rack-protection 0.1.0 → 1.5.5

Sign up to get free protection for your applications and to get access to all the features.
Files changed (29) hide show
  1. checksums.yaml +7 -0
  2. data/README.md +13 -3
  3. data/Rakefile +15 -4
  4. data/lib/rack/protection/authenticity_token.rb +10 -3
  5. data/lib/rack/protection/base.rb +52 -4
  6. data/lib/rack/protection/escaped_params.rb +34 -8
  7. data/lib/rack/protection/frame_options.rb +14 -3
  8. data/lib/rack/protection/http_origin.rb +32 -0
  9. data/lib/rack/protection/ip_spoofing.rb +1 -1
  10. data/lib/rack/protection/json_csrf.rb +15 -5
  11. data/lib/rack/protection/path_traversal.rb +26 -5
  12. data/lib/rack/protection/remote_referrer.rb +0 -3
  13. data/lib/rack/protection/session_hijacking.rb +5 -5
  14. data/lib/rack/protection/version.rb +6 -34
  15. data/lib/rack/protection/xss_header.rb +4 -6
  16. data/lib/rack/protection.rb +13 -8
  17. data/rack-protection.gemspec +61 -4
  18. data/spec/authenticity_token_spec.rb +15 -0
  19. data/spec/base_spec.rb +40 -0
  20. data/spec/escaped_params_spec.rb +9 -0
  21. data/spec/frame_options_spec.rb +19 -4
  22. data/spec/http_origin_spec.rb +38 -0
  23. data/spec/json_csrf_spec.rb +35 -0
  24. data/spec/path_traversal_spec.rb +20 -2
  25. data/spec/protection_spec.rb +100 -0
  26. data/spec/session_hijacking_spec.rb +19 -4
  27. data/spec/spec_helper.rb +7 -1
  28. data/spec/xss_header_spec.rb +35 -3
  29. metadata +84 -30
metadata CHANGED
@@ -1,63 +1,114 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: rack-protection
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.1.0
5
- prerelease:
4
+ version: 1.5.5
6
5
  platform: ruby
7
6
  authors:
8
7
  - Konstantin Haase
8
+ - Alex Rodionov
9
+ - Patrick Ellis
10
+ - Jason Staten
11
+ - ITO Nobuaki
12
+ - Jeff Welling
13
+ - Matteo Centenaro
14
+ - Egor Homakov
15
+ - Florian Gilcher
16
+ - Fojas
17
+ - Igor Bochkariov
18
+ - Mael Clerambault
19
+ - Martin Mauch
20
+ - Renne Nissinen
21
+ - SAKAI, Kazuaki
22
+ - Stanislav Savulchik
23
+ - Steve Agalloco
24
+ - TOBY
25
+ - Thais Camilo and Konstantin Haase
26
+ - Vipul A M
27
+ - Akzhan Abdulin
28
+ - brookemckim
29
+ - Bjørge Næss
30
+ - Chris Heald
31
+ - Chris Mytton
32
+ - Corey Ward
33
+ - Dario Cravero
34
+ - David Kellum
9
35
  autorequire:
10
36
  bindir: bin
11
37
  cert_chain: []
12
- date: 2011-06-20 00:00:00.000000000Z
38
+ date: 2018-03-07 00:00:00.000000000 Z
13
39
  dependencies:
14
40
  - !ruby/object:Gem::Dependency
15
41
  name: rack
16
- requirement: &2153646760 !ruby/object:Gem::Requirement
17
- none: false
42
+ requirement: !ruby/object:Gem::Requirement
18
43
  requirements:
19
- - - ! '>='
44
+ - - ">="
20
45
  - !ruby/object:Gem::Version
21
46
  version: '0'
22
47
  type: :runtime
23
48
  prerelease: false
24
- version_requirements: *2153646760
25
- - !ruby/object:Gem::Dependency
26
- name: escape_utils
27
- requirement: &2153646220 !ruby/object:Gem::Requirement
28
- none: false
49
+ version_requirements: !ruby/object:Gem::Requirement
29
50
  requirements:
30
- - - ! '>='
51
+ - - ">="
31
52
  - !ruby/object:Gem::Version
32
53
  version: '0'
33
- type: :runtime
34
- prerelease: false
35
- version_requirements: *2153646220
36
54
  - !ruby/object:Gem::Dependency
37
55
  name: rack-test
38
- requirement: &2153645700 !ruby/object:Gem::Requirement
39
- none: false
56
+ requirement: !ruby/object:Gem::Requirement
40
57
  requirements:
41
- - - ! '>='
58
+ - - ">="
42
59
  - !ruby/object:Gem::Version
43
60
  version: '0'
44
61
  type: :development
45
62
  prerelease: false
46
- version_requirements: *2153645700
63
+ version_requirements: !ruby/object:Gem::Requirement
64
+ requirements:
65
+ - - ">="
66
+ - !ruby/object:Gem::Version
67
+ version: '0'
47
68
  - !ruby/object:Gem::Dependency
48
69
  name: rspec
49
- requirement: &2153645080 !ruby/object:Gem::Requirement
50
- none: false
70
+ requirement: !ruby/object:Gem::Requirement
51
71
  requirements:
52
- - - ~>
72
+ - - "~>"
53
73
  - !ruby/object:Gem::Version
54
74
  version: '2.0'
55
75
  type: :development
56
76
  prerelease: false
57
- version_requirements: *2153645080
77
+ version_requirements: !ruby/object:Gem::Requirement
78
+ requirements:
79
+ - - "~>"
80
+ - !ruby/object:Gem::Version
81
+ version: '2.0'
58
82
  description: You should use protection!
