brakeman 4.6.0 → 4.6.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c08fdc219a1ca48c2559791bd5ddf1053c44090bfad9e436717cb3624f43ea48
-  data.tar.gz: f99e7f2fe9a34b26120860386d5d42bfdd267ba90d70190875f5cc01bb9c5a4e
+  metadata.gz: b3a63b874cc2d00c6cf8c09fa54b80e8539c38dc8cf57441b13c4f4079952fdc
+  data.tar.gz: aa7401cc86bd33dad9de38c72a02f0bf8a02e8c60c5464fc92b38babede3f0e3
 SHA512:
-  metadata.gz: 1f936807fb350f6424bb663ab14e2024d0e28c38f30dd0d59ed78ddf3476d6e277a01c5f1f793d42ca51465fede65f2dd37e562c6f3a09caca05f9b226d12c97
-  data.tar.gz: 70f5d66778b8cdad63ff67a3abeea065c8ceb55340c0263f2d5a8ac2805916ff9b764a3e6e281060f751fe2ec0f54e6d86df447cf26f46e365249da0ce350bdd
+  metadata.gz: 9784076e00aecded71a8326c848e732342ba5c1b8d83671bbee4a4cca63f62b8383874b544cdf982f68f61febda39b2a9a5d98121c310a3dcfe67c0bb9a09ebe
+  data.tar.gz: 59d0925f5ae93eecf39531f1daf0988137785d93bb640916ecfb95a8487d43dc038c43515c373fc930ced4a74ebc9bf1884dd99df710b844dc2e3667e6010d45

data/CHANGES.md

@@ -1,3 +1,7 @@
+# 4.6.1
+
+* Fix Reverse Tabnabbing warning message (Steffen Schildknecht / Jörg Schiller)
+
 # 4.6.0
 
 * Skip calls to `dup`

data/lib/brakeman/checks/check_reverse_tabnabbing.rb

@@ -46,7 +46,7 @@ class Brakeman::CheckReverseTabnabbing < Brakeman::BaseCheck
     warn :result => result,
       :warning_type => "Reverse Tabnabbing",
       :warning_code => :reverse_tabnabbing,
-      :message => msg("When opening a link in a new tab without setting ", msg_code('rel: "noopener noreferr"'),
+      :message => msg("When opening a link in a new tab without setting ", msg_code('rel: "noopener noreferrer"'),
                       ", the new tab can control the parent tab's location. For example, an attacker could redirect to a phishing page."),
       :confidence => confidence,
       :user_input => rel

data/lib/brakeman/version.rb

@@ -1,3 +1,3 @@
 module Brakeman
-  Version = "4.6.0"
+  Version = "4.6.1"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: brakeman
 version: !ruby/object:Gem::Version
-  version: 4.6.0
+  version: 4.6.1
 platform: ruby
 authors:
 - Justin Collins
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-07-23 00:00:00.000000000 Z
+date: 2019-07-24 00:00:00.000000000 Z
 dependencies: []
 description: Brakeman detects security vulnerabilities in Ruby on Rails applications
   via static analysis.