secure_headers 2.0.0.pre → 2.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/.ruby-version +1 -1
- data/.travis.yml +7 -1
- data/Gemfile +4 -4
- data/README.md +48 -34
- data/Rakefile +11 -0
- data/fixtures/rails_3_2_12/config/initializers/secure_headers.rb +1 -0
- data/fixtures/rails_3_2_12/spec/controllers/other_things_controller_spec.rb +5 -0
- data/fixtures/rails_3_2_12/spec/controllers/things_controller_spec.rb +5 -0
- data/fixtures/rails_3_2_12_no_init/spec/controllers/other_things_controller_spec.rb +5 -0
- data/fixtures/rails_3_2_12_no_init/spec/controllers/things_controller_spec.rb +5 -0
- data/fixtures/rails_4_1_8/Gemfile +5 -0
- data/fixtures/rails_4_1_8/README.rdoc +28 -0
- data/fixtures/rails_4_1_8/Rakefile +6 -0
- data/fixtures/rails_4_1_8/app/controllers/application_controller.rb +4 -0
- data/fixtures/rails_4_1_8/app/controllers/concerns/.keep +0 -0
- data/fixtures/rails_4_1_8/app/controllers/other_things_controller.rb +5 -0
- data/fixtures/rails_4_1_8/app/controllers/things_controller.rb +5 -0
- data/fixtures/rails_4_1_8/app/models/.keep +0 -0
- data/fixtures/rails_4_1_8/app/models/concerns/.keep +0 -0
- data/fixtures/rails_4_1_8/app/views/layouts/application.html.erb +11 -0
- data/fixtures/rails_4_1_8/app/views/other_things/index.html.erb +2 -0
- data/fixtures/rails_4_1_8/app/views/things/index.html.erb +1 -0
- data/fixtures/rails_4_1_8/config/application.rb +15 -0
- data/fixtures/rails_4_1_8/config/boot.rb +4 -0
- data/fixtures/rails_4_1_8/config/environment.rb +5 -0
- data/fixtures/rails_4_1_8/config/environments/test.rb +10 -0
- data/fixtures/rails_4_1_8/config/initializers/secure_headers.rb +17 -0
- data/fixtures/rails_4_1_8/config/routes.rb +4 -0
- data/fixtures/rails_4_1_8/config/script_hashes.yml +5 -0
- data/fixtures/rails_4_1_8/config/secrets.yml +22 -0
- data/fixtures/rails_4_1_8/config.ru +4 -0
- data/fixtures/rails_4_1_8/lib/assets/.keep +0 -0
- data/fixtures/rails_4_1_8/lib/tasks/.keep +0 -0
- data/fixtures/rails_4_1_8/log/.keep +0 -0
- data/fixtures/rails_4_1_8/spec/controllers/other_things_controller_spec.rb +83 -0
- data/fixtures/rails_4_1_8/spec/controllers/things_controller_spec.rb +59 -0
- data/fixtures/rails_4_1_8/spec/spec_helper.rb +15 -0
- data/fixtures/rails_4_1_8/vendor/assets/javascripts/.keep +0 -0
- data/fixtures/rails_4_1_8/vendor/assets/stylesheets/.keep +0 -0
- data/lib/secure_headers/headers/content_security_policy.rb +8 -2
- data/lib/secure_headers/headers/public_key_pins.rb +95 -0
- data/lib/secure_headers/headers/x_permitted_cross_domain_policies.rb +40 -0
- data/lib/secure_headers/railtie.rb +13 -0
- data/lib/secure_headers/version.rb +1 -1
- data/lib/secure_headers/view_helper.rb +1 -1
- data/lib/secure_headers.rb +22 -1
- data/secure_headers.gemspec +4 -4
- data/spec/lib/secure_headers/headers/public_key_pins_spec.rb +37 -0
- data/spec/lib/secure_headers/headers/x_download_options_spec.rb +1 -1
- data/spec/lib/secure_headers/headers/x_permitted_cross_domain_policies_spec.rb +64 -0
- data/spec/lib/secure_headers_spec.rb +69 -7
- data/spec/spec_helper.rb +2 -0
- metadata +43 -9
- data/Guardfile +0 -8
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: secure_headers
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 2.
|
|
4
|
+
version: 2.1.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Neil Matatall
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date:
|
|
11
|
+
date: 2015-05-07 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: rake
|
|
@@ -24,7 +24,7 @@ dependencies:
|
|
|
24
24
|
- - ">="
|
|
25
25
|
- !ruby/object:Gem::Version
|
|
26
26
|
version: '0'
|
|
27
|
-
description:
|
|
27
|
+
description: Security related headers all in one gem.
