rack_csrf 2.6.0 → 2.7.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA1:
-  metadata.gz: 7481a1058bae8d7a4fef4806a5fb72599cc3b724
-  data.tar.gz: 0af8b6cec94f2ca0703cb72478199e30aa60fc17
+SHA256:
+  metadata.gz: 5063e661614ec782c33a22dc458d7f6a6d89be5a59c6c08297bc1cdc2f9675aa
+  data.tar.gz: 4b2b7c1208e605a314ddcb581268b32eb214bb791be52d7875bc37e2b1258abf
 SHA512:
-  metadata.gz: d5c1d649719acfc69b42e0a9760f9021e313cab550efff436d988ad4886646312ece6ae6ecd672546011848382924e402364d9454cbc844e5ea2bc2f6cb842c6
-  data.tar.gz: 25d4bec6bb2489c6999d0db1f9bd4969ebde37b9533b496c4ccde981c55949ee8922984feda32a56ec342d22de428c33a4be18204b8641d468b27594913d1a7c
+  metadata.gz: 21e09bf5ee433e1c9feea3ed29de30e7ff05c3a3c9d6bca35b2feeea8c0686e203c4c4f01fdff11eee8029b4094f32f26a9965b6918e03e5137b5db0eaafd61d
+  data.tar.gz: fa1aaa6fa9002de2519566b07aeb542fc91a1f0824030db83f384f182971a36c9b78fbf463a09230f17f116d6d7cd2e1347f97a65102c801cd557dfd404e59f0

data/.circleci/config.yml

@@ -0,0 +1,30 @@
+version: 2.1
+
+jobs:
+  run_tests:
+    parameters:
+      ruby_version:
+        description: "Version of Ruby to run tests in"
+        type: string
+      rack_version:
+        description: "More or less the Rack version we want to test against"
+        type: string
+    environment:
+      TEST_WITH_RACK: << parameters.rack_version >>
+    docker:
+      - image: ruby:<< parameters.ruby_version >>
+    steps:
+      - checkout
+      - run: bundle install
+      - run: bundle exec rake spec
+      - run: bundle exec rake features
+
+workflows:
+  version: 2
+  test:
+    jobs:
+      - run_tests:
+          matrix:
+            parameters:
+              ruby_version: ["2.7", "3.0", "3.1"]
+              rack_version: ["1.6.0", "2.1.0", "2.2.0", "3.0.0"]

data/.github/dependabot.yml

@@ -0,0 +1,11 @@
+version: 2
+
+updates:
+  - package-ecosystem: "bundler"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"

data/.github/workflows/ci.yml

@@ -0,0 +1,35 @@
+name: CI
+
+on:
+  - pull_request
+  - push
+  - workflow_dispatch
+
+permissions:
+  contents: read
+
+jobs:
+  tests:
+    strategy:
+      matrix:
+        ruby_version:
+          - "2.7"
+          - "3.0"
+          - "3.1"
+        rack_version:
+          - "1.6.0"
+          - "2.1.0"
+          - "2.2.0"
+          - "3.0.0"
+    name: Ruby ~> ${{ matrix.ruby_version }}; Rack ~> ${{ matrix.rack_version }}
+    runs-on: ubuntu-latest
+    env:
+      TEST_WITH_RACK: ${{ matrix.rack_version }}
+    steps:
+      - uses: actions/checkout@v3
+      - uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: ${{ matrix.ruby_version }}
+          bundler-cache: true
+      - run: bundle exec rake spec
+      - run: bundle exec rake features

data/Changelog.md

@@ -1,3 +1,8 @@
+# v2.7.0 (2022-09-10)
+
+Many little, negligible, changes, plus support for Rake 3 (courtesy of
+[jeremyevans](https://github.com/jeremyevans) :trophy:)
+
 # v2.6.0 (2016-12-31)
 
 Many little, internal, changes; the important ones are:

data/LICENSE.rdoc

@@ -2,7 +2,7 @@
 
 (The MIT License)
 
-Copyright (c) 2009, 2010, 2011, 2012, 2014, 2016 Emanuele Vicentini
+Copyright (c) 2009, 2010, 2011, 2012, 2014, 2016, 2022 Emanuele Vicentini
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the 'Software'), to deal

data/README.rdoc

@@ -1,4 +1,4 @@
-= Rack::Csrf {<img src="https://travis-ci.org/baldowl/rack_csrf.png?branch=master" alt="Build Status" />}[https://travis-ci.org/baldowl/rack_csrf] {<img src="https://badge.fury.io/rb/rack_csrf.png" alt="Gem Version" />}[http://badge.fury.io/rb/rack_csrf]
+= Rack::Csrf {<img src="https://circleci.com/gh/baldowl/rack_csrf.svg?style=svg" alt="CircleCI" />}[https://circleci.com/gh/baldowl/rack_csrf] {<img src="https://github.com/baldowl/rack_csrf/actions/workflows/ci.yml/badge.svg?branch=master" alt="Actions Status: CI" />}[https://github.com/baldowl/rack_csrf/actions?query=workflow%3ACI+branch%3Amaster] {<img src="https://badge.fury.io/rb/rack_csrf.svg" alt="Gem Version" />}[http://badge.fury.io/rb/rack_csrf]
 
 This is just a small Rack middleware whose only goal is to lessen the hazards
 posed by CSRF attacks by trying to ensure that all requests of particular
@@ -193,8 +193,9 @@ framework; see the various README files for other details.
 == Supported Rubies and Racks
 
 The gemspec shows the minimum Ruby and Rack versions, but Rack::Csrf is
-tested only with the Rubies and Racks you can see in +.travis.yml+. It could
-work also with older versions, but I decided not to test it against
+tested only with the Rubies and Racks you can see in
+<tt>.circleci/config.yml</tt> and/or <tt>.github/workflows/ci.yml</tt>. It
+could work also with older versions, but I decided not to test it against
 unsupported Rubies and Racks.
 
