Ashwani Kumar TheAshwanik

## Rails-SSL-Cert Related.md

      
              2 files
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                TheAshwanik
                / Rails-SSL-Cert Related.md
            
            
              Last active
              December 21, 2015 14:28
                — forked from fnichol/README.md
            
              
                Rails-SSL Cert Related
              
          
    Why?

There is a long standing issue in Ruby where the net/http library by default does not check the validity of an SSL certificate during a TLS handshake. Rather than deal with the underlying problem (a missing certificate authority, a self-signed certificate, etc.) one tends to see bad hacks everywhere. This can lead to problems down the road.
From what I can see the OpenSSL library that Rails Installer delivers has no certificate authorities defined. So, let's go fetch some from the curl website. And since this is for ruby, why don't we download and install the file with a ruby script?
Installation

The Ruby Way! (Fun)


## Top_command_help.txt
===============================================================================
Help for Interactive Commands - procps version 3.2.7
Window 1:Def: Cumulative mode Off.  System: Delay 3.0 secs; Secure mode Off.

  Z,B       Global: 'Z' change color mappings; 'B' disable/enable bold
  l,t,m     Toggle Summaries: 'l' load avg; 't' task/cpu stats; 'm' mem info
  1,I       Toggle SMP view: '1' single/separate states; 'I' Irix/Solaris mode

  f,o     . Fields/Columns: 'f' add or remove; 'o' change display order
  F or O  . Select sort field

## application_controller.rb
class ApplicationController < ActionController::Base

  ...
  #Problem:
  #In rails 3.0.1+ it is no longer possible to do this anymore;
  #  rescue_from ActionController::RoutingError, :with => :render_not_found
  #
  #The ActionController::RoutingError thrown is not caught by rescue_from.
  #The alternative is to to set a catch-all route to catch all unmatched routes and send them to a method which renders an error
  #As in http://techoctave.com/c7/posts/36-rails-3-0-rescue-from-routing-error-solution

## app_controller.rb
class ApplicationController < ActionController::Base
  protect_from_forgery

  before_filter :cors_preflight_check
  after_filter :cors_set_access_control_headers

  # For all responses in this controller, return the CORS access control headers.

  def cors_set_access_control_headers
    headers['Access-Control-Allow-Origin'] = '*'

## index.html
<html>
  <head>
    <title>
      Demo Cross Domain
    </title>

    <!-- Le styles -->
    <link href="//netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet">
    <style>
      body {

## CSS
body{
  font-family:Helvetica,Arial;
  background:#f4f4f4;
}
h2{
  font-weight:normal;
}
#invite{
  position:relative;
  background:#fff;

## application.js
//= require bootbox.min

## remote form submission in rails
#in your view

<%= form_for @post, remote: true do |f| %>
  #form inputs
<% end %>


#then in your controller

def do_something

## README.md

      
              3 files
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                TheAshwanik
                / README.md
            
            
              Created
              October 13, 2013 08:40
                — forked from nikcub/README.md
            
          
    In August 2007 a hacker found a way to expose the PHP source code on facebook.com. He retrieved two files and then emailed them to me, and I wrote about the issue:
http://techcrunch.com/2007/08/11/facebook-source-code-leaked/
It became a big deal:
http://www.techmeme.com/070812/p1#a070812p1
The two files are index.php (the homepage) and search.php (the search page)

