brakeman-min 4.6.0 → 4.6.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0f2916d8c800c2d3da1efe112dd1a4dd7fafd68bfc9c0d7c765f495ccec46522
-  data.tar.gz: 3ba195217e6e07fcbcfb59192e1820aa2d4b4d9703d62d8a07205413ce3c904b
+  metadata.gz: fa71f00920d2ad833cc54ef035dee162db5ee298cb2c7ba63076e541c1b7680f
+  data.tar.gz: 00c48ba72c0a5a832368a5f14b28db4228bacaf3e9c5386d0a41dee187bc17de
 SHA512:
-  metadata.gz: e1e2cb39f056346a9c9a00a3d3d1afa2291037023396cb64b49681d5039acb0cd1e0f1a7175f88bccebaa8337be3c942a2283c2dd81cac536b4366d73d904d0a
-  data.tar.gz: 8c320ac49aca344b30cdfaf8a68d3909cb181c15cc40a38d5e0bbfeae6ec8de7a4ada8cf7d6e8f70a085e58240d7874cdc4e06f7c73fb0191e96d98bab0b35a5
+  metadata.gz: ce035b30cc3f0f79328b4574c8ea9a7ffd06782de7b201401804f4241fc8abc02ec873835c8bbf1ba1bdd9fba8c436eb5c7f8110b298f53a7d938e6786e8a5ff
+  data.tar.gz: df6afc3cd5c0255a18c0dbaf0de78c539e5a71018bc59de3c3ac9b56041bf93c4cd69d1cc1e819fbb729d0f77efce4b55c4c2c60f004522db1ce7a1e4db8c136

data/CHANGES.md

@@ -1,3 +1,7 @@
+# 4.6.1
+
+* Fix Reverse Tabnabbing warning message (Steffen Schildknecht / Jörg Schiller)
+
 # 4.6.0
 
 * Skip calls to `dup`

data/lib/brakeman/checks/check_reverse_tabnabbing.rb

@@ -46,7 +46,7 @@ class Brakeman::CheckReverseTabnabbing < Brakeman::BaseCheck
     warn :result => result,
       :warning_type => "Reverse Tabnabbing",
       :warning_code => :reverse_tabnabbing,
-      :message => msg("When opening a link in a new tab without setting ", msg_code('rel: "noopener noreferr"'),
+      :message => msg("When opening a link in a new tab without setting ", msg_code('rel: "noopener noreferrer"'),
                       ", the new tab can control the parent tab's location. For example, an attacker could redirect to a phishing page."),
       :confidence => confidence,
       :user_input => rel

data/lib/brakeman/version.rb

@@ -1,3 +1,3 @@
 module Brakeman
-  Version = "4.6.0"
+  Version = "4.6.1"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: brakeman-min
 version: !ruby/object:Gem::Version
-  version: 4.6.0
+  version: 4.6.1
 platform: ruby
 authors:
 - Justin Collins
@@ -9,7 +9,7 @@ autorequire:
 bindir: bin
 cert_chain:
 - brakeman-public_cert.pem
-date: 2019-07-23 00:00:00.000000000 Z
+date: 2019-07-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: minitest