http-headers-verifier 1.0.1 → 1.0.2
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/.travis.yml +1 -0
- data/Gemfile.lock +4 -4
- data/exe/http-headers-verifier.rb +4 -3
- data/lib/http_headers_validations.rb +1 -1
- data/lib/version.rb +1 -1
- metadata +2 -2
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 876dc11e91a8009ab043e297d62037a84173ef5fedd2379a2665eaea4ec73634
|
4
|
+
data.tar.gz: 8896e7c6348ccbf0d9d40dfb35615434bd39d401377e5dcc171a440d46b35a36
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: af6e40055c06216f0406d83afd089826bcb652a760aaf1d3d3fead45658e1434978a2aef6403ec08f91b6730568643b794a1d57aaf4473bf142bdeed1ed1bb26
|
7
|
+
data.tar.gz: 358bdc7bfff3659f2e19c3717ea3783b922606e19c4677a3bea2c5a2bc3853eb04fba0c50f999a2bf603b3798c90c88106584899b1d5ec61ba08b346f8f0a38e
|
data/.travis.yml
CHANGED
data/Gemfile.lock
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
PATH
|
2
2
|
remote: .
|
3
3
|
specs:
|
4
|
-
http-headers-verifier (1.0.
|
4
|
+
http-headers-verifier (1.0.2)
|
5
5
|
typhoeus (~> 1.4)
|
6
6
|
|
7
7
|
GEM
|
@@ -9,9 +9,9 @@ GEM
|
|
9
9
|
specs:
|
10
10
|
byebug (9.1.0)
|
11
11
|
diff-lcs (1.4.4)
|
12
|
-
ethon (0.
|
13
|
-
ffi (>= 1.
|
14
|
-
ffi (1.
|
12
|
+
ethon (0.15.0)
|
13
|
+
ffi (>= 1.15.0)
|
14
|
+
ffi (1.15.5)
|
15
15
|
rake (13.0.1)
|
16
16
|
rspec (3.9.0)
|
17
17
|
rspec-core (~> 3.9.0)
|
@@ -9,6 +9,7 @@ require_relative '../lib/http_headers_utils'
|
|
9
9
|
|
10
10
|
FILE_NAME_PREFIX = 'headers-rules-'
|
11
11
|
HTTP_TIMEOUT_IN_SECONDS = 3
|
12
|
+
SET_COOKIE_NAME = 'set-cookie'
|
12
13
|
|
13
14
|
if ARGV.length != 3 && ARGV.length != 2
|
14
15
|
puts "usage: http-headers-verifier.rb [comma seperated policy names] [url] [?verbose]"
|
@@ -40,15 +41,15 @@ def verify_headers!(actual_headers, rules)
|
|
40
41
|
actual_headers.each do |expected_pair|
|
41
42
|
actual_header, actual_value = expected_pair[0]
|
42
43
|
next if checked_already.include? actual_header
|
43
|
-
next if actual_header.downcase ==
|
44
|
+
next if actual_header.downcase == SET_COOKIE_NAME
|
44
45
|
actual_value = actual_headers[actual_header]
|
45
46
|
actual_header_errors = HttpHeadersValidations.assert_extra_header(actual_header, actual_value,
|
46
47
|
rules[:ignored_headers], rules[:headers_to_avoid])
|
47
48
|
errors.push(actual_header_errors) unless actual_header_errors.nil?
|
48
49
|
end
|
49
50
|
|
50
|
-
unless actual_headers[
|
51
|
-
[actual_headers[
|
51
|
+
unless actual_headers[SET_COOKIE_NAME].nil?
|
52
|
+
[actual_headers[SET_COOKIE_NAME]].flatten.each do |cookie_str|
|
52
53
|
parsed_cookie = NaiveCookie.new(cookie_str)
|
53
54
|
error_text, failed = HttpHeadersValidations.assert_cookie_value(parsed_cookie, rules[:cookie_attr])
|
54
55
|
errors.push(error_text) if failed
|
@@ -15,7 +15,7 @@ module HttpHeadersValidations
|
|
15
15
|
text = "Expected Header '#{expected_header}' matched!"
|
16
16
|
else
|
17
17
|
failed = true
|
18
|
-
text = "Expected Header '#{HttpHeadersUtils.bold(expected_header)}' failed!
|
18
|
+
text = "Expected Header '#{HttpHeadersUtils.bold(expected_header)}' failed! \nExpected Value:\n#{expected_value} \nActual Value:\n#{actual_value}."
|
19
19
|
end
|
20
20
|
icon = failed ? "🛑" : "🍏"
|
21
21
|
|
data/lib/version.rb
CHANGED
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: http-headers-verifier
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 1.0.
|
4
|
+
version: 1.0.2
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Avner Cohen
|
8
8
|
autorequire:
|
9
9
|
bindir: exe
|
10
10
|
cert_chain: []
|
11
|
-
date:
|
11
|
+
date: 2022-06-23 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: bundler
|