action_dispatch-disable_x_xss_protection 0.1.0
Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml
ADDED
@@ -0,0 +1,7 @@
|
|
1
|
+
---
|
2
|
+
SHA256:
|
3
|
+
metadata.gz: b77d38d808687f1d93b300b03b203e53175f73a520f93940eec0e1c196011fc3
|
4
|
+
data.tar.gz: a41537f21b02171140022b40902e1aa33649970ac8a501b8997276c0487aa071
|
5
|
+
SHA512:
|
6
|
+
metadata.gz: 6b749626285a04207afffc0126c19744b8cd8b89bbf54f766b22a39ad6990fc4a2957ed5fe72772c402f25b160ecb0bbf221bfc0c7678bc9a8a599de8688071c
|
7
|
+
data.tar.gz: 332bdb246036ca9d0a2019997ba389e06fa94da20b0087508721d709956ec80915992e34655271cc58733684729e49046cd092f65d1616c1cb2bff9d07561bbe
|
data/MIT-LICENSE
ADDED
@@ -0,0 +1,20 @@
|
|
1
|
+
Copyright 2020 Kohei Yamamoto
|
2
|
+
|
3
|
+
Permission is hereby granted, free of charge, to any person obtaining
|
4
|
+
a copy of this software and associated documentation files (the
|
5
|
+
"Software"), to deal in the Software without restriction, including
|
6
|
+
without limitation the rights to use, copy, modify, merge, publish,
|
7
|
+
distribute, sublicense, and/or sell copies of the Software, and to
|
8
|
+
permit persons to whom the Software is furnished to do so, subject to
|
9
|
+
the following conditions:
|
10
|
+
|
11
|
+
The above copyright notice and this permission notice shall be
|
12
|
+
included in all copies or substantial portions of the Software.
|
13
|
+
|
14
|
+
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
|
15
|
+
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
|
16
|
+
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
|
17
|
+
NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
|
18
|
+
LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
|
19
|
+
OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
|
20
|
+
WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
|
data/README.md
ADDED
@@ -0,0 +1,41 @@
|
|
1
|
+
# ActionDispatch::DisableXXssProtection
|
2
|
+
|
3
|
+
[![Build Status](https://github.com/pepabo/action_dispatch-disable_x_xss_protection/workflows/build/badge.svg)](https://github.com/pepabo/action_dispatch-disable_x_xss_protection/actions?workflow=build)
|
4
|
+
|
5
|
+
> Disables the X-XSS-Protection header which Action Dispatch sets by default
|
6
|
+
|
7
|
+
This gem disables the X-XSS-Protection header which Action Dispatch sets as `1; mode=block` by default. Applications always return `X-XSS-Protection: 0` after installing this gem.
|
8
|
+
|
9
|
+
## Usage
|
10
|
+
|
11
|
+
All you need is to add this gem to your application's Gemfile:
|
12
|
+
|
13
|
+
```ruby
|
14
|
+
gem 'action_dispatch-disable_x_xss_protection'
|
15
|
+
```
|
16
|
+
|
17
|
+
And then execute:
|
18
|
+
|
19
|
+
```bash
|
20
|
+
$ bundle
|
21
|
+
```
|
22
|
+
|
23
|
+
Assumed that a server has started by `bin/rails s`:
|
24
|
+
|
25
|
+
```
|
26
|
+
# before installing this gem
|
27
|
+
$ curl -sI http://localhost:3000 | grep X-XSS-Protection
|
28
|
+
X-XSS-Protection: 1; mode=block
|
29
|
+
|
30
|
+
# after installing this gem
|
31
|
+
$ curl -sI http://localhost:3000 | grep X-XSS-Protection
|
32
|
+
X-XSS-Protection: 0
|
33
|
+
```
|
34
|
+
|
35
|
+
## Contributing
|
36
|
+
|
37
|
+
Bug reports and pull requests are welcome on GitHub at https://github.com/pepabo/action_dispatch-disable_x_xss_protection.
|
38
|
+
|
39
|
+
## License
|
40
|
+
|
41
|
+
The gem is available as open source under the terms of the [MIT License](https://opensource.org/licenses/MIT).
