rack-xframe-options 0.0.0 → 0.1.0

data/README.rdoc

@@ -6,6 +6,19 @@ The X-Frame-Options HTTP response header can be used to indicate whether or not
 * https://developer.mozilla.org/en/The_X-FRAME-OPTIONS_response_header
 * http://blogs.msdn.com/b/ie/archive/2009/01/27/ie8-security-part-vii-clickjacking-defenses.aspx
 
+= Installation
+
+gem "rack-xframe-options"
+
+
+= Usage
+use Rack::XFrameOptions ("DENY" is default)
+
+or
+
+use Rack::XFrameOptions, "SAMEORIGIN"
+
+
 == Note on Patches/Pull Requests
  
 * Fork the project.

data/VERSION

@@ -1 +1 @@
-0.0.0
+0.1.0

data/lib/rack/xframe-options.rb

@@ -1,19 +1,19 @@
 module Rack
   class XFrameOptions
 
-    def initialize(app)
+    def initialize(app, value = "DENY")
       @app = app
+      @value = value
     end
 
     def call(env)
       status, headers, body = @app.call(env)
       if headers['Content-Type'] =~ /html/
-        headers['X-Frame-Options'] = "DENY" # SAMEORIGIN
+        headers['X-Frame-Options'] = ["DENY", "SAMEORIGIN"].include?(@value) ? @value : "DENY"
         [status, headers, body]
       else
         @app.call(env)
       end
     end
-
   end
 end

data/rack-xframe-options.gemspec

@@ -0,0 +1,57 @@
+# Generated by jeweler
+# DO NOT EDIT THIS FILE DIRECTLY
+# Instead, edit Jeweler::Tasks in Rakefile, and run the gemspec command
+# -*- encoding: utf-8 -*-
+
+Gem::Specification.new do |s|
+  s.name = %q{rack-xframe-options}
+  s.version = "0.1.0"
+
+  s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
+  s.authors = ["Tomasz Mazur"]
+  s.date = %q{2010-09-09}
+  s.description = %q{The X-Frame-Options HTTP response header can be used to indicate whether or not a browser should be allowed to render a page in a <frame> or <iframe>}
+  s.email = %q{defkode@gmail.com}
+  s.extra_rdoc_files = [
+    "LICENSE",
+     "README.rdoc"
+  ]
+  s.files = [
+    ".gitignore",
+     "LICENSE",
+     "README.rdoc",
+     "Rakefile",
+     "VERSION",
+     "lib/rack-xframe-options.rb",
+     "lib/rack/xframe-options.rb",
+     "rack-xframe-options.gemspec",
+     "test/helper.rb",
+     "test/test_rack-xframe-options.rb"
+  ]
+  s.homepage = %q{http://github.com/defkode/rack-xframe-options}
+  s.rdoc_options = ["--charset=UTF-8"]
+  s.require_paths = ["lib"]
+  s.rubygems_version = %q{1.3.7}
+  s.summary = %q{Adds X-Frame-Options Header to HTML response}
+  s.test_files = [
+    "test/helper.rb",
+     "test/test_rack-xframe-options.rb"
+  ]
+
+  if s.respond_to? :specification_version then
+    current_version = Gem::Specification::CURRENT_SPECIFICATION_VERSION
+    s.specification_version = 3
+
+    if Gem::Version.new(Gem::VERSION) >= Gem::Version.new('1.2.0') then
+      s.add_runtime_dependency(%q<rack>, [">= 0.9.1"])
+      s.add_development_dependency(%q<shoulda>, [">= 0"])
+    else
+      s.add_dependency(%q<rack>, [">= 0.9.1"])
+      s.add_dependency(%q<shoulda>, [">= 0"])
+    end
+  else
+    s.add_dependency(%q<rack>, [">= 0.9.1"])
+    s.add_dependency(%q<shoulda>, [">= 0"])
+  end
+end
+

data/test/helper.rb

@@ -5,9 +5,3 @@ require 'shoulda'
 $LOAD_PATH.unshift(File.join(File.dirname(__FILE__), '..', 'lib'))
 $LOAD_PATH.unshift(File.dirname(__FILE__))
 require 'rack/xframe-options'
-
-class SampleApp
-  def call(env)
-    [200, {"Content-Type" => "text/html"}, "Sample Response"]
-  end
-end

data/test/test_rack-xframe-options.rb

@@ -1,23 +1,45 @@
 require 'helper'
 
+class SampleApp
+  def call(env)
+    [200, {"Content-Type" => "text/html"}, "Sample Response"]
+  end
+end
+
 class TestRackXframeOptions < Test::Unit::TestCase
   include Rack::Test::Methods
 
-  context "X-Frame Options Header" do
-    setup do
-      def app
-        Rack::Builder.new do
-          use Rack::XFrameOptions
-          run SampleApp.new
+  context "X-Frame-Options" do
+    context "DENY" do
+      setup do
+        def app
+          Rack::Builder.new do
+            use Rack::XFrameOptions
+            run SampleApp.new
+          end
         end
       end
-    end
 
-    should "be added to response headers" do
-      get '/'
-      assert_equal "DENY", last_response.headers['X-Frame-Options']
+      should "be added to response headers" do
+        get '/'
+        assert_equal "DENY", last_response.headers['X-Frame-Options']
+      end
     end
 
-  end
+    context "SAMEORIGIN" do
+      setup do
+        def app
+          Rack::Builder.new do
+            use Rack::XFrameOptions, "SAMEORIGIN"
+            run SampleApp.new
+          end
+        end
+      end
 
+      should "be added to response headers" do
+        get '/'
+        assert_equal "SAMEORIGIN", last_response.headers['X-Frame-Options']
+      end
+    end
+  end
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification 
 name: rack-xframe-options
 version: !ruby/object:Gem::Version 
-  hash: 31
+  hash: 27
   prerelease: false
   segments: 
   - 0
+  - 1
   - 0
-  - 0
-  version: 0.0.0
+  version: 0.1.0
 platform: ruby
 authors: 
 - Tomasz Mazur
@@ -65,6 +65,7 @@ files:
 - VERSION
 - lib/rack-xframe-options.rb
 - lib/rack/xframe-options.rb
+- rack-xframe-options.gemspec
 - test/helper.rb
 - test/test_rack-xframe-options.rb
 has_rdoc: true