rack-noncache 0.0.4 → 1.0.0

data/lib/rack/noncache/filters.rb

@@ -0,0 +1,75 @@
+module Rack
+  module NonCache
+    class Http10Filter
+      def self.apply(headers)
+        headers['Cache-Control'] =
+          'max-stale=0, post-check=0, pre-check=0, ' \
+          'no-cache=\"Set-Cookie, Set-Cookie2\"'
+      end
+    end
+
+    class Http11Filter
+      def self.apply(headers)
+        headers['Cache-Control'] += 'no-cache, max-age=0, must-revalidate, ' \
+                                   'no-store, private'
+        headers['HTTP_PRAGMA'] = 'no-cache'
+      end
+    end
+
+    class ProxyFilter
+      def self.apply(headers)
+        headers['HTTP_EXPIRES'] = Time.now.httpdate
+      end
+    end
+
+    class SecurityFilter
+      def self.apply(headers)
+
+        # When you type in your bank's website, do you enter mybank.example.com
+        # or do you enter https://mybank.example.com? If you omit the https
+        # protocol, you are potentially vulnerable to Man in the Middle
+        # attacks. Even if the website performs a redirect to
+        # https://mybank.example.com a malicious user could intercept the
+        # initial HTTP request and manipulate the response (i.e. redirect to
+        # https://mibank.example.com and steal their credentials).
+        #
+        # Many users omit the https protocol and this is why HTTP Strict
+        # Transport Security (HSTS) was created. Once mybank.example.com is
+        # added as a HSTS host, a browser can know ahead of time that any
+        # request to mybank.example.com should be interpreted as
+        # https://mybank.example.com. This greatly reduces the possibility of a
+        # Man in the Middle attack occurring.
+
+        headers['Strict-Transport-Security'] = 'max-age=31536000; includeSubDomains'
+
+        # The problem with content sniffing is that this allowed malicious
+        # users to use polyglots (i.e. a file that is valid as multiple content
+        # types) to execute XSS attacks. For example, some sites may allow
+        # users to submit a valid postscript document to a website and view it.
+        # A malicious user might create a postscript document that is also a
+        # valid JavaScript file and execute a XSS attack with it.
+
+        headers['X-Content-Type-Options'] = 'nosniff'
+
+        # Some browsers have built in support for filtering out reflected XSS
+        # attacks. This is by no means full proof, but does assist in XSS
+        # protection.
+        # The filtering is typically enabled by default, so adding the header
+        # typically just ensures it is enabled and instructs the browser what
+        # to do when a XSS attack is detected. For example, the filter might
+        # try to change the content in the least invasive way to still render
+        # everything. At times, this type of replacement can become a XSS
+        # vulnerability in itself. Instead, it is best to block the content
+        # rather than attempt to fix it.
+
+        headers['S-Protection'] = '1; mode=block'
+      end
+    end
+
+    class DeprecatedFilter
+      def self.apply(headers)
+        headers['HTTP_KEEP_ALIVE'] = 'timeout=3, max=993'
+      end
+    end
+  end
+end

data/lib/rack/noncache/version.rb

@@ -1,5 +1,5 @@
 module Rack
   module NonCache
-    VERSION = "0.0.4"
+    VERSION = '1.0.0'
   end
 end

data/rack-noncache.gemspec

@@ -4,20 +4,42 @@ $LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
 require 'rack/noncache/version'
 
 Gem::Specification.new do |spec|
-  spec.name          = "rack-noncache"
+  spec.name          = 'rack-noncache'
   spec.version       = Rack::NonCache::VERSION
-  spec.authors       = ["David Saenz Tagarro"]
-  spec.email         = ["david@redradix.com"]
-  spec.summary       = "HTTP Non browser caching for Rack"
-  spec.description   = "Rack::NonCache is a rack middleware that disables HTTP browser caching."
-  spec.homepage      = "https://github.com/dsaenztagarro/rack-noncache"
-  spec.license       = "MIT"
+  spec.authors       = ['David Saenz Tagarro']
+  spec.email         = ['david.saenz.tagarro@gmail.com']
+  spec.summary       = 'HTTP Non browser caching for Rack'
+  spec.description   = 'Rack::NonCache is a rack middleware that disables HTTP browser caching.'
+  spec.homepage      = 'https://github.com/dsaenztagarro/rack-noncache'
+  spec.license       = 'MIT'
 
   spec.files         = `git ls-files -z`.split("\x0")
   spec.executables   = spec.files.grep(%r{^bin/}) { |f| File.basename(f) }
   spec.test_files    = spec.files.grep(%r{^(test|spec|features)/})
-  spec.require_paths = ["lib"]
+  spec.require_paths = ['lib']
 
-  spec.add_development_dependency "bundler", "~> 1.5"
-  spec.add_development_dependency "rake"
+  spec.add_runtime_dependency 'activesupport'
+
+  spec.add_development_dependency 'bundler', '~> 1.6'
+  spec.add_development_dependency 'cane'
+  spec.add_development_dependency 'capybara'
+  spec.add_development_dependency 'capybara-selenium', '0.0.6'
+  spec.add_development_dependency 'codeclimate-test-reporter'
+  spec.add_development_dependency 'coveralls'
+  spec.add_development_dependency 'cucumber'
+  spec.add_development_dependency 'pry'
+  spec.add_development_dependency 'pry-byebug'
+  spec.add_development_dependency 'rake'
+  spec.add_development_dependency 'reek'
+  spec.add_development_dependency 'rspec'
+  spec.add_development_dependency 'rubocop'
+  spec.add_development_dependency 'rubocop-rspec'
+  spec.add_development_dependency 'selenium-webdriver'
+  spec.add_development_dependency 'simplecov'
+
+  # Dummy app dependencies
+  spec.add_development_dependency 'sinatra'
+  spec.add_development_dependency 'sinatra-contrib'
+  spec.add_development_dependency 'dm-sqlite-adapter'
+  spec.add_development_dependency 'datamapper'
 end

