rack-protection 1.0.0 → 1.5.5

Sign up to get free protection for your applications and to get access to all the features.
Files changed (29) hide show
  1. checksums.yaml +7 -0
  2. data/README.md +9 -13
  3. data/Rakefile +15 -4
  4. data/lib/rack/protection/authenticity_token.rb +10 -3
  5. data/lib/rack/protection/base.rb +52 -4
  6. data/lib/rack/protection/escaped_params.rb +34 -8
  7. data/lib/rack/protection/frame_options.rb +14 -3
  8. data/lib/rack/protection/http_origin.rb +32 -0
  9. data/lib/rack/protection/ip_spoofing.rb +1 -1
  10. data/lib/rack/protection/json_csrf.rb +14 -4
  11. data/lib/rack/protection/path_traversal.rb +26 -5
  12. data/lib/rack/protection/remote_referrer.rb +0 -3
  13. data/lib/rack/protection/session_hijacking.rb +5 -5
  14. data/lib/rack/protection/version.rb +6 -34
  15. data/lib/rack/protection/xss_header.rb +4 -6
  16. data/lib/rack/protection.rb +13 -8
  17. data/rack-protection.gemspec +57 -4
  18. data/spec/authenticity_token_spec.rb +15 -0
  19. data/spec/base_spec.rb +40 -0
  20. data/spec/escaped_params_spec.rb +9 -0
  21. data/spec/frame_options_spec.rb +19 -4
  22. data/spec/http_origin_spec.rb +38 -0
  23. data/spec/json_csrf_spec.rb +26 -0
  24. data/spec/path_traversal_spec.rb +20 -2
  25. data/spec/protection_spec.rb +100 -0
  26. data/spec/session_hijacking_spec.rb +19 -4
  27. data/spec/spec_helper.rb +7 -1
  28. data/spec/xss_header_spec.rb +35 -3
  29. metadata +82 -32
metadata CHANGED
@@ -1,67 +1,114 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: rack-protection
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.0.0
5
- prerelease:
4
+ version: 1.5.5
6
5
  platform: ruby
7
6
  authors:
8
7
  - Konstantin Haase
9
- - Corey Ward
8
+ - Alex Rodionov
9
+ - Patrick Ellis
10
+ - Jason Staten
11
+ - ITO Nobuaki
12
+ - Jeff Welling
13
+ - Matteo Centenaro
14
+ - Egor Homakov
15
+ - Florian Gilcher
10
16
  - Fojas
17
+ - Igor Bochkariov
18
+ - Mael Clerambault
19
+ - Martin Mauch
20
+ - Renne Nissinen
21
+ - SAKAI, Kazuaki
22
+ - Stanislav Savulchik
23
+ - Steve Agalloco
24
+ - TOBY
25
+ - Thais Camilo and Konstantin Haase
26
+ - Vipul A M
27
+ - Akzhan Abdulin
28
+ - brookemckim
29
+ - Bjørge Næss
30
+ - Chris Heald
31
+ - Chris Mytton
32
+ - Corey Ward
33
+ - Dario Cravero
34
+ - David Kellum
11
35
  autorequire:
12
36
  bindir: bin
13
37
  cert_chain: []
14
- date: 2011-09-02 00:00:00.000000000Z
38
+ date: 2018-03-07 00:00:00.000000000 Z
15
39
  dependencies:
16
40
  - !ruby/object:Gem::Dependency
17
41
  name: rack
18
- requirement: &2151828860 !ruby/object:Gem::Requirement
19
- none: false
42
+ requirement: !ruby/object:Gem::Requirement
20
43
  requirements:
21
- - - ! '>='
44
+ - - ">="
22
45
  - !ruby/object:Gem::Version
23
46
  version: '0'
24
47
  type: :runtime
25
48
  prerelease: false
26
- version_requirements: *2151828860
27
- - !ruby/object:Gem::Dependency
28
- name: escape_utils
29
- requirement: &2151828040 !ruby/object:Gem::Requirement
30
- none: false
49
+ version_requirements: !ruby/object:Gem::Requirement
31
50
  requirements:
32
- - - ! '>='
51
+ - - ">="
33
52
  - !ruby/object:Gem::Version
34
53
  version: '0'
35
- type: :runtime
36
- prerelease: false
37
- version_requirements: *2151828040
38
54
  - !ruby/object:Gem::Dependency
39
55
  name: rack-test
40
- requirement: &2151827300 !ruby/object:Gem::Requirement
41
- none: false
56
+ requirement: !ruby/object:Gem::Requirement
42
57
  requirements:
43
- - - ! '>='
58
+ - - ">="
44
59
  - !ruby/object:Gem::Version
45
60
  version: '0'
46
61
  type: :development
47
62
  prerelease: false
48
- version_requirements: *2151827300
63
+ version_requirements: !ruby/object:Gem::Requirement
64
+ requirements:
65
+ - - ">="
66
+ - !ruby/object:Gem::Version
67
+ version: '0'
49
68
  - !ruby/object:Gem::Dependency
50
69
  name: rspec
51
- requirement: &2151826180 !ruby/object:Gem::Requirement
52
- none: false
70
+ requirement: !ruby/object:Gem::Requirement
53
71
  requirements:
54
- - - ~>
72
+ - - "~>"
55
73
  - !ruby/object:Gem::Version
56
74
  version: '2.0'
57
75
  type: :development
58
76
  prerelease: false
59
- version_requirements: *2151826180
77
+ version_requirements: !ruby/object:Gem::Requirement
78
+ requirements:
79
+ - - "~>"
80
+ - !ruby/object:Gem::Version
81
+ version: '2.0'
60
82
  description: You should use protection!