59
83
  email:
60
84
  - konstantin.mailinglists@googlemail.com
85
+ - p0deje@gmail.com
86
+ - jstaten07@gmail.com
87
+ - patrick@soundcloud.com
88
+ - jeff.welling@gmail.com
89
+ - bugant@gmail.com
90
+ - daydream.trippers@gmail.com
91
+ - florian.gilcher@asquera.de
92
+ - developer@fojasaur.us
93
+ - ujifgc@gmail.com
94
+ - mael@clerambault.fr
95
+ - martin.mauch@gmail.com
96
+ - rennex@iki.fi
97
+ - kaz.july.7@gmail.com
98
+ - s.savulchik@gmail.com
99
+ - steve.agalloco@gmail.com
100
+ - toby.net.info.mail+git@gmail.com
101
+ - dev+narwen+rkh@rkh.im
102
+ - vipulnsward@gmail.com
103
+ - akzhan.abdulin@gmail.com
104
+ - brooke@digitalocean.com
105
+ - bjoerge@bengler.no
106
+ - cheald@gmail.com
107
+ - self@hecticjeff.net
108
+ - coreyward@me.com
109
+ - dario@uxtemple.com
110
+ - dek-oss@gravitext.com
111
+ - homakov@gmail.com
61
112
  executables: []
62
113
  extensions: []
63
114
  extra_rdoc_files: []
@@ -72,6 +123,7 @@ files:
72
123
  - lib/rack/protection/escaped_params.rb
73
124
  - lib/rack/protection/form_token.rb
74
125
  - lib/rack/protection/frame_options.rb
126
+ - lib/rack/protection/http_origin.rb
75
127
  - lib/rack/protection/ip_spoofing.rb
76
128
  - lib/rack/protection/json_csrf.rb
77
129
  - lib/rack/protection/path_traversal.rb
@@ -82,9 +134,11 @@ files:
82
134
  - lib/rack/protection/xss_header.rb
83
135
  - rack-protection.gemspec
84
136
  - spec/authenticity_token_spec.rb
137
+ - spec/base_spec.rb
85
138
  - spec/escaped_params_spec.rb
86
139
  - spec/form_token_spec.rb
87
140
  - spec/frame_options_spec.rb
141
+ - spec/http_origin_spec.rb
88
142
  - spec/ip_spoofing_spec.rb
89
143
  - spec/json_csrf_spec.rb
90
144
  - spec/path_traversal_spec.rb
@@ -95,27 +149,27 @@ files:
95
149
  - spec/spec_helper.rb
96
150
  - spec/xss_header_spec.rb
97
151
  homepage: http://github.com/rkh/rack-protection
98
- licenses: []
152
+ licenses:
153
+ - MIT
154
+ metadata: {}
99
155
  post_install_message:
100
156
  rdoc_options: []
101
157
  require_paths:
102
158
  - lib
103
159
  required_ruby_version: !ruby/object:Gem::Requirement
104
- none: false
105
160
  requirements:
106
- - - ! '>='
161
+ - - ">="
107
162
  - !ruby/object:Gem::Version
108
163
  version: '0'
109
164
  required_rubygems_version: !ruby/object:Gem::Requirement
110
- none: false
111
165
  requirements:
112
- - - ! '>='
166
+ - - ">="
113
167
  - !ruby/object:Gem::Version
114
168
  version: '0'
115
169
  requirements: []
116
170
  rubyforge_project:
117
- rubygems_version: 1.8.5
171
+ rubygems_version: 2.7.3
118
172
  signing_key:
119
- specification_version: 3
173
+ specification_version: 4
120
174
  summary: You should use protection!
121
175
  test_files: []