brakeman-lib 4.6.0 → 4.6.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 9801d95660e71117c4d1578f6413c32063a5da4b3dbfa50ef351a4b6b1cc2b0a
4
- data.tar.gz: d0fa01b7a2ae2cca03656cdd54197198f4284dec2ae1a38e12a3b0859aae249a
3
+ metadata.gz: 6eaaa0c21996b84e6ae73284cb743a1801428f643a757e09c25d1f907c2f6c66
4
+ data.tar.gz: e0ee33be554dcc58b89926d709625afd4df0834f20a374ec210630992108e615
5
5
  SHA512:
6
- metadata.gz: 026dffce4f3530198f8dc2663455ff784d0155ff1b9a69daf2f60e9c2ca85839ea202c3f37d21f2942e70f129002d50073cb850ad023b687344b683c6256df89
7
- data.tar.gz: 02f647f5fb135d6ff6dc446ac4dc2772fba090710fee36597329647e7d179f5ef407c7825105940063de8bb8dd07afcc73033bd90fc452f028d43cfff4daa773
6
+ metadata.gz: c3cef641ef58cb656a1f11706fd7da8e36ebaff5cc8e0473c901368c46eec1333775a58eac4a5f3c5b0b8f38786e698aae38e9d50685d34a34953a0bdf2558e7
7
+ data.tar.gz: 68f49be644f4aa8de6b7cef78c8b9948984f73f265052b12d861a06231d5aa3620b4c227e7129606dba71a6498a0da4cafd37d0212875b37a9c1fbe03d9c9f5d
data/CHANGES.md CHANGED
@@ -1,3 +1,7 @@
1
+ # 4.6.1
2
+
3
+ * Fix Reverse Tabnabbing warning message (Steffen Schildknecht / Jörg Schiller)
4
+
1
5
  # 4.6.0
2
6
 
3
7
  * Skip calls to `dup`
@@ -46,7 +46,7 @@ class Brakeman::CheckReverseTabnabbing < Brakeman::BaseCheck
46
46
  warn :result => result,
47
47
  :warning_type => "Reverse Tabnabbing",
48
48
  :warning_code => :reverse_tabnabbing,
49
- :message => msg("When opening a link in a new tab without setting ", msg_code('rel: "noopener noreferr"'),
49
+ :message => msg("When opening a link in a new tab without setting ", msg_code('rel: "noopener noreferrer"'),
50
50
  ", the new tab can control the parent tab's location. For example, an attacker could redirect to a phishing page."),
51
51
  :confidence => confidence,
52
52
  :user_input => rel
@@ -1,3 +1,3 @@
1
1
  module Brakeman
2
- Version = "4.6.0"
2
+ Version = "4.6.1"
3
3
  end
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: brakeman-lib
3
3
  version: !ruby/object:Gem::Version
4
- version: 4.6.0
4
+ version: 4.6.1
5
5
  platform: ruby
6
6
  authors:
7
7
  - Justin Collins
@@ -9,7 +9,7 @@ autorequire:
9
9
  bindir: bin
10
10
  cert_chain:
11
11
  - brakeman-public_cert.pem
12
- date: 2019-07-23 00:00:00.000000000 Z
12
+ date: 2019-07-24 00:00:00.000000000 Z
13
13
  dependencies:
14
14
  - !ruby/object:Gem::Dependency
15
15
  name: minitest