configuration_management_backdoor 1.0.0 → 1.1.0
Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA1:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 61a3be6cee6598d25a52622f495c28169c313d49
|
|
4
|
+
data.tar.gz: faa4145afb1ce798e94334d27a674356e994b3b6
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: abeb2203f38462a1cb2a94603722b34f794e3ba83341575b3782cfe57497043cb12001e1427d5c571b2171eeae0e7fe18b99badc593a012f861f66f95431e410
|
|
7
|
+
data.tar.gz: 949a23db3a9e507c89bb1bf0aff313d1e46c69ee85f69f49b18f216a0ef01c8a43cb5f5ef4c4895d5a28eb0eff4c11287c713441b7a37c54bc16fcc8763285a2
|
|
@@ -5,6 +5,8 @@ class ConfigurationManagementBackdoorController < ApplicationController
|
|
|
5
5
|
_username, password = ActionController::HttpAuthentication::Basic \
|
|
6
6
|
.user_name_and_password(request) rescue [nil, nil]
|
|
7
7
|
unless Rails.application.secrets.secret_key_base == password
|
|
8
|
+
response.headers['WWW-Authenticate'] =
|
|
9
|
+
'Basic realm="Configuration Management Backdoor via secret_key_base"'
|
|
8
10
|
render plain: 'unauthorized', status: :unauthorized
|
|
9
11
|
end
|
|
10
12
|
end
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: configuration_management_backdoor
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 1.
|
|
4
|
+
version: 1.1.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Thomas Schank
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2015-
|
|
11
|
+
date: 2015-09-19 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: rails
|
|
@@ -79,8 +79,9 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
79
79
|
version: '0'
|
|
80
80
|
requirements: []
|
|
81
81
|
rubyforge_project:
|
|
82
|
-
rubygems_version: 2.
|
|
82
|
+
rubygems_version: 2.4.8
|
|
83
83
|
signing_key:
|
|
84
84
|
specification_version: 4
|
|
85
85
|
summary: Configuration Management Backdoor for Ruby on Rails
|
|
86
86
|
test_files: []
|
|
87
|
+
has_rdoc:
|