brakeman-lib 4.6.0 → 4.6.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9801d95660e71117c4d1578f6413c32063a5da4b3dbfa50ef351a4b6b1cc2b0a
-  data.tar.gz: d0fa01b7a2ae2cca03656cdd54197198f4284dec2ae1a38e12a3b0859aae249a
+  metadata.gz: 6eaaa0c21996b84e6ae73284cb743a1801428f643a757e09c25d1f907c2f6c66
+  data.tar.gz: e0ee33be554dcc58b89926d709625afd4df0834f20a374ec210630992108e615
 SHA512:
-  metadata.gz: 026dffce4f3530198f8dc2663455ff784d0155ff1b9a69daf2f60e9c2ca85839ea202c3f37d21f2942e70f129002d50073cb850ad023b687344b683c6256df89
-  data.tar.gz: 02f647f5fb135d6ff6dc446ac4dc2772fba090710fee36597329647e7d179f5ef407c7825105940063de8bb8dd07afcc73033bd90fc452f028d43cfff4daa773
+  metadata.gz: c3cef641ef58cb656a1f11706fd7da8e36ebaff5cc8e0473c901368c46eec1333775a58eac4a5f3c5b0b8f38786e698aae38e9d50685d34a34953a0bdf2558e7
+  data.tar.gz: 68f49be644f4aa8de6b7cef78c8b9948984f73f265052b12d861a06231d5aa3620b4c227e7129606dba71a6498a0da4cafd37d0212875b37a9c1fbe03d9c9f5d

data/CHANGES.md

@@ -1,3 +1,7 @@
+# 4.6.1
+
+* Fix Reverse Tabnabbing warning message (Steffen Schildknecht / Jörg Schiller)
+
 # 4.6.0
 
 * Skip calls to `dup`

data/lib/brakeman/checks/check_reverse_tabnabbing.rb

@@ -46,7 +46,7 @@ class Brakeman::CheckReverseTabnabbing < Brakeman::BaseCheck
     warn :result => result,
       :warning_type => "Reverse Tabnabbing",
       :warning_code => :reverse_tabnabbing,
-      :message => msg("When opening a link in a new tab without setting ", msg_code('rel: "noopener noreferr"'),
+      :message => msg("When opening a link in a new tab without setting ", msg_code('rel: "noopener noreferrer"'),
                       ", the new tab can control the parent tab's location. For example, an attacker could redirect to a phishing page."),
       :confidence => confidence,
       :user_input => rel

data/lib/brakeman/version.rb

@@ -1,3 +1,3 @@
 module Brakeman
-  Version = "4.6.0"
+  Version = "4.6.1"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: brakeman-lib
 version: !ruby/object:Gem::Version
-  version: 4.6.0
+  version: 4.6.1
 platform: ruby
 authors:
 - Justin Collins
@@ -9,7 +9,7 @@ autorequire:
 bindir: bin
 cert_chain:
 - brakeman-public_cert.pem
-date: 2019-07-23 00:00:00.000000000 Z
+date: 2019-07-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: minitest