header_guard 0.3.0 → 0.3.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/Gemfile.lock +2 -2
- data/header_guard.gemspec +18 -2
- data/lib/header_guard/version.rb +1 -1
- metadata +21 -10
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 99b85ffba2d19f2ff2b257e3761fc0e05e76f97af88fe738d71a778bbd320f7b
|
|
4
|
+
data.tar.gz: 59f5deac7c529231826466e6a93ca697b5d8371660a80babb84f970aefbe0ccb
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 92e8fa128eb516c173410ac3d7b379443047c75b1a42186cc3881b2758560ed4e68ee7f78939cdb06d50ed9af834a75c86ab70441583a2a2259121c6dd2f4903
|
|
7
|
+
data.tar.gz: d2c1ff21659b4d7fea372ec20462b7a1eef457f7e0b6582f5ef446c76ad09c4a2c2cd107cc90da3f669a997ae81e2b5542e32d13071e8093f4a90592a6569edb
|
data/Gemfile.lock
CHANGED
data/header_guard.gemspec
CHANGED
|
@@ -13,6 +13,15 @@ Gem::Specification.new do |spec|
|
|
|
13
13
|
spec.homepage = "https://github.com/danielefrisanco/headerguard"
|
|
14
14
|
spec.license = "MIT"
|
|
15
15
|
spec.required_ruby_version = ">= 2.6.6"
|
|
16
|
+
|
|
17
|
+
spec.metadata["homepage_uri"] = spec.homepage
|
|
18
|
+
spec.metadata["source_code_uri"] = spec.homepage
|
|
19
|
+
spec.metadata["changelog_uri"] = "#{spec.homepage}/blob/main/CHANGELOG.md"
|
|
20
|
+
spec.metadata["bug_tracker_uri"] = "#{spec.homepage}/issues"
|
|
21
|
+
# Require multi-factor auth for anyone pushing this gem. A security gem is a
|
|
22
|
+
# high-value target for account takeover; this makes a stolen API key alone
|
|
23
|
+
# insufficient to publish a release.
|
|
24
|
+
spec.metadata["rubygems_mfa_required"] = "true"
|
|
16
25
|
# Specify which files should be added to the gem when it is released.
|
|
17
26
|
spec.files = Dir.chdir(File.expand_path(__dir__)) do
|
|
18
27
|
`git ls-files -z`.split("\x0").reject do |f|
|
|
@@ -29,9 +38,16 @@ Gem::Specification.new do |spec|
|
|
|
29
38
|
spec.require_paths = ["lib"]
|
|
30
39
|
|
|
31
40
|
# Runtime dependencies
|
|
32
|
-
|
|
41
|
+
#
|
|
42
|
+
# The middleware calls no Rack API at all -- it only reads and writes the
|
|
43
|
+
# [status, headers, body] triplet -- and handles both Rack 2 (mixed-case) and
|
|
44
|
+
# Rack 3 (lowercase) header conventions, so it works on either major. The
|
|
45
|
+
# upper bound is deliberate: a new Rack major could change the response
|
|
46
|
+
# contract, and this gem should fail to resolve rather than silently inject
|
|
47
|
+
# nothing (which is exactly what happened on Rack 3 before 0.1.2).
|
|
48
|
+
spec.add_runtime_dependency "rack", ">= 2.0", "< 4"
|
|
33
49
|
|
|
34
50
|
# Development dependencies
|
|
35
51
|
spec.add_development_dependency "rspec", "~> 3.12"
|
|
36
|
-
spec.add_development_dependency "rack-test"
|
|
52
|
+
spec.add_development_dependency "rack-test", "~> 2.0"
|
|
37
53
|
end
|
data/lib/header_guard/version.rb
CHANGED
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: header_guard
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.3.
|
|
4
|
+
version: 0.3.1
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Gemini AI
|
|
@@ -15,16 +15,22 @@ dependencies:
|
|
|
15
15
|
name: rack
|
|
16
16
|
requirement: !ruby/object:Gem::Requirement
|
|
17
17
|
requirements:
|
|
18
|
-
- - "
|
|
18
|
+
- - ">="
|
|
19
|
+
- !ruby/object:Gem::Version
|
|
20
|
+
version: '2.0'
|
|
21
|
+
- - "<"
|
|
19
22
|
- !ruby/object:Gem::Version
|
|
20
|
-
version: '
|
|
23
|
+
version: '4'
|
|
21
24
|
type: :runtime
|
|
22
25
|
prerelease: false
|
|
23
26
|
version_requirements: !ruby/object:Gem::Requirement
|
|
24
27
|
requirements:
|
|
25
|
-
- - "
|
|
28
|
+
- - ">="
|
|
26
29
|
- !ruby/object:Gem::Version
|
|
27
|
-
version: '
|
|
30
|
+
version: '2.0'
|
|
31
|
+
- - "<"
|
|
32
|
+
- !ruby/object:Gem::Version
|
|
33
|
+
version: '4'
|
|
28
34
|
- !ruby/object:Gem::Dependency
|
|
29
35
|
name: rspec
|
|
30
36
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -43,16 +49,16 @@ dependencies:
|
|
|
43
49
|
name: rack-test
|
|
44
50
|
requirement: !ruby/object:Gem::Requirement
|
|
45
51
|
requirements:
|
|
46
|
-
- - "
|
|
52
|
+
- - "~>"
|
|
47
53
|
- !ruby/object:Gem::Version
|
|
48
|
-
version: '0'
|
|
54
|
+
version: '2.0'
|
|
49
55
|
type: :development
|
|
50
56
|
prerelease: false
|
|
51
57
|
version_requirements: !ruby/object:Gem::Requirement
|
|
52
58
|
requirements:
|
|
53
|
-
- - "
|
|
59
|
+
- - "~>"
|
|
54
60
|
- !ruby/object:Gem::Version
|
|
55
|
-
version: '0'
|
|
61
|
+
version: '2.0'
|
|
56
62
|
description: Designed for applications that require strong browser-side security,
|
|
57
63
|
HeaderGuard automatically injects HSTS, X-Content-Type-Options, X-Frame-Options,
|
|
58
64
|
and a customizable CSP. Ideal for SSO and high-security web services.
|
|
@@ -74,7 +80,12 @@ files:
|
|
|
74
80
|
homepage: https://github.com/danielefrisanco/headerguard
|
|
75
81
|
licenses:
|
|
76
82
|
- MIT
|
|
77
|
-
metadata:
|
|
83
|
+
metadata:
|
|
84
|
+
homepage_uri: https://github.com/danielefrisanco/headerguard
|
|
85
|
+
source_code_uri: https://github.com/danielefrisanco/headerguard
|
|
86
|
+
changelog_uri: https://github.com/danielefrisanco/headerguard/blob/main/CHANGELOG.md
|
|
87
|
+
bug_tracker_uri: https://github.com/danielefrisanco/headerguard/issues
|
|
88
|
+
rubygems_mfa_required: 'true'
|
|
78
89
|
post_install_message:
|
|
79
90
|
rdoc_options: []
|
|
80
91
|
require_paths:
|