61
83
  email:
62
84
  - konstantin.mailinglists@googlemail.com
63
- - coreyward@me.com
85
+ - p0deje@gmail.com
86
+ - jstaten07@gmail.com
87
+ - patrick@soundcloud.com
88
+ - jeff.welling@gmail.com
89
+ - bugant@gmail.com
90
+ - daydream.trippers@gmail.com
91
+ - florian.gilcher@asquera.de
64
92
  - developer@fojasaur.us
93
+ - ujifgc@gmail.com
94
+ - mael@clerambault.fr
95
+ - martin.mauch@gmail.com
96
+ - rennex@iki.fi
97
+ - kaz.july.7@gmail.com
98
+ - s.savulchik@gmail.com
99
+ - steve.agalloco@gmail.com
100
+ - toby.net.info.mail+git@gmail.com
101
+ - dev+narwen+rkh@rkh.im
102
+ - vipulnsward@gmail.com
103
+ - akzhan.abdulin@gmail.com
104
+ - brooke@digitalocean.com
105
+ - bjoerge@bengler.no
106
+ - cheald@gmail.com
107
+ - self@hecticjeff.net
108
+ - coreyward@me.com
109
+ - dario@uxtemple.com
110
+ - dek-oss@gravitext.com
111
+ - homakov@gmail.com
65
112
  executables: []
66
113
  extensions: []
67
114
  extra_rdoc_files: []
@@ -76,6 +123,7 @@ files:
76
123
  - lib/rack/protection/escaped_params.rb
77
124
  - lib/rack/protection/form_token.rb
78
125
  - lib/rack/protection/frame_options.rb
126
+ - lib/rack/protection/http_origin.rb
79
127
  - lib/rack/protection/ip_spoofing.rb
80
128
  - lib/rack/protection/json_csrf.rb
81
129
  - lib/rack/protection/path_traversal.rb
@@ -86,9 +134,11 @@ files:
86
134
  - lib/rack/protection/xss_header.rb
87
135
  - rack-protection.gemspec
88
136
  - spec/authenticity_token_spec.rb
137
+ - spec/base_spec.rb
89
138
  - spec/escaped_params_spec.rb
90
139
  - spec/form_token_spec.rb
91
140
  - spec/frame_options_spec.rb
141
+ - spec/http_origin_spec.rb
92
142
  - spec/ip_spoofing_spec.rb
93
143
  - spec/json_csrf_spec.rb
94
144
  - spec/path_traversal_spec.rb
@@ -99,27 +149,27 @@ files:
99
149
  - spec/spec_helper.rb
100
150
  - spec/xss_header_spec.rb
101
151
  homepage: http://github.com/rkh/rack-protection
102
- licenses: []
152
+ licenses:
153
+ - MIT
154
+ metadata: {}
103
155
  post_install_message:
104
156
  rdoc_options: []
105
157
  require_paths:
106
158
  - lib
107
159
  required_ruby_version: !ruby/object:Gem::Requirement
108
- none: false
109
160
  requirements:
110
- - - ! '>='
161
+ - - ">="
111
162
  - !ruby/object:Gem::Version
112
163
  version: '0'
113
164
  required_rubygems_version: !ruby/object:Gem::Requirement
114
- none: false
115
165
  requirements:
116
- - - ! '>='
166
+ - - ">="
117
167
  - !ruby/object:Gem::Version
118
168
  version: '0'
119
169
  requirements: []
120
170
  rubyforge_project:
121
- rubygems_version: 1.8.6
171
+ rubygems_version: 2.7.3
122
172
  signing_key:
123
- specification_version: 3
173
+ specification_version: 4
124
174
  summary: You should use protection!
125
175
  test_files: []