 == Contributing
@@ -219,5 +220,5 @@ forgo responsibilities for keeping your application as safe as possible.
 
 == Copyright
 
-Copyright (c) 2009, 2010, 2011, 2012, 2014, 2016 Emanuele Vicentini. See
-LICENSE.rdoc for details.
+Copyright (c) 2009, 2010, 2011, 2012, 2014, 2016, 2022 Emanuele Vicentini. 
+See LICENSE.rdoc for details.

data/features/support/env.rb

@@ -3,3 +3,5 @@ require 'rspec'
 require 'rack/test'
 
 require 'rack/csrf'
+require 'rack/builder'
+require 'rack/lint'

data/lib/rack/csrf/version.rb

@@ -1,5 +1,5 @@
 module Rack
   class Csrf
-    VERSION = '2.6.0'
+    VERSION = '2.7.0'
   end
 end

data/lib/rack/csrf.rb

@@ -1,8 +1,22 @@
-require 'rack'
+begin
+  require 'rack/version'
+rescue LoadError
+  require 'rack'
+else
+  if Rack.release >= '2.3'
+    require 'rack/request'
+    require 'rack/utils'
+  else
+    require 'rack'
+  end
+end
 require 'securerandom'
 
 module Rack
   class Csrf
+    CONTENT_TYPE = (Rack.release >= '2.3' ? 'content-type' : 'Content-Type').freeze
+    CONTENT_LENGTH = (Rack.release >= '2.3' ? 'content-length' : 'Content-Length').freeze
+
     class SessionUnavailable < StandardError; end
     class InvalidCsrfToken < StandardError; end
 
@@ -38,7 +52,7 @@ module Rack
         @app.call(env)
       else
         fail InvalidCsrfToken if @raise_if_invalid
-        [403, {'Content-Type' => 'text/html', 'Content-Length' => '0'}, []]
+        [403, {CONTENT_TYPE => 'text/html', CONTENT_LENGTH => '0'}, []]
       end
     end
 

data/rack_csrf.gemspec

@@ -40,7 +40,7 @@ Gem::Specification.new do |spec|
 
   spec.add_development_dependency 'bundler', '>= 1.0.0'
   spec.add_development_dependency 'rake'
-  spec.add_development_dependency 'cucumber', '~> 2.4'
+  spec.add_development_dependency 'cucumber', '~> 3.0'
   spec.add_development_dependency 'rack-test', '>= 0'
   spec.add_development_dependency 'rspec', '~> 3.0'
   spec.add_development_dependency 'rdoc', '>= 2.4.2'

data/spec/spec_helper.rb

@@ -2,3 +2,4 @@ require 'rubygems'
 require 'rspec'
 
 require 'rack/csrf'
+require 'rack/mock'

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rack_csrf
 version: !ruby/object:Gem::Version
-  version: 2.6.0
+  version: 2.7.0
 platform: ruby
 authors:
 - Emanuele Vicentini
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain: []
-date: 2016-12-31 00:00:00.000000000 Z
+date: 2022-09-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rack
@@ -58,14 +58,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.4'
+        version: '3.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.4'
+        version: '3.0'
 - !ruby/object:Gem::Dependency
   name: rack-test
   requirement: !ruby/object:Gem::Requirement
@@ -131,9 +131,11 @@ extra_rdoc_files:
 - LICENSE.rdoc
 - README.rdoc
 files:
+- ".circleci/config.yml"
+- ".github/dependabot.yml"
+- ".github/workflows/ci.yml"
 - ".gitignore"
 - ".rspec"
-- ".travis.yml"
 - Changelog.md
 - Gemfile
 - LICENSE.rdoc
@@ -198,12 +200,12 @@ homepage: https://github.com/baldowl/rack_csrf
 licenses:
 - MIT
 metadata: {}
-post_install_message: 
+post_install_message:
 rdoc_options:
 - "--line-numbers"
 - "--inline-source"
 - "--title"
-- Rack::Csrf 2.6.0
+- Rack::Csrf 2.7.0
 - "--main"
 - README.rdoc
 require_paths:
@@ -219,9 +221,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.6.8
-signing_key: 
+rubygems_version: 3.3.22
+signing_key:
 specification_version: 4
 summary: Anti-CSRF Rack middleware
 test_files:

data/.travis.yml

@@ -1,25 +0,0 @@
-sudo: false
-
-language: ruby
-
-rvm:
-  - 2.0.0-p648
-  - 2.1.10
-  - 2.2.6
-  - 2.3.3
-  - 2.4.0
-
-env:
-  - TEST_WITH_RACK=1.4.0
-  - TEST_WITH_RACK=1.5.0
-  - TEST_WITH_RACK=1.6.0
-  - TEST_WITH_RACK=2.0.0
-
-matrix:
-  exclude:
-    - rvm: 2.0.0-p648
-      env: TEST_WITH_RACK=2.0.0
-    - rvm: 2.1.10
-      env: TEST_WITH_RACK=2.0.0
-
-script: bundle exec rake spec features