Sergio Martín Morillas smartinm
smartinm
/ html_capybara.rb
Created
October 26, 2015 11:40
How to print HTML of elements in Capybara
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| element = page.find("div.example") | |
| p element.native.attribute('outerHTML') |
smartinm
/ curl_osx_yosemite_workaround.sh
Created
October 22, 2015 14:28
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Install new curl version from homebrew | |
| $ brew install curl | |
| # Convert cert to p12 format | |
| $ openssl pkcs12 -export -out certificate.pfx -inkey private.key -in cert.crt -certfile ca_cert.pem | |
| # Execute curl | |
| $ /usr/local/opt/curl/bin/curl --cert certificate.pfx:PASSWORD -k https://url/ |
smartinm
/ valid_rails42_authenticity_token.coffee
Last active
October 15, 2015 09:01
In order to mitigate SSL attacks, form_authenticity_token is now masked so that it varies with each request. Thus, tokens are validated by unmasking and then decrypting. As a result, any strategies for verifying requests from non-rails forms that relied on a static session CSRF token have to take this into account.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| bufferEqual = require('buffer-equal') | |
| authenticityTokenLength = 32 | |
| unmaskCSRFToken= (maskedToken) -> | |
| if maskedToken.length == authenticityTokenLength | |
| return maskedToken | |
| else if maskedToken.length == authenticityTokenLength * 2 | |
| oneTimePad = maskedToken.slice(0, authenticityTokenLength) | |
| encryptedToken = maskedToken.slice(authenticityTokenLength) |