  
## gofindxss.js
var http = require('follow-redirects').http;
//top 1000
var domains = ["google.com","facebook.com","youtube.com","yahoo.com","baidu.com","wikipedia.org","qq.com","linkedin.com","live.com","twitter.com","amazon.com","blogspot.com","taobao.com","google.co.in","sina.com.cn","wordpress.com","yahoo.co.jp","yandex.ru","bing.com","ebay.com","google.de","vk.com","hao123.com","163.com","tumblr.com","pinterest.com","google.co.uk","google.fr","googleusercontent.com","microsoft.com","msn.com","ask.com","mail.ru","google.co.jp","google.com.br","weibo.com","apple.com","paypal.com","google.ru","instagram.com","google.com.hk","xvideos.com","blogger.com","google.it","tmall.com","google.es","imdb.com","soso.com","craigslist.org","sohu.com","360.cn","go.com","amazon.co.jp","stackoverflow.com","bbc.co.uk","xhamster.com","google.com.mx","neobux.com","google.ca","fc2.com","cnn.com","imgur.com","alibaba.com","wordpress.org","flickr.com","espn.go.com","adcash.com","huffingtonpost.com","odnoklassniki.ru","t.co","conduit.com","thepira
	===============================================================================
	Help for Interactive Commands - procps version 3.2.7
	Window 1:Def: Cumulative mode Off. System: Delay 3.0 secs; Secure mode Off.

	Z,B Global: 'Z' change color mappings; 'B' disable/enable bold
	l,t,m Toggle Summaries: 'l' load avg; 't' task/cpu stats; 'm' mem info
	1,I Toggle SMP view: '1' single/separate states; 'I' Irix/Solaris mode

	f,o . Fields/Columns: 'f' add or remove; 'o' change display order
	F or O . Select sort field
	class ApplicationController < ActionController::Base

	...
	#Problem:
	#In rails 3.0.1+ it is no longer possible to do this anymore;
	# rescue_from ActionController::RoutingError, :with => :render_not_found
	#
	#The ActionController::RoutingError thrown is not caught by rescue_from.
	#The alternative is to to set a catch-all route to catch all unmatched routes and send them to a method which renders an error
	#As in http://techoctave.com/c7/posts/36-rails-3-0-rescue-from-routing-error-solution
	class ApplicationController < ActionController::Base
	protect_from_forgery

	before_filter :cors_preflight_check
	after_filter :cors_set_access_control_headers

	# For all responses in this controller, return the CORS access control headers.

	def cors_set_access_control_headers
	headers['Access-Control-Allow-Origin'] = '*'
	<html>
	<head>
	<title>
	Demo Cross Domain
	</title>

	<!-- Le styles -->
	<link href="//netdna.bootstrapcdn.com/twitter-bootstrap/2.3.1/css/bootstrap-combined.min.css" rel="stylesheet">
	<style>
	body {
	body{
	font-family:Helvetica,Arial;
	background:#f4f4f4;
	}
	h2{
	font-weight:normal;
	}
	#invite{
	position:relative;
	background:#fff;
	#in your view

	<%= form_for @post, remote: true do \|f\| %>
	#form inputs
	<% end %>


	#then in your controller

	def do_something
	var http = require('follow-redirects').http;
	//top 1000
	var domains = ["google.com","facebook.com","youtube.com","yahoo.com","baidu.com","wikipedia.org","qq.com","linkedin.com","live.com","twitter.com","amazon.com","blogspot.com","taobao.com","google.co.in","sina.com.cn","wordpress.com","yahoo.co.jp","yandex.ru","bing.com","ebay.com","google.de","vk.com","hao123.com","163.com","tumblr.com","pinterest.com","google.co.uk","google.fr","googleusercontent.com","microsoft.com","msn.com","ask.com","mail.ru","google.co.jp","google.com.br","weibo.com","apple.com","paypal.com","google.ru","instagram.com","google.com.hk","xvideos.com","blogger.com","google.it","tmall.com","google.es","imdb.com","soso.com","craigslist.org","sohu.com","360.cn","go.com","amazon.co.jp","stackoverflow.com","bbc.co.uk","xhamster.com","google.com.mx","neobux.com","google.ca","fc2.com","cnn.com","imgur.com","alibaba.com","wordpress.org","flickr.com","espn.go.com","adcash.com","huffingtonpost.com","odnoklassniki.ru","t.co","conduit.com","thepira