karafka-web 0.5.0 → 0.5.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (9) hide show
  1. checksums.yaml +4 -4
  2. checksums.yaml.gz.sig +0 -0
  3. data/CHANGELOG.md +4 -1
  4. data/Gemfile.lock +3 -3
  5. data/lib/karafka/web/ui/base.rb +18 -0
  6. data/lib/karafka/web/version.rb +1 -1
  7. data.tar.gz.sig +0 -0
  8. metadata +2 -2
  9. metadata.gz.sig +0 -0
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 9edb576f473624295de9b0f1d62cbed131c9be1b480958a63c33f891fbf7cb19
4
- data.tar.gz: 4f71e3a6ce1ca6eb423550824c5381e3b2b237c1b2af88c9108359bd225a7444
3
+ metadata.gz: 94f427e8f2dc9caf0e031ec3f0f4ef92185ffab89715fa91f71d620062255d45
4
+ data.tar.gz: 7f0f4ea4199f73011fd06bc7d06a1282312bace48fb16abcb93d1796483977b7
5
5
  SHA512:
6
- metadata.gz: 7e0f77ed2a8e6c902596d2fad16938c3117a49c3faa7d9c60e8018c24135b9c3f38e45ffe5a0aa6fffdbf6f514956d4122afbb90a021f0c6f6274e0cb5212e75
7
- data.tar.gz: 6fc0272d850dcdd99c277dabb38c5a0761646709f679b794f5c4b8161eb9217439f087b7d3eba3763bec60902874413506c6492dbb9ee63a992a0b6674124689
6
+ metadata.gz: d7a31d203b3574955215a391f6be9538d2e31cc67a749fc63fa969288b2826a033d8b50532214649b5d0a9a682fecc166f1551d249219e731b90f69cdc98ef19
7
+ data.tar.gz: 6d9824c76559fc2903985152d6a94a3936b03c9c3c22283daf5a748bd2d140a5ba25d344dc55f745f66553f78086f96cde36e4db2104055b3ae01a5c106059b9
checksums.yaml.gz.sig CHANGED
Binary file
data/CHANGELOG.md CHANGED
@@ -1,6 +1,9 @@
1
1
  # Karafka Web changelog
2
2
 
3
- ## 0.5.0 (2022-04-13)
3
+ ## 0.5.1 (2023-04-16)
4
+ - [Fix] Use CSP header matching Sidekiq one to ensure styles and js loading (#55)
5
+
6
+ ## 0.5.0 (2023-04-13)
4
7
  - [Improvement] Report job `-1001` offsets as `N/A` as in all the other places.
5
8
  - [Fix] Fix misspelling of word `committed`.
6
9
  - [Fix] Shutdown and revocation jobs statistics extraction crashes when idle initialized without messages (#53)
data/Gemfile.lock CHANGED
@@ -1,7 +1,7 @@
1
1
  PATH
2
2
  remote: .
3
3
  specs:
4
- karafka-web (0.5.0)
4
+ karafka-web (0.5.1)
5
5
  erubi (~> 1.4)
6
6
  karafka (>= 2.0.40, < 3.0.0)
7
7
  karafka-core (>= 2.0.12, < 3.0.0)
@@ -45,7 +45,7 @@ GEM
45
45
  rack (>= 3.0.0.beta1)
46
46
  webrick
47
47
  rake (13.0.6)
48
- roda (3.66.0)
48
+ roda (3.67.0)
49
49
  rack
50
50
  rspec (3.12.0)
51
51
  rspec-core (~> 3.12.0)
@@ -89,4 +89,4 @@ DEPENDENCIES
89
89
  simplecov
90
90
 
91
91
  BUNDLED WITH
92
- 2.4.10
92
+ 2.4.12
data/lib/karafka/web/ui/base.rb CHANGED
@@ -25,6 +25,24 @@ module Karafka
25
25
  plugin :not_found
26
26
  plugin :path
27
27
 
28
+ # Based on
29
+ # https://github.com/sidekiq/sidekiq/blob/ae6ca119/lib/sidekiq/web/application.rb#L8
30
+ plugin :content_security_policy do |csp|
31
+ csp.default_src "'self' https: http:"
32
+ csp.child_src "'self'"
33
+ csp.connect_src "'self' https: http: wss: ws:"
34
+ csp.font_src "'self' https: http:"
35
+ csp.frame_src "'self'"
36
+ csp.img_src "'self' https: http: data:"
37
+ csp.manifest_src "'self'"
38
+ csp.media_src "'self'"
39
+ csp.object_src "'none'"
40
+ csp.script_src "'self' https: http: 'unsafe-inline'"
41
+ csp.style_src "'self' https: http: 'unsafe-inline'"
42
+ csp.worker_src "'self'"
43
+ csp.base_uri "'self'"
44
+ end
45
+
28
46
  # Display appropriate error specific to a given error type
29
47
  plugin :error_handler, classes: [
30
48
  ::Karafka::Web::Errors::Ui::NotFoundError,
data/lib/karafka/web/version.rb CHANGED
@@ -3,6 +3,6 @@
3
3
  module Karafka
4
4
  module Web
5
5
  # Current gem version
6
- VERSION = '0.5.0'
6
+ VERSION = '0.5.1'
7
7
  end
8
8
  end
data.tar.gz.sig CHANGED
Binary file
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: karafka-web
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.5.0
4
+ version: 0.5.1
5
5
  platform: ruby
6
6
  authors:
7
7
  - Maciej Mensfeld
@@ -35,7 +35,7 @@ cert_chain:
35
35
  Qf04B9ceLUaC4fPVEz10FyobjaFoY4i32xRto3XnrzeAgfEe4swLq8bQsR3w/EF3
36
36
  MGU0FeSV2Yj7Xc2x/7BzLK8xQn5l7Yy75iPF+KP3vVmDHnNl
37
37
  -----END CERTIFICATE-----
38
- date: 2023-04-13 00:00:00.000000000 Z
38
+ date: 2023-04-16 00:00:00.000000000 Z
39
39
  dependencies:
40
40
  - !ruby/object:Gem::Dependency
41
41
  name: erubi
metadata.gz.sig CHANGED
Binary file