@passmarked/ssl
Version:
Rules that relate to checking the SSL configuration of each individual resolved server from the domain to ensure locked down config with the broadest compatibility
138 lines (85 loc) • 3.31 kB
JavaScript
const assert = require('assert');
const _ = require('underscore');
const fs = require('fs');
const passmarked = require('passmarked');
const testFunc = require('../lib/rules/fields');
describe('fields', function() {
describe('password', function() {
it('Should not return a error if no passwords field are present on HTTP', function(done) {
// read in the html sample
var content = fs.readFileSync('./samples/fields.password.notsecure.missing.html');
// handle the payload
var payload = passmarked.createPayload({
url: 'http://example.com'
}, { log: { entries: [] } }, content.toString())
testFunc(payload, function(err) {
if(err) assert.fail('Something went wrong');
var rules = payload.getRules();
var rule = _.find(rules || [], function(item) {
return item.key === 'fields.password';
});
if(rule)
assert.fail('Was not expecting a error');
// done
done()
});
});
it('Should not return a error if no passwords field are present on HTTPS', function(done) {
// read in the html sample
var content = fs.readFileSync('./samples/fields.password.secure.missing.html');
// handle the payload
var payload = passmarked.createPayload({
url: 'https://example.com'
}, { log: { entries: [] } }, content.toString())
testFunc(payload, function(err) {
if(err) assert.fail('Something went wrong');
var rules = payload.getRules();
var rule = _.find(rules || [], function(item) {
return item.key === 'fields.password';
});
if(rule)
assert.fail('Was not expecting a error');
// done
done()
});
});
it('Should return a error if password is present on HTTP page', function(done) {
// read in the html sample
var content = fs.readFileSync('./samples/fields.password.notsecure.html');
// handle the payload
var payload = passmarked.createPayload({
url: 'http://example.com'
}, { log: { entries: [] } }, content.toString())
testFunc(payload, function(err) {
if(err) assert.fail('Something went wrong');
var rules = payload.getRules();
var rule = _.find(rules || [], function(item) {
return item.key === 'fields.password';
});
if(!rule)
assert.fail('Was expecting a error');
// done
done()
});
});
it('Should not return a error if password is present on HTTPS page', function(done) {
// read in the html sample
var content = fs.readFileSync('./samples/fields.password.secure.html');
// handle the payload
var payload = passmarked.createPayload({
url: 'https://example.com'
}, { log: { entries: [] } }, content.toString())
testFunc(payload, function(err) {
if(err) assert.fail('Something went wrong');
var rules = payload.getRules();
var rule = _.find(rules || [], function(item) {
return item.key === 'fields.password';
});
if(rule)
assert.fail('Was not expecting a error');
// done
done()
});
});
});
});