Neil Matatall oreoshake
oreoshake
/ gist:f27e3678ddca4d4a8fa9
Last active
November 10, 2021 22:15
Splunk query for mixed content in CSP reports
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| A csp report looks like | |
| { | |
| "csp-report": { | |
| "document-uri": "http://example.org/page.html", | |
| "referrer": "http://evil.example.com/haxor.html", | |
| "blocked-uri": "http://evil.example.com/image.png", | |
| "violated-directive": "default-src 'self'", | |
| "original-policy": "default-src 'self'; report-uri http://example.org/csp-report.cgi" | |
| } |
oreoshake
/ firefox spec
Created
November 12, 2013 16:47
This was meant to be a CSP parser/validator with the ability to explain a policy and a violation report. It has support for the old school firefox headers and the standard header.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| policy | |
| = directive (" "? ";" " "? directive?)* | |
| directive | |
| = report_uri_directive / declaritive_directive | |
| report_uri_directive | |
| = "report-uri " host_source? [a-zA-Z/_\-.]* | |
| declaritive_directive | |
| = name:directive_name " " sources:source_list { | |
| var winston = require("winston"); | |
| // inline/eval values are only valid in style/script/default blocks |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| chrome | |
| "default-src *;script-src https://*.facebook.com http://*.facebook.com https://*.fbcdn.net http://*.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* chrome-extension://lifbcibllhkdhoafpjfnlhfpfgnpldfl 'unsafe-inline' 'unsafe-eval' https://*.akamaihd.net http://*.akamaihd.net;style-src * 'unsafe-inline';connect-src https://*.facebook.com http://*.facebook.com https://*.fbcdn.net http://*.fbcdn.net *.facebook.net *.spotilocal.com:* https://*.akamaihd.net ws://*.facebook.com:* http://*.akamaihd.net;", | |
| "default-src 'self' *.evocdn.co.uk *.rackcdn.com *.evocdn.evo.com *.google-analytics.com 'unsafe-eval' 'unsafe-inline'; style-src 'self' *.evocdn.co.uk *.rackcdn.com *.google-analytics.com 'unsafe-eval' 'unsafe-inline'; img-src 'self' *.evocdn.co.uk *.rackcdn.com *.evocdn.evo.com data: *.google-analytics.com https://c906980.ssl.cf3.rackcdn.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' 'unsafe-eval' 'unsafe-inline'; script-src 'self' eval-sc |
oreoshake
/ gist:5281050
Last active
December 15, 2015 15:19
Woke up, saw a javascript parser generator, wrote this
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| w3: | |
| policy | |
| = directive (" "? ";" " "? directive?)* | |
| directive | |
| = report_uri_directive / declaritive_directive | |
| report_uri_directive | |
| = "report-uri " host_source? [a-zA-Z/_-]* | |
| declaritive_directive | |
| = name:directive_name " " sources:source_list { |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| 1.9.3-p327 :002 > a = {:b => [3,4,5]} | |
| => {:b=>[3, 4, 5]} | |
| 1.9.3-p327 :003 > b = a.dup | |
| => {:b=>[3, 4, 5]} | |
| 1.9.3-p327 :004 > b[:b] << 'asdf' | |
| => [3, 4, 5, "asdf"] | |
| 1.9.3-p327 :005 > a | |
| => {:b=>[3, 4, 5, "asdf"]} | |
| 1.9.3-p327 :006 > b | |
| => {:b=>[3, 4, 5, "asdf"]} |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| require 'rubygems' | |
| require 'ruby-debug' | |
| class A | |
| def self.read | |
| if @thing | |
| @thing | |
| elsif superclass.respond_to?(:read) | |
| superclass.thing | |
| else |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| $ git clone [email protected]:privaterepo/app.git | |
| Cloning into app... | |
| remote: Counting objects: 86868, done. | |
| remote: Compressing objects: 100% (20049/20049), done. | |
| fatal: write error: Result too large), 23.94 MiB | 41 KiB/s | |
| fatal: write error: Broken pipe | |
| fatal: index-pack failed |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Gemfile | |
| gem 'guard-brakeman' | |
| # Guardfile: | |
| guard 'brakeman' do | |
| watch(%r{^app/.+\.(erb|haml|rhtml|rb)$}) | |
| watch(%r{^config/.+\.rb$}) | |
| watch(%r{^lib/.+\.rb$}) | |
| watch('Gemfile') | |
| end |
oreoshake
/ gist:1511751
Created
December 22, 2011 20:34
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| require 'rubygems' | |
| require 'parallel' | |
| require 'benchmark' | |
| # require 'jruby-prof' | |
| ############ TEH SETUPZ ############# | |
| threads = Parallel.processor_count | |
| n = ARGV[0].to_i | |
| s = (0...10).map{ ('a'..'z').to_a[rand(26)] }.join * n |
oreoshake
/ gist:1299601
Created
October 19, 2011 20:42
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Indian | |
| it says there is no text currenlty | |
| 1:36 | |
| curryhousebot | |
| i am able to get to the docs | |
| 1:36 | |
| Indian | |
| the first link |