bridgetown-content-security-policy 0.1.0 → 0.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ce83a05c8a7eecd5f4f48d4e7cfcf6b85fc523f7dc50c9450296430500a21db3
-  data.tar.gz: aa48a40dda361021a71ac67295ec6c702140fb5150dc541827d134038d786bc9
+  metadata.gz: 292cea094aafa8dee2b33e25a254763b873bbbc0dea3071b3efa9708cb326e88
+  data.tar.gz: 344305e3fea005fc0534d83587d307de52f59b924a0e95e5688880e02eecf0a4
 SHA512:
-  metadata.gz: ebf42495d3701613d9ce87225a801df3f0b3f5779fb83a7385fb2722c94cc045444e15db29335920eea6da78e58040a055a3362f364dd29fe800f770d5a8d1fc
-  data.tar.gz: 763fd7f7c7b5c6ecd63127411c76aa5eae0837e43755c202615ea3064228f552f6e07f8f364ccb232c368829f82f0a7d245eabcdcc1c65f6814ef64e44dde57b
+  metadata.gz: feb6637a476c50ee50ac2c9ed8068bfd83afbd4ac30754284b5a80ac5e76b2b9349ef3138ab1b5b708af50460324815bda080f90f69c85f5295ab6ba19646532
+  data.tar.gz: 897c577c9924d0bf602c1b1acfd8d6caecfaeb981458e517e538a2d2bad17f19fae2dfb03288fc5885b0a8b281a70d7c16426d620ef912c41f4ace318ca86f50

data/bridgetown-content-security-policy.gemspec

@@ -7,7 +7,7 @@ Gem::Specification.new do |spec|
   spec.version       = BridgetownContentSecurityPolicy::VERSION
   spec.author        = "Ayush Newatia"
   spec.email         = "ayush@hey.com"
-  spec.summary       = "Add a content security policy to your website using Ruby"
+  spec.summary       = "Add a content security policy to your website using a convenient Ruby DSL"
   spec.homepage      = "https://github.com/ayushn21/bridgetown-content-security-policy"
   spec.license       = "MIT"
 
@@ -18,7 +18,7 @@ Gem::Specification.new do |spec|
 
   spec.required_ruby_version = ">= 2.5.0"
 
-  spec.add_dependency "bridgetown", ">= 0.15", "< 2.0"
+  spec.add_dependency "bridgetown", ">= 0.18", "< 2.0"
 
   spec.add_development_dependency "bundler"
   spec.add_development_dependency "nokogiri", "~> 1.6"

data/bridgetown.automation.rb

@@ -2,7 +2,39 @@ say_status :content_security_policy, "Installing the bridgetown-content-security
 
 add_bridgetown_plugin "bridgetown-content-security-policy"
 
-copy_file "./templates/content_security_policy.config.rb", "content_security_policy.config.rb"
+create_file "content_security_policy.config.rb" do
+  <<~RUBY
+  # The recommended default Content Security Policy 
+
+  BridgetownContentSecurityPolicy.configure :default do |policy|
+      policy.default_src :self
+      policy.img_src     :self, :data
+      policy.object_src  :none
+  end
+
+  # All other policies with inherit from :default
+  # To allow inline styles on certain pages, we can define the following
+  # policy which inherits all the values from :default and defines a style_src
+  # 
+  # BridgetownContentSecurityPolicy.configure :allow_inline_styles do |policy|
+  #     policy.style_src   :self, :unsafe_inline
+  # end
+
+
+  # This is an example of a more complex policy demonstrating the DSL
+  # For further information see the following documentation
+  # https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy
+
+  # BridgetownContentSecurityPolicy.configure :default do |policy|
+  #     policy.default_src :self
+  #     policy.font_src    :self, :https, :data
+  #     policy.img_src     :self, :https, :data
+  #     policy.object_src  :none
+  #     policy.script_src  :self, :https
+  #     policy.style_src   :self, :https
+  # end
+  RUBY
+end
 
 say_status :content_security_policy, "All done! Please add {% content_security_policy %} to the head tag in your layouts."
 say_status :content_security_policy, "Please see the new content_security_policy.rb file for details"

data/lib/bridgetown-content-security-policy/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module BridgetownContentSecurityPolicy
-  VERSION = "0.1.0"
+  VERSION = "0.1.1"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: bridgetown-content-security-policy
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.1
 platform: ruby
 authors:
 - Ayush Newatia
@@ -16,7 +16,7 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0.15'
+        version: '0.18'
     - - "<"
       - !ruby/object:Gem::Version
         version: '2.0'
@@ -26,7 +26,7 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0.15'
+        version: '0.18'
     - - "<"
       - !ruby/object:Gem::Version
         version: '2.0'
@@ -106,7 +106,6 @@ files:
 - lib/bridgetown-content-security-policy/builder.rb
 - lib/bridgetown-content-security-policy/policy.rb
 - lib/bridgetown-content-security-policy/version.rb
-- templates/content_security_policy.config.rb
 homepage: https://github.com/ayushn21/bridgetown-content-security-policy
 licenses:
 - MIT
@@ -129,5 +128,5 @@ requirements: []
 rubygems_version: 3.1.4
 signing_key: 
 specification_version: 4
-summary: Add a content security policy to your website using Ruby
+summary: Add a content security policy to your website using a convenient Ruby DSL
 test_files: []

data/templates/content_security_policy.config.rb

@@ -1,29 +0,0 @@
-# The recommended default Content Security Policy 
-
-BridgetownContentSecurityPolicy.configure :default do |policy|
-    policy.default_src :self
-    policy.img_src     :self, :data
-    policy.object_src  :none
-end
-
-# All other policies with inherit from :default
-# To allow inline styles on certain pages, we can define the following
-# policy which inherits all the values from :default and defines a style_src
-# 
-# BridgetownContentSecurityPolicy.configure :allow_inline_styles do |policy|
-#     policy.style_src   :self, :unsafe_inline
-# end
-
-
-# This is an example of a more complex policy demonstrating the DSL
-# For further information see the following documentation
-# https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy
-
-# BridgetownContentSecurityPolicy.configure :default do |policy|
-#     policy.default_src :self
-#     policy.font_src    :self, :https, :data
-#     policy.img_src     :self, :https, :data
-#     policy.object_src  :none
-#     policy.script_src  :self, :https
-#     policy.style_src   :self, :https
-# end