http-headers-verifier 0.0.1 → 0.0.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f47911e699a60879db447c6d25411e367d65dfc7ef459db22bce8fff74613868
-  data.tar.gz: 9b16eacb1997b18effa0a7dfcdb1dfe7adfa476ad1c0d1270ac1e93da462d36a
+  metadata.gz: 1ac28a986024eb8379f484478e29f63a378d6ab2e12f9955474885a5bb8a3bc2
+  data.tar.gz: 698e183f25df82e2e6e2afe6fe97c0446e72c5dcbc51d1d02a343465e192ccb4
 SHA512:
-  metadata.gz: 464460fce9599c6f9c2a3bf4bdba6349237a5bcbede82611a56f6f7f9e5ac1cbc30e6ca485f4a32db27ad2b02df22e69653f2eff738a0e1fb95301f7eae951b3
-  data.tar.gz: c5546804ddc65920f3eedfe78d6646be858d9341244fbaf31bfc7e3f83341d21e3259c491905d0eac21598f81e1d371024c521aaed6e79f3a0ccd1b4af29da57
+  metadata.gz: f34a3175c17658c0f0a738462d1da368ec7ca5b157ba16d5aaf44156101466dd2eec7842f753ec60178368886db5cecb31266796f3bf1993b131634f8fbffd49
+  data.tar.gz: e95f8f01829f3de61397d4b1763299e6deb0534d5a0c9bef303b919cbb2fb5df679971c42fae68fa0305149b1a343d7c07c88027a99ec1b1cdfbf8ec30436f19

data/.gitignore

@@ -9,3 +9,4 @@
 
 # rspec failure tracking
 .rspec_status
+*.gem

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    http-headers-verifier (0.0.1)
+    http-headers-verifier (0.0.6)
       typhoeus (~> 1.4)
 
 GEM
@@ -12,6 +12,7 @@ GEM
     ethon (0.12.0)
       ffi (>= 1.3.0)
     ffi (1.13.1)
+    rake (13.0.1)
     rspec (3.9.0)
       rspec-core (~> 3.9.0)
       rspec-expectations (~> 3.9.0)
@@ -32,9 +33,10 @@ PLATFORMS
   ruby
 
 DEPENDENCIES
-  bundler (~> 1.17)
+  bundler
   byebug (~> 9.0)
   http-headers-verifier!
+  rake (>= 10.0, < 14)
   rspec (~> 3.0)
 
 BUNDLED WITH

data/README.md

@@ -1,5 +1,8 @@
 # Http Headers Verifier
 
+[![Gem Version](https://badge.fury.io/rb/http-headers-verifier.svg)](https://badge.fury.io/rb/http-headers-verifier)
+[![Build Status](https://travis-ci.org/AvnerCohen/http-headers-verifier.svg?branch=master)](https://travis-ci.org/AvnerCohen/http-headers-verifier)
+
 Verify a pre-defined HTTP headers configurations.
 Unlike some other similar projects, this is not meant to enforce best practices, instead it is meant to define policies on top of headers and enforce them.
 As a side effect, this means you can define specific OWASP (for example) best practices and verify them, but unlike testing for best practices, this is inteneded to verify an expected headers configuration behavior.
@@ -25,13 +28,13 @@ Or install it yourself as:
 ### Usage
 
 ```sh
-usage: http-headers-verifier [comma seperated policy names] [url] [?verbose]
+usage: http-headers-verifier.rb [comma seperated policy names] [url] [?verbose]
 ```
 
 #### Example
 
 ```sh
-$> ./http-headers-verifier.rb  default,hs-default https://my.login.page/login verbose
+$> http-headers-verifier.rb  default,hs-default https://my.login.page/login verbose
 
 Starting verification of policies default, hs-default, hs-production:
 	🍏 Expected Header 'Cache-Control' matched!
@@ -55,7 +58,7 @@ Starting verification of policies default, hs-default, hs-production:
 Or in non-verbose mode:
 
 ```sh
-$>./http-headers-verifier.rb  default,hs-default https://my.login.page/loginlogin
+$> http-headers-verifier.rb  default,hs-default https://my.login.page/loginlogin
 Starting verification of policies default, hs-default, hs-production:
 	🛑 Invalid cookie config 'COOKIE_NAME':
  		👺   Cookie not secure.
@@ -96,4 +99,4 @@ The gem is available as open source under the terms of the [MIT License](https:/
 
 ## Code of Conduct
 
-Everyone interacting in the Http::Headers::Verifier project’s codebases, issue trackers, chat rooms and mailing lists is expected to follow the [code of conduct](https://github.com/[USERNAME]/http-headers-verifier/blob/master/CODE_OF_CONDUCT.md).
+Everyone interacting in the `Http Headers Verifier` project’s codebases, issue trackers, chat rooms and mailing lists is expected to follow the [code of conduct](https://github.com/[USERNAME]/http-headers-verifier/blob/master/CODE_OF_CONDUCT.md).

data/Rakefile

@@ -0,0 +1,6 @@
+require "bundler/gem_tasks"
+require "rspec/core/rake_task"
+
+RSpec::Core::RakeTask.new(:spec)
+
+task :default => :spec

data/exe/http-headers-verifier.rb

@@ -1,29 +1,29 @@
 #!/usr/bin/env ruby
 require 'yaml'
-require 'byebug'
 
 require 'typhoeus'
 
-require_relative './lib/naive_cookie'
-require_relative './lib/http_headers_validations'
-require_relative './lib/http_headers_utils'
+require_relative '../lib/naive_cookie'
+require_relative '../lib/http_headers_validations'
+require_relative '../lib/http_headers_utils'
 
 FILE_NAME_PREFIX = 'headers-rules-'
 HTTP_TIMEOUT_IN_SECONDS = 3
 
 if ARGV.length != 3 && ARGV.length != 2
-    print "usage: http-headers-verifier.rb [comma seperated policy names] [url] [?verbose]"
+    puts "usage: http-headers-verifier.rb [comma seperated policy names] [url] [?verbose]"
     exit 2
 end
 
-policy_arg, url, verbose = ARGV
+policy_arg, @url, verbose = ARGV
 @policies = policy_arg.split(',')
 
 HttpHeadersUtils.verbose = !verbose.nil?
 
