http-headers-verifier 0.0.1 → 0.0.2

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: f47911e699a60879db447c6d25411e367d65dfc7ef459db22bce8fff74613868
4
- data.tar.gz: 9b16eacb1997b18effa0a7dfcdb1dfe7adfa476ad1c0d1270ac1e93da462d36a
3
+ metadata.gz: 3ca4c9049d2e31abe3169fcbec6279ac85ee414ffc8c52ddbb16b8ebb1a6fd98
4
+ data.tar.gz: e56125c9ce5d715efe6030a72691188497582cff6e141091080a2e07381c5255
5
5
  SHA512:
6
- metadata.gz: 464460fce9599c6f9c2a3bf4bdba6349237a5bcbede82611a56f6f7f9e5ac1cbc30e6ca485f4a32db27ad2b02df22e69653f2eff738a0e1fb95301f7eae951b3
7
- data.tar.gz: c5546804ddc65920f3eedfe78d6646be858d9341244fbaf31bfc7e3f83341d21e3259c491905d0eac21598f81e1d371024c521aaed6e79f3a0ccd1b4af29da57
6
+ metadata.gz: c52c1108d34df351f1da5cb3b00bb436c3b26934abecb060bbc5b9b526003d35088ca465a552d5338e0b89b874fee64b43e7e9835099cc35960e76289c814931
7
+ data.tar.gz: 2edf8133d86339754ec519528e0490710d8f2667e60f01b1c623ab769eb3b42bf570f0c04ac6dae00ce910bc13b7bcd002681bf86110b438f0f37e1c360d47bf
data/.gitignore CHANGED
@@ -9,3 +9,4 @@
9
9
 
10
10
  # rspec failure tracking
11
11
  .rspec_status
12
+ *.gem
@@ -1,7 +1,7 @@
1
1
  PATH
2
2
  remote: .
3
3
  specs:
4
- http-headers-verifier (0.0.1)
4
+ http-headers-verifier (0.0.2)
5
5
  typhoeus (~> 1.4)
6
6
 
7
7
  GEM
@@ -32,10 +32,10 @@ PLATFORMS
32
32
  ruby
33
33
 
34
34
  DEPENDENCIES
35
- bundler (~> 1.17)
35
+ bundler
36
36
  byebug (~> 9.0)
37
37
  http-headers-verifier!
38
38
  rspec (~> 3.0)
39
39
 
40
40
  BUNDLED WITH
41
- 1.17.2
41
+ 2.1.4
data/README.md CHANGED
@@ -1,5 +1,7 @@
1
1
  # Http Headers Verifier
2
2
 
3
+ [![Gem Version](https://badge.fury.io/rb/http-headers-verifier.svg)](https://badge.fury.io/rb/http-headers-verifier)
4
+
3
5
  Verify a pre-defined HTTP headers configurations.
4
6
  Unlike some other similar projects, this is not meant to enforce best practices, instead it is meant to define policies on top of headers and enforce them.
5
7
  As a side effect, this means you can define specific OWASP (for example) best practices and verify them, but unlike testing for best practices, this is inteneded to verify an expected headers configuration behavior.
@@ -1,18 +1,17 @@
1
1
  #!/usr/bin/env ruby
2
2
  require 'yaml'
3
- require 'byebug'
4
3
 
5
4
  require 'typhoeus'
6
5
 
7
- require_relative './lib/naive_cookie'
8
- require_relative './lib/http_headers_validations'
9
- require_relative './lib/http_headers_utils'
6
+ require_relative '../lib/naive_cookie'
7
+ require_relative '../lib/http_headers_validations'
8
+ require_relative '../lib/http_headers_utils'
10
9
 
11
10
  FILE_NAME_PREFIX = 'headers-rules-'
12
11
  HTTP_TIMEOUT_IN_SECONDS = 3
13
12
 
14
13
  if ARGV.length != 3 && ARGV.length != 2
15
- print "usage: http-headers-verifier.rb [comma seperated policy names] [url] [?verbose]"
14
+ puts "usage: http-headers-verifier.rb [comma seperated policy names] [url] [?verbose]"
16
15
  exit 2
17
16
  end
18
17
 
@@ -6,6 +6,7 @@ require_relative "./lib/version"
6
6
  Gem::Specification.new do |spec|
7
7
  spec.name = "http-headers-verifier"
8
8
  spec.version = HttpHeadersVerifier::VERSION
9
+ spec.platform = Gem::Platform::RUBY
9
10
  spec.authors = ["Avner Cohen"]
10
11
  spec.email = ["israbirding@gmail.com"]
11
12
 
@@ -18,8 +19,6 @@ Gem::Specification.new do |spec|
18
19
  spec.metadata["allowed_push_host"] = "https://rubygems.org"
19
20
 
20
21
  spec.metadata["homepage_uri"] = spec.homepage
21
- # spec.metadata["source_code_uri"] = "TODO: Put your gem's public repo URL here."
22
- # spec.metadata["changelog_uri"] = "TODO: Put your gem's CHANGELOG.md URL here."
23
22
  else
24
23
  raise "RubyGems 2.0 or newer is required to protect against " \
25
24
  "public gem pushes."
@@ -28,14 +27,17 @@ Gem::Specification.new do |spec|
28
27
  spec.files = Dir.chdir(File.expand_path('..', __FILE__)) do
29
28
  `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
30
29
  end
31
- spec.bindir = "exe"
32
- spec.executables = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
30
+
31
+ spec.bindir = "exe"
32
+ spec.executables = ["http-headers-verifier.rb"]
33
33
  spec.require_paths = ["lib"]
34
34
 
35
- spec.add_development_dependency "bundler", "~> 1.17"
35
+ spec.add_development_dependency "bundler"
36
36
  spec.add_development_dependency "rspec", "~> 3.0"
37
37
  spec.add_development_dependency "byebug", "~> 9.0"
38
38
 
39
39
  spec.add_runtime_dependency "typhoeus", "~> 1.4"
40
40
 
41
+ spec.metadata['source_code_uri'] = 'https://github.com/AvnerCohen/http-headers-verifier'
42
+ spec.metadata['bug_tracker_uri'] = 'https://github.com/AvnerCohen/http-headers-verifier/issues'
41
43
  end
@@ -1,3 +1,3 @@
1
1
  module HttpHeadersVerifier
2
- VERSION = "0.0.1"
2
+ VERSION = "0.0.2"
3
3
  end
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: http-headers-verifier
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.0.1
4
+ version: 0.0.2
5
5
  platform: ruby
6
6
  authors:
7
7
  - Avner Cohen
@@ -14,16 +14,16 @@ dependencies:
14
14
  name: bundler
15
15
  requirement: !ruby/object:Gem::Requirement
16
16
  requirements:
17
- - - "~>"
17
+ - - ">="
18
18
  - !ruby/object:Gem::Version
19
- version: '1.17'
19
+ version: '0'
20
20
  type: :development
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
- - - "~>"
24
+ - - ">="
25
25
  - !ruby/object:Gem::Version
26
- version: '1.17'
26
+ version: '0'
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: rspec
29
29
  requirement: !ruby/object:Gem::Requirement
@@ -99,6 +99,8 @@ licenses:
99
99
  metadata:
100
100
  allowed_push_host: https://rubygems.org
101
101
  homepage_uri: https://github.com/AvnerCohen/http-headers-verifier
102
+ source_code_uri: https://github.com/AvnerCohen/http-headers-verifier
103
+ bug_tracker_uri: https://github.com/AvnerCohen/http-headers-verifier/issues
102
104
  post_install_message:
103
105
  rdoc_options: []
104
106
  require_paths: