rack-protection 0.1.0 → 1.5.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (29) hide show
  1. checksums.yaml +7 -0
  2. data/README.md +13 -3
  3. data/Rakefile +15 -4
  4. data/lib/rack/protection/authenticity_token.rb +10 -3
  5. data/lib/rack/protection/base.rb +52 -4
  6. data/lib/rack/protection/escaped_params.rb +34 -8
  7. data/lib/rack/protection/frame_options.rb +14 -3
  8. data/lib/rack/protection/http_origin.rb +32 -0
  9. data/lib/rack/protection/ip_spoofing.rb +1 -1
  10. data/lib/rack/protection/json_csrf.rb +15 -5
  11. data/lib/rack/protection/path_traversal.rb +26 -5
  12. data/lib/rack/protection/remote_referrer.rb +0 -3
  13. data/lib/rack/protection/session_hijacking.rb +5 -5
  14. data/lib/rack/protection/version.rb +6 -34
  15. data/lib/rack/protection/xss_header.rb +4 -6
  16. data/lib/rack/protection.rb +13 -8
  17. data/rack-protection.gemspec +61 -4
  18. data/spec/authenticity_token_spec.rb +15 -0
  19. data/spec/base_spec.rb +40 -0
  20. data/spec/escaped_params_spec.rb +9 -0
  21. data/spec/frame_options_spec.rb +19 -4
  22. data/spec/http_origin_spec.rb +38 -0
  23. data/spec/json_csrf_spec.rb +35 -0
  24. data/spec/path_traversal_spec.rb +20 -2
  25. data/spec/protection_spec.rb +100 -0
  26. data/spec/session_hijacking_spec.rb +19 -4
  27. data/spec/spec_helper.rb +7 -1
  28. data/spec/xss_header_spec.rb +35 -3
  29. metadata +84 -30
metadata CHANGED
@@ -1,63 +1,114 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: rack-protection
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.1.0
5
- prerelease:
4
+ version: 1.5.5
6
5
  platform: ruby
7
6
  authors:
8
7
  - Konstantin Haase
8
+ - Alex Rodionov
9
+ - Patrick Ellis
10
+ - Jason Staten
11
+ - ITO Nobuaki
12
+ - Jeff Welling
13
+ - Matteo Centenaro
14
+ - Egor Homakov
15
+ - Florian Gilcher
16
+ - Fojas
17
+ - Igor Bochkariov
18
+ - Mael Clerambault
19
+ - Martin Mauch
20
+ - Renne Nissinen
21
+ - SAKAI, Kazuaki
22
+ - Stanislav Savulchik
23
+ - Steve Agalloco
24
+ - TOBY
25
+ - Thais Camilo and Konstantin Haase
26
+ - Vipul A M
27
+ - Akzhan Abdulin
28
+ - brookemckim
29
+ - Bjørge Næss
30
+ - Chris Heald
31
+ - Chris Mytton
32
+ - Corey Ward
33
+ - Dario Cravero
34
+ - David Kellum
9
35
  autorequire:
10
36
  bindir: bin
11
37
  cert_chain: []
12
- date: 2011-06-20 00:00:00.000000000Z
38
+ date: 2018-03-07 00:00:00.000000000 Z
13
39
  dependencies:
14
40
  - !ruby/object:Gem::Dependency
15
41
  name: rack
16
- requirement: &2153646760 !ruby/object:Gem::Requirement
17
- none: false
42
+ requirement: !ruby/object:Gem::Requirement
18
43
  requirements:
19
- - - ! '>='
44
+ - - ">="
20
45
  - !ruby/object:Gem::Version
21
46
  version: '0'
22
47
  type: :runtime
23
48
  prerelease: false
24
- version_requirements: *2153646760
25
- - !ruby/object:Gem::Dependency
26
- name: escape_utils
27
- requirement: &2153646220 !ruby/object:Gem::Requirement
28
- none: false
49
+ version_requirements: !ruby/object:Gem::Requirement
29
50
  requirements:
30
- - - ! '>='
51
+ - - ">="
31
52
  - !ruby/object:Gem::Version
32
53
  version: '0'
33
- type: :runtime
34
- prerelease: false
35
- version_requirements: *2153646220
36
54
  - !ruby/object:Gem::Dependency
37
55
  name: rack-test
38
- requirement: &2153645700 !ruby/object:Gem::Requirement
39
- none: false
56
+ requirement: !ruby/object:Gem::Requirement
40
57
  requirements:
41
- - - ! '>='
58
+ - - ">="
42
59
  - !ruby/object:Gem::Version
43
60
  version: '0'
44
61
  type: :development
45
62
  prerelease: false
46
- version_requirements: *2153645700
63
+ version_requirements: !ruby/object:Gem::Requirement
64
+ requirements:
65
+ - - ">="
66
+ - !ruby/object:Gem::Version
67
+ version: '0'
47
68
  - !ruby/object:Gem::Dependency
48
69
  name: rspec
49
- requirement: &2153645080 !ruby/object:Gem::Requirement
50
- none: false
70
+ requirement: !ruby/object:Gem::Requirement
51
71
  requirements:
52
- - - ~>
72
+ - - "~>"
53
73
  - !ruby/object:Gem::Version
54
74
  version: '2.0'
55
75
  type: :development
56
76
  prerelease: false
57
- version_requirements: *2153645080
77
+ version_requirements: !ruby/object:Gem::Requirement
78
+ requirements:
79
+ - - "~>"
80
+ - !ruby/object:Gem::Version
81
+ version: '2.0'
58
82
  description: You should use protection!
59
83
  email:
60
84
  - konstantin.mailinglists@googlemail.com
85
+ - p0deje@gmail.com
86
+ - jstaten07@gmail.com
87
+ - patrick@soundcloud.com
88
+ - jeff.welling@gmail.com
89
+ - bugant@gmail.com
90
+ - daydream.trippers@gmail.com
91
+ - florian.gilcher@asquera.de
92
+ - developer@fojasaur.us
93
+ - ujifgc@gmail.com
94
+ - mael@clerambault.fr
95
+ - martin.mauch@gmail.com
96
+ - rennex@iki.fi
97
+ - kaz.july.7@gmail.com
98
+ - s.savulchik@gmail.com
99
+ - steve.agalloco@gmail.com
100
+ - toby.net.info.mail+git@gmail.com
101
+ - dev+narwen+rkh@rkh.im
102
+ - vipulnsward@gmail.com
103
+ - akzhan.abdulin@gmail.com
104
+ - brooke@digitalocean.com
105
+ - bjoerge@bengler.no
106
+ - cheald@gmail.com
107
+ - self@hecticjeff.net
108
+ - coreyward@me.com
109
+ - dario@uxtemple.com
110
+ - dek-oss@gravitext.com
111
+ - homakov@gmail.com
61
112
  executables: []
62
113
  extensions: []
63
114
  extra_rdoc_files: []
@@ -72,6 +123,7 @@ files:
72
123
  - lib/rack/protection/escaped_params.rb
73
124
  - lib/rack/protection/form_token.rb
74
125
  - lib/rack/protection/frame_options.rb
126
+ - lib/rack/protection/http_origin.rb
75
127
  - lib/rack/protection/ip_spoofing.rb
76
128
  - lib/rack/protection/json_csrf.rb
77
129
  - lib/rack/protection/path_traversal.rb
@@ -82,9 +134,11 @@ files:
82
134
  - lib/rack/protection/xss_header.rb
83
135
  - rack-protection.gemspec
84
136
  - spec/authenticity_token_spec.rb
137
+ - spec/base_spec.rb
85
138
  - spec/escaped_params_spec.rb
86
139
  - spec/form_token_spec.rb
87
140
  - spec/frame_options_spec.rb
141
+ - spec/http_origin_spec.rb
88
142
  - spec/ip_spoofing_spec.rb
89
143
  - spec/json_csrf_spec.rb
90
144
  - spec/path_traversal_spec.rb
@@ -95,27 +149,27 @@ files:
95
149
  - spec/spec_helper.rb
96
150
  - spec/xss_header_spec.rb
97
151
  homepage: http://github.com/rkh/rack-protection
98
- licenses: []
152
+ licenses:
153
+ - MIT
154
+ metadata: {}
99
155
  post_install_message:
100
156
  rdoc_options: []
101
157
  require_paths:
102
158
  - lib
103
159
  required_ruby_version: !ruby/object:Gem::Requirement
104
- none: false
105
160
  requirements:
106
- - - ! '>='
161
+ - - ">="
107
162
  - !ruby/object:Gem::Version
108
163
  version: '0'
109
164
  required_rubygems_version: !ruby/object:Gem::Requirement
110
- none: false
111
165
  requirements:
112
- - - ! '>='
166
+ - - ">="
113
167
  - !ruby/object:Gem::Version
114
168
  version: '0'
115
169
  requirements: []
116
170
  rubyforge_project:
117
- rubygems_version: 1.8.5
171
+ rubygems_version: 2.7.3
118
172
  signing_key:
119
- specification_version: 3
173
+ specification_version: 4
120
174
  summary: You should use protection!
121
175
  test_files: []