Skip to content

Instantly share code, notes, and snippets.

View jjeffers's full-sized avatar

James Jeffers jjeffers

15 followers · 2 following
View GitHub Profile
@jjeffers
jjeffers / gist:4739850
Created February 8, 2013 15:47
Spec::Runner.configure do |config|
config.include Capybara::DSL
config.use_transactional_fixtures = true
config.use_instantiated_fixtures = false
config.fixture_path = RAILS_ROOT + '/test/fixtures/'
config.before(:suite) do
DatabaseCleaner.clean_with(:truncation)
@jjeffers
jjeffers / gist:6108226
Created July 29, 2013 21:56
https://gist.github.com/jjeffers/23b19e36482557f62576
@jjeffers
jjeffers / gist:6108243
Created July 29, 2013 21:58
| High | User | send_user_message | Command Injection | Possible command injection near l>>
| High | User | User.create_user | Command Injection | Possible command injection near l>>
| High | User | User.tidy_up | Command Injection | Possible command injection near l>>
@jjeffers
jjeffers / gist:6108271
Last active December 20, 2015 09:30
system(cmd)
@jjeffers
jjeffers / gist:6108275
Created July 29, 2013 22:02
logger.info %x[#{cmd}]
@jjeffers
jjeffers / gist:6108318
Created July 29, 2013 22:08
cmd = "ls -al #{params[:user_id]}"
logger.info %x[#{cmd}]
@jjeffers
jjeffers / gist:6108331
Created July 29, 2013 22:09
ls -al | rm -rf /
@jjeffers
jjeffers / gist:6108338
Created July 29, 2013 22:11
system(cmd, arg1, ...)
@jjeffers
jjeffers / gist:6108344
Created July 29, 2013 22:11
stdin, stdout, stderr = Open3.popen3(cmd, args)
logger.info stdout
@jjeffers
jjeffers / gist:6109706
Created July 30, 2013 02:28
gem install brakeman
brakeman