[\x00-\x7F]*<\/div>/;
13 | expect(permuted).toMatch(regex);
14 | });
15 |
16 | it('returns a script tag with an empty permutations list', () => {
17 | let permutations = ctx.ctxPermutations();
18 | let regex = /';
25 |
26 | installElement(fixture);
27 | }
28 |
29 | it('processes the trivial page', function() {
30 | installTranslationTable('[]');
31 | let before = document.body.innerHTML;
32 | CTX.process();
33 | let after = document.body.innerHTML;
34 | expect(before).toBe(after);
35 | });
36 |
37 | it('applies the identity transform', function() {
38 | installElement('
abc
');
39 | installTranslationTable('["abc"]');
40 | CTX.process();
41 | expect(document.getElementById('test').innerHTML).toBe('abc');
42 | });
43 |
44 | it('applies a simple transform', function() {
45 | installElement('
aaabbbccc
');
46 | installTranslationTable('["cba"]');
47 | CTX.process();
48 | expect(document.getElementById('test').innerHTML).toBe('cccbbbaaa');
49 | });
50 |
51 | afterEach(function() {
52 | document.body.removeElement(document.getElementById('fixture'));
53 | });
54 | });
55 | */
56 |
--------------------------------------------------------------------------------
/client/my.conf.js:
--------------------------------------------------------------------------------
1 | // Karma configuration
2 | // Generated on Tue Sep 27 2016 18:21:25 GMT+0300 (EEST)
3 |
4 | module.exports = function(config) {
5 | config.set({
6 |
7 | // base path that will be used to resolve all patterns (eg. files, exclude)
8 | basePath: '',
9 |
10 |
11 | // frameworks to use
12 | // available frameworks: https://npmjs.org/browse/keyword/karma-adapter
13 | frameworks: ['jasmine'],
14 |
15 |
16 | // list of files / patterns to load in the browser
17 | files: [
18 | '__tests__/*.js',
19 | '*.js'
20 | ],
21 |
22 |
23 | // list of files to exclude
24 | exclude: [
25 | ],
26 |
27 |
28 | // preprocess matching files before serving them to the browser
29 | // available preprocessors: https://npmjs.org/browse/keyword/karma-preprocessor
30 | preprocessors: {
31 | },
32 |
33 |
34 | // test results reporter to use
35 | // possible values: 'dots', 'progress'
36 | // available reporters: https://npmjs.org/browse/keyword/karma-reporter
37 | reporters: ['progress'],
38 |
39 |
40 | // web server port
41 | port: 9876,
42 |
43 |
44 | // enable / disable colors in the output (reporters and logs)
45 | colors: true,
46 |
47 |
48 | // level of logging
49 | // possible values: config.LOG_DISABLE || config.LOG_ERROR || config.LOG_WARN || config.LOG_INFO || config.LOG_DEBUG
50 | logLevel: config.LOG_INFO,
51 |
52 |
53 | // enable / disable watching file and executing tests whenever any file changes
54 | autoWatch: true,
55 |
56 |
57 | // start these browsers
58 | // available browser launchers: https://npmjs.org/browse/keyword/karma-launcher
59 | browsers: ['Chrome'],
60 |
61 |
62 | // Continuous Integration mode
63 | // if true, Karma captures browsers, runs the tests and exits
64 | singleRun: false,
65 |
66 | // Concurrency level
67 | // how many browser should be started simultaneous
68 | concurrency: Infinity
69 | })
70 | }
71 |
--------------------------------------------------------------------------------
/python/flask-ctx/README.rst:
--------------------------------------------------------------------------------
1 | flask-ctx
2 | ==============
3 |
4 | A simple integration of the CTX defense against side-channel attacks for Flask projects.
5 |
6 | Requirements
7 | ============
8 |
9 | - Python 2.5+
10 | - Flask 0.10+
11 | - ctx-defense
12 |
13 | Installation
14 | ============
15 |
16 | - Install the latest stable version using ``pip``:
17 |
18 | ```sh
19 | pip install flask-ctx
20 | ```
21 |
22 | Configuration
23 | =============
24 |
25 | - Import the *ctx_processor* function from ctx's context processors:
26 | ```python
27 | from flask_ctx.context_processors import ctx_processor
28 | ```
29 |
30 | - Add the *ctx_processor* in the application's context processors:
31 | ```python
32 | app.context_processor(ctx_processor)
33 | ```
34 |
35 | Basic Usage
36 | ===========
37 |
38 | - Use the *ctx_protect* function to use ctx on secrets:
39 | ```html
40 | {{ ctx_protect(secret, origin, alphabet) }}
41 | ```
42 |
43 | *secret* is a string containing the secret that needs to be protected and *origin*
44 | is a string uniquely identifying the CTX origin for the secret. *alphabet* is
45 | an optional argument to define the alphabet that the secret belongs to, default
46 | being the [ASCII_printable](https://docs.python.org/2/library/string.html#string.printable) characters.
47 |
48 | - Add the *ctx_permutations* function to include the used permutations for each
49 | origin:
50 | ```html
51 | {{ ctx_permutations() }}
52 | ```
53 |
54 | The *ctx_permutations* function needs to run after all *ctx_protect* calls
55 | that use an origin for the first time. It is proposed that it is included
56 | before the *