|
data/Rakefile
ADDED
@@ -0,0 +1,27 @@
|
|
1
|
+
begin
|
2
|
+
require 'bundler/setup'
|
3
|
+
rescue LoadError
|
4
|
+
puts 'You must `gem install bundler` and `bundle install` to run rake tasks'
|
5
|
+
end
|
6
|
+
|
7
|
+
require 'rdoc/task'
|
8
|
+
|
9
|
+
RDoc::Task.new(:rdoc) do |rdoc|
|
10
|
+
rdoc.rdoc_dir = 'rdoc'
|
11
|
+
rdoc.title = 'ActionDispatch::DisableXXssProtection'
|
12
|
+
rdoc.options << '--line-numbers'
|
13
|
+
rdoc.rdoc_files.include('README.md')
|
14
|
+
rdoc.rdoc_files.include('lib/**/*.rb')
|
15
|
+
end
|
16
|
+
|
17
|
+
require 'bundler/gem_tasks'
|
18
|
+
|
19
|
+
require 'rake/testtask'
|
20
|
+
|
21
|
+
Rake::TestTask.new(:test) do |t|
|
22
|
+
t.libs << 'test'
|
23
|
+
t.pattern = 'test/**/*_test.rb'
|
24
|
+
t.verbose = false
|
25
|
+
end
|
26
|
+
|
27
|
+
task default: :test
|
@@ -0,0 +1 @@
|
|
1
|
+
require "action_dispatch/disable_x_xss_protection/railtie"
|
@@ -0,0 +1,9 @@
|
|
1
|
+
module ActionDispatch
|
2
|
+
module DisableXXssProtection
|
3
|
+
class Railtie < ::Rails::Railtie
|
4
|
+
initializer 'disable_x_xss_protection', after: 'action_dispatch.configure' do |app|
|
5
|
+
ActionDispatch::Response.default_headers = app.config.action_dispatch.default_headers.merge('X-XSS-Protection' => '0')
|
6
|
+
end
|
7
|
+
end
|
8
|
+
end
|
9
|
+
end
|
metadata
ADDED
@@ -0,0 +1,78 @@
|
|
1
|
+
--- !ruby/object:Gem::Specification
|
2
|
+
name: action_dispatch-disable_x_xss_protection
|
3
|
+
version: !ruby/object:Gem::Version
|
4
|
+
version: 0.1.0
|
5
|
+
platform: ruby
|
6
|
+
authors:
|
7
|
+
- Kohei Yamamoto
|
8
|
+
autorequire:
|
9
|
+
bindir: bin
|
10
|
+
cert_chain: []
|
11
|
+
date: 2020-04-24 00:00:00.000000000 Z
|
12
|
+
dependencies:
|
13
|
+
- !ruby/object:Gem::Dependency
|
14
|
+
name: rails
|
15
|
+
requirement: !ruby/object:Gem::Requirement
|
16
|
+
requirements:
|
17
|
+
- - ">="
|
18
|
+
- !ruby/object:Gem::Version
|
19
|
+
version: '0'
|
20
|
+
type: :runtime
|
21
|
+
prerelease: false
|
22
|
+
version_requirements: !ruby/object:Gem::Requirement
|
23
|
+
requirements:
|
24
|
+
- - ">="
|
25
|
+
- !ruby/object:Gem::Version
|
26
|
+
version: '0'
|
27
|
+
- !ruby/object:Gem::Dependency
|
28
|
+
name: sqlite3
|
29
|
+
requirement: !ruby/object:Gem::Requirement
|
30
|
+
requirements:
|
31
|
+
- - ">="
|
32
|
+
- !ruby/object:Gem::Version
|
33
|
+
version: '0'
|
34
|
+
type: :development
|
35
|
+
prerelease: false
|
36
|
+
version_requirements: !ruby/object:Gem::Requirement
|
37
|
+
requirements:
|
38
|
+
- - ">="
|
39
|
+
- !ruby/object:Gem::Version
|
40
|
+
version: '0'
|
41
|
+
description: This gem disables the X-XSS-Protection header which Action Dispatch sets
|
42
|
+
by default.
|
43
|
+
email:
|
44
|
+
- kymmt90@gmail.com
|
45
|
+
executables: []
|
46
|
+
extensions: []
|
47
|
+
extra_rdoc_files: []
|
48
|
+
files:
|
49
|
+
- MIT-LICENSE
|
50
|
+
- README.md
|
51
|
+
- Rakefile
|
52
|
+
- lib/action_dispatch/disable_x_xss_protection.rb
|
53
|
+
- lib/action_dispatch/disable_x_xss_protection/railtie.rb
|
54
|
+
- lib/action_dispatch/disable_x_xss_protection/version.rb
|
55
|
+
homepage: https://github.com/pepabo/action_dispatch-disable_x_xss_protection
|
56
|
+
licenses:
|
57
|
+
- MIT
|
58
|
+
metadata: {}
|
59
|
+
post_install_message:
|
60
|
+
rdoc_options: []
|
61
|
+
require_paths:
|
62
|
+
- lib
|
63
|
+
required_ruby_version: !ruby/object:Gem::Requirement
|
64
|
+
requirements:
|
65
|
+
- - ">="
|
66
|
+
- !ruby/object:Gem::Version
|
67
|
+
version: '0'
|
68
|
+
required_rubygems_version: !ruby/object:Gem::Requirement
|
69
|
+
requirements:
|
70
|
+
- - ">="
|
71
|
+
- !ruby/object:Gem::Version
|
72
|
+
version: '0'
|
73
|
+
requirements: []
|
74
|
+
rubygems_version: 3.0.3
|
75
|
+
signing_key:
|
76
|
+
specification_version: 4
|
77
|
+
summary: Disables the X-XSS-Protection header which Action Dispatch sets by default
|
78
|
+
test_files: []
|