sure you have Ruby 1.9.3 installed, and optionally RVM and PostgreSQL

	# 0.2 If you are on the Mac, make sure you have a c compiler by installing XCode Command Line Tools or gcc4.2 with homebrew
	# https://github.com/mxcl/homebrew/wiki/Custom-GCC-and-cross-compilers

	# 0.5 Make sure you have bundler version ~> 1.2 as Rails depends on it
	gem install bundler

	# 1. Get edge Rails source (master branch)
	git clone https://github.com/rails/rails.git

	#!/bin/bash

	MAILFILE=/tmp/mail.$$
	CURLFILE=/tmp/mail.$$.curl
	cat > $MAILFILE
	curl -i -F message=@$MAILFILE "http://localhost/incoming_messages" > $CURLFILE
	if grep 'HTTP/1.1 204 No Content' $CURLFILE
	then
	rm -f $CURLFILE $MAILFILE
	fi

	=Navigating=
	visit('/projects')
	visit(post_comments_path(post))

	=Clicking links and buttons=
	click_link('id-of-link')
	click_link('Link Text')
	click_button('Save')
	click('Link Text') # Click either a link or a button
	click('Button Value')

	var parser = document.createElement('a');
	parser.href = "http://example.com:3000/pathname/?search=test#hash";

	parser.protocol; // => "http:"
	parser.hostname; // => "example.com"
	parser.port; // => "3000"
	parser.pathname; // => "/pathname/"
	parser.search; // => "?search=test"
	parser.hash; // => "#hash"
	parser.host; // => "example.com:3000"

	/.sass-cache
	/public