-actual_headers = Typhoeus.get(url, timeout: HTTP_TIMEOUT_IN_SECONDS, followlocation: true).headers
+actual_headers = Typhoeus.get(@url, timeout: HTTP_TIMEOUT_IN_SECONDS, followlocation: true).headers
 
 def verify_headers!(actual_headers, rules)
+    puts "Testing url: #{@url}"
     puts "Starting verification of policies #{HttpHeadersUtils.bold(@policies.join(", "))}:"
     errors = []
     checked_already = Set.new

data/http-headers-verifier.gemspec

@@ -6,6 +6,7 @@ require_relative "./lib/version"
 Gem::Specification.new do |spec|
   spec.name          = "http-headers-verifier"
   spec.version       = HttpHeadersVerifier::VERSION
+  spec.platform      = Gem::Platform::RUBY
   spec.authors       = ["Avner Cohen"]
   spec.email         = ["israbirding@gmail.com"]
 
@@ -18,8 +19,6 @@ Gem::Specification.new do |spec|
     spec.metadata["allowed_push_host"] = "https://rubygems.org"
 
     spec.metadata["homepage_uri"] = spec.homepage
-    # spec.metadata["source_code_uri"] = "TODO: Put your gem's public repo URL here."
-    # spec.metadata["changelog_uri"] = "TODO: Put your gem's CHANGELOG.md URL here."
   else
     raise "RubyGems 2.0 or newer is required to protect against " \
       "public gem pushes."
@@ -28,14 +27,18 @@ Gem::Specification.new do |spec|
   spec.files         = Dir.chdir(File.expand_path('..', __FILE__)) do
     `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
   end
-  spec.bindir        = "exe"
-  spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
+
+  spec.bindir = "exe"
+  spec.executables      = ["http-headers-verifier.rb"]
   spec.require_paths = ["lib"]
 
-  spec.add_development_dependency "bundler", "~> 1.17"
+  spec.add_development_dependency "bundler"
   spec.add_development_dependency "rspec", "~> 3.0"
   spec.add_development_dependency "byebug", "~> 9.0"
+  spec.add_development_dependency 'rake', '>= 10.0', '< 14'
 
   spec.add_runtime_dependency     "typhoeus", "~> 1.4"
 
+  spec.metadata['source_code_uri'] = 'https://github.com/AvnerCohen/http-headers-verifier'
+  spec.metadata['bug_tracker_uri'] = 'https://github.com/AvnerCohen/http-headers-verifier/issues'
 end

data/lib/http_headers_validations.rb

@@ -15,7 +15,7 @@ module HttpHeadersValidations
             text = "Expected Header '#{expected_header}' matched!"
         else
             failed = true
-            text = "Expected Header '#{HttpHeadersUtils.bold(expected_header)}' failed! '#{expected_value}' was '#{actual_value}'."
+            text = "Expected Header '#{HttpHeadersUtils.bold(expected_header)}' failed! '#{expected_value}' #{HttpHeadersUtils.bold('was')} '#{actual_value}'."
         end
         icon = failed ? "🛑" : "🍏"
 

data/lib/version.rb

@@ -1,3 +1,3 @@
 module HttpHeadersVerifier
-    VERSION = "0.0.1"
+    VERSION = "0.0.7"
 end

metadata

@@ -1,29 +1,29 @@
 --- !ruby/object:Gem::Specification
 name: http-headers-verifier
 version: !ruby/object:Gem::Version
-  version: 0.0.1
+  version: 0.0.7
 platform: ruby
 authors:
 - Avner Cohen
-autorequire: 
+autorequire:
 bindir: exe
 cert_chain: []
-date: 2020-07-28 00:00:00.000000000 Z
+date: 2020-08-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '1.17'
+        version: '0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '1.17'
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
@@ -52,6 +52,26 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '9.0'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '10.0'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '14'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '10.0'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '14'
 - !ruby/object:Gem::Dependency
   name: typhoeus
   requirement: !ruby/object:Gem::Requirement
@@ -85,6 +105,7 @@ files:
 - Gemfile.lock
 - LICENSE.txt
 - README.md
+- Rakefile
 - exe/http-headers-verifier.rb
 - headers-rules-default.yml
 - headers-rules-example.yml
@@ -99,7 +120,9 @@ licenses:
 metadata:
   allowed_push_host: https://rubygems.org
   homepage_uri: https://github.com/AvnerCohen/http-headers-verifier
-post_install_message: 
+  source_code_uri: https://github.com/AvnerCohen/http-headers-verifier
+  bug_tracker_uri: https://github.com/AvnerCohen/http-headers-verifier/issues
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -114,8 +137,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.3
-signing_key: 
+rubygems_version: 3.1.4
+signing_key:
 specification_version: 4
 summary: Verify a pre-defined HTTP headers configurations.
 test_files: []