metadata

@@ -1,29 +1,155 @@
 --- !ruby/object:Gem::Specification
 name: rack-noncache
 version: !ruby/object:Gem::Version
-  version: 0.0.4
+  version: 1.0.0
 platform: ruby
 authors:
 - David Saenz Tagarro
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-05-12 00:00:00.000000000 Z
+date: 2014-12-20 00:00:00.000000000 Z
 dependencies:
+- !ruby/object:Gem::Dependency
+  name: activesupport
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.5'
+        version: '1.6'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.5'
+        version: '1.6'
+- !ruby/object:Gem::Dependency
+  name: cane
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: capybara
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: capybara-selenium
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.0.6
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.0.6
+- !ruby/object:Gem::Dependency
+  name: codeclimate-test-reporter
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: coveralls
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: cucumber
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: pry
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: pry-byebug
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
@@ -38,21 +164,218 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: reek
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rubocop
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rubocop-rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: selenium-webdriver
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: simplecov
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: sinatra
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: sinatra-contrib
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: dm-sqlite-adapter
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: datamapper
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 description: Rack::NonCache is a rack middleware that disables HTTP browser caching.
 email:
-- david@redradix.com
+- david.saenz.tagarro@gmail.com
 executables: []
 extensions: []
 extra_rdoc_files: []
 files:
 - ".gitignore"
+- ".pryrc"
+- ".ruby-gemset"
+- ".ruby-version"
+- ".travis.yml"
 - Gemfile
 - LICENSE.txt
 - README.md
 - Rakefile
+- features/cache_control.feature
+- features/step_definitions/steps.rb
+- features/support/continous_integration.rb
+- features/support/coverage.rb
+- features/support/env.rb
+- features/support/helpers.rb
+- features/support/web_app/application.rb
+- features/support/web_app/config_blacklist.ru
+- features/support/web_app/config_whitelist.ru
+- features/support/web_app/public/app/collections/todos.js
+- features/support/web_app/public/app/config.js
+- features/support/web_app/public/app/main.js
+- features/support/web_app/public/app/models/todo.js
+- features/support/web_app/public/app/templates/todo-add.html
+- features/support/web_app/public/app/templates/todo-editor.html
+- features/support/web_app/public/app/templates/todo-item.html
+- features/support/web_app/public/app/templates/todo-list-empty.html
+- features/support/web_app/public/app/templates/todo-stats.html
+- features/support/web_app/public/app/views/stats.js
+- features/support/web_app/public/app/views/todo.js
+- features/support/web_app/public/app/views/todoadd.js
+- features/support/web_app/public/app/views/todoedit.js
+- features/support/web_app/public/app/views/todolist.js
+- features/support/web_app/public/assets/css/bootstrap.css
+- features/support/web_app/public/assets/css/style.css
+- features/support/web_app/public/assets/js/libs/backbone.js
+- features/support/web_app/public/assets/js/libs/jquery-1.7.2.js
+- features/support/web_app/public/assets/js/libs/require.js
+- features/support/web_app/public/assets/js/libs/underscore.js
+- features/support/web_app/public/assets/js/plugins/text.js
+- features/support/web_app/public/test/SpecRunner.html
+- features/support/web_app/public/test/lib/jasmine-1.2.0.rc3/MIT.LICENSE
+- features/support/web_app/public/test/lib/jasmine-1.2.0.rc3/jasmine-html.js
+- features/support/web_app/public/test/lib/jasmine-1.2.0.rc3/jasmine.css
+- features/support/web_app/public/test/lib/jasmine-1.2.0.rc3/jasmine.js
+- features/support/web_app/public/test/lib/jasmine-jquery.js
+- features/support/web_app/public/test/spec/models/todo.coffee
+- features/support/web_app/public/test/spec/models/todo.js
+- features/support/web_app/public/test/spec/spec_helper.coffee
+- features/support/web_app/public/test/spec/spec_helper.js
+- features/support/web_app/public/test/spec/views/stats.coffee
+- features/support/web_app/public/test/spec/views/stats.js
+- features/support/web_app/public/test/spec/views/todo.coffee
+- features/support/web_app/public/test/spec/views/todo.js
+- features/support/web_app/public/test/spec/views/todoadd.coffee
+- features/support/web_app/public/test/spec/views/todoadd.js
+- features/support/web_app/public/test/spec/views/todoedit.coffee
+- features/support/web_app/public/test/spec/views/todoedit.js
+- features/support/web_app/public/test/spec/views/todolist.coffee
+- features/support/web_app/public/test/spec/views/todolist.js
+- features/support/web_app/views/details.erb
+- features/support/web_app/views/index.erb
 - lib/rack-noncache.rb
 - lib/rack/noncache.rb
 - lib/rack/noncache/engine.rb
+- lib/rack/noncache/filters.rb
 - lib/rack/noncache/version.rb
 - rack-noncache.gemspec
 homepage: https://github.com/dsaenztagarro/rack-noncache
@@ -75,8 +398,60 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.2.2
+rubygems_version: 2.4.5
 signing_key: 
 specification_version: 4
 summary: HTTP Non browser caching for Rack
-test_files: []
+test_files:
+- features/cache_control.feature
+- features/step_definitions/steps.rb
+- features/support/continous_integration.rb
+- features/support/coverage.rb
+- features/support/env.rb
+- features/support/helpers.rb
+- features/support/web_app/application.rb
+- features/support/web_app/config_blacklist.ru
+- features/support/web_app/config_whitelist.ru
+- features/support/web_app/public/app/collections/todos.js
+- features/support/web_app/public/app/config.js
+- features/support/web_app/public/app/main.js
+- features/support/web_app/public/app/models/todo.js
+- features/support/web_app/public/app/templates/todo-add.html
+- features/support/web_app/public/app/templates/todo-editor.html
+- features/support/web_app/public/app/templates/todo-item.html
+- features/support/web_app/public/app/templates/todo-list-empty.html
+- features/support/web_app/public/app/templates/todo-stats.html
+- features/support/web_app/public/app/views/stats.js
+- features/support/web_app/public/app/views/todo.js
+- features/support/web_app/public/app/views/todoadd.js
+- features/support/web_app/public/app/views/todoedit.js
+- features/support/web_app/public/app/views/todolist.js
+- features/support/web_app/public/assets/css/bootstrap.css
+- features/support/web_app/public/assets/css/style.css
+- features/support/web_app/public/assets/js/libs/backbone.js
+- features/support/web_app/public/assets/js/libs/jquery-1.7.2.js
+- features/support/web_app/public/assets/js/libs/require.js
+- features/support/web_app/public/assets/js/libs/underscore.js
+- features/support/web_app/public/assets/js/plugins/text.js
+- features/support/web_app/public/test/SpecRunner.html
+- features/support/web_app/public/test/lib/jasmine-1.2.0.rc3/MIT.LICENSE
+- features/support/web_app/public/test/lib/jasmine-1.2.0.rc3/jasmine-html.js
+- features/support/web_app/public/test/lib/jasmine-1.2.0.rc3/jasmine.css
+- features/support/web_app/public/test/lib/jasmine-1.2.0.rc3/jasmine.js
+- features/support/web_app/public/test/lib/jasmine-jquery.js
+- features/support/web_app/public/test/spec/models/todo.coffee
+- features/support/web_app/public/test/spec/models/todo.js
+- features/support/web_app/public/test/spec/spec_helper.coffee
+- features/support/web_app/public/test/spec/spec_helper.js
+- features/support/web_app/public/test/spec/views/stats.coffee
+- features/support/web_app/public/test/spec/views/stats.js
+- features/support/web_app/public/test/spec/views/todo.coffee
+- features/support/web_app/public/test/spec/views/todo.js
+- features/support/web_app/public/test/spec/views/todoadd.coffee
+- features/support/web_app/public/test/spec/views/todoadd.js
+- features/support/web_app/public/test/spec/views/todoedit.coffee
+- features/support/web_app/public/test/spec/views/todoedit.js
+- features/support/web_app/public/test/spec/views/todolist.coffee
+- features/support/web_app/public/test/spec/views/todolist.js
+- features/support/web_app/views/details.erb
+- features/support/web_app/views/index.erb