|
|
28
28
|
email:
|
|
29
29
|
- neil.matatall@gmail.com
|
|
30
30
|
executables: []
|
|
@@ -36,7 +36,6 @@ files:
|
|
|
36
36
|
- ".ruby-version"
|
|
37
37
|
- ".travis.yml"
|
|
38
38
|
- Gemfile
|
|
39
|
-
- Guardfile
|
|
40
39
|
- LICENSE
|
|
41
40
|
- README.md
|
|
42
41
|
- Rakefile
|
|
@@ -94,15 +93,46 @@ files:
|
|
|
94
93
|
- fixtures/rails_3_2_12_no_init/vendor/assets/javascripts/.gitkeep
|
|
95
94
|
- fixtures/rails_3_2_12_no_init/vendor/assets/stylesheets/.gitkeep
|
|
96
95
|
- fixtures/rails_3_2_12_no_init/vendor/plugins/.gitkeep
|
|
96
|
+
- fixtures/rails_4_1_8/Gemfile
|
|
97
|
+
- fixtures/rails_4_1_8/README.rdoc
|
|
98
|
+
- fixtures/rails_4_1_8/Rakefile
|
|
99
|
+
- fixtures/rails_4_1_8/app/controllers/application_controller.rb
|
|
100
|
+
- fixtures/rails_4_1_8/app/controllers/concerns/.keep
|
|
101
|
+
- fixtures/rails_4_1_8/app/controllers/other_things_controller.rb
|
|
102
|
+
- fixtures/rails_4_1_8/app/controllers/things_controller.rb
|
|
103
|
+
- fixtures/rails_4_1_8/app/models/.keep
|
|
104
|
+
- fixtures/rails_4_1_8/app/models/concerns/.keep
|
|
105
|
+
- fixtures/rails_4_1_8/app/views/layouts/application.html.erb
|
|
106
|
+
- fixtures/rails_4_1_8/app/views/other_things/index.html.erb
|
|
107
|
+
- fixtures/rails_4_1_8/app/views/things/index.html.erb
|
|
108
|
+
- fixtures/rails_4_1_8/config.ru
|
|
109
|
+
- fixtures/rails_4_1_8/config/application.rb
|
|
110
|
+
- fixtures/rails_4_1_8/config/boot.rb
|
|
111
|
+
- fixtures/rails_4_1_8/config/environment.rb
|
|
112
|
+
- fixtures/rails_4_1_8/config/environments/test.rb
|
|
113
|
+
- fixtures/rails_4_1_8/config/initializers/secure_headers.rb
|
|
114
|
+
- fixtures/rails_4_1_8/config/routes.rb
|
|
115
|
+
- fixtures/rails_4_1_8/config/script_hashes.yml
|
|
116
|
+
- fixtures/rails_4_1_8/config/secrets.yml
|
|
117
|
+
- fixtures/rails_4_1_8/lib/assets/.keep
|
|
118
|
+
- fixtures/rails_4_1_8/lib/tasks/.keep
|
|
119
|
+
- fixtures/rails_4_1_8/log/.keep
|
|
120
|
+
- fixtures/rails_4_1_8/spec/controllers/other_things_controller_spec.rb
|
|
121
|
+
- fixtures/rails_4_1_8/spec/controllers/things_controller_spec.rb
|
|
122
|
+
- fixtures/rails_4_1_8/spec/spec_helper.rb
|
|
123
|
+
- fixtures/rails_4_1_8/vendor/assets/javascripts/.keep
|
|
124
|
+
- fixtures/rails_4_1_8/vendor/assets/stylesheets/.keep
|
|
97
125
|
- lib/secure_headers.rb
|
|
98
126
|
- lib/secure_headers/hash_helper.rb
|
|
99
127
|
- lib/secure_headers/header.rb
|
|
100
128
|
- lib/secure_headers/headers/content_security_policy.rb
|
|
101
129
|
- lib/secure_headers/headers/content_security_policy/script_hash_middleware.rb
|
|
130
|
+
- lib/secure_headers/headers/public_key_pins.rb
|
|
102
131
|
- lib/secure_headers/headers/strict_transport_security.rb
|
|
103
132
|
- lib/secure_headers/headers/x_content_type_options.rb
|
|
104
133
|
- lib/secure_headers/headers/x_download_options.rb
|
|
105
134
|
- lib/secure_headers/headers/x_frame_options.rb
|
|
135
|
+
- lib/secure_headers/headers/x_permitted_cross_domain_policies.rb
|
|
106
136
|
- lib/secure_headers/headers/x_xss_protection.rb
|
|
107
137
|
- lib/secure_headers/padrino.rb
|
|
108
138
|
- lib/secure_headers/railtie.rb
|
|
@@ -112,10 +142,12 @@ files:
|
|
|
112
142
|
- secure_headers.gemspec
|
|
113
143
|
- spec/lib/secure_headers/headers/content_security_policy/script_hash_middleware_spec.rb
|
|
114
144
|
- spec/lib/secure_headers/headers/content_security_policy_spec.rb
|
|
145
|
+
- spec/lib/secure_headers/headers/public_key_pins_spec.rb
|
|
115
146
|
- spec/lib/secure_headers/headers/strict_transport_security_spec.rb
|
|
116
147
|
- spec/lib/secure_headers/headers/x_content_type_options_spec.rb
|
|
117
148
|
- spec/lib/secure_headers/headers/x_download_options_spec.rb
|
|
118
149
|
- spec/lib/secure_headers/headers/x_frame_options_spec.rb
|
|
150
|
+
- spec/lib/secure_headers/headers/x_permitted_cross_domain_policies_spec.rb
|
|
119
151
|
- spec/lib/secure_headers/headers/x_xss_protection_spec.rb
|
|
120
152
|
- spec/lib/secure_headers_spec.rb
|
|
121
153
|
- spec/spec_helper.rb
|
|
@@ -135,23 +167,25 @@ required_ruby_version: !ruby/object:Gem::Requirement
|
|
|
135
167
|
version: '0'
|
|
136
168
|
required_rubygems_version: !ruby/object:Gem::Requirement
|
|
137
169
|
requirements:
|
|
138
|
-
- - "
|
|
170
|
+
- - ">="
|
|
139
171
|
- !ruby/object:Gem::Version
|
|
140
|
-
version:
|
|
172
|
+
version: '0'
|
|
141
173
|
requirements: []
|
|
142
174
|
rubyforge_project:
|
|
143
|
-
rubygems_version: 2.2.
|
|
175
|
+
rubygems_version: 2.2.3
|
|
144
176
|
signing_key:
|
|
145
177
|
specification_version: 4
|
|
146
|
-
summary: Add easily configured
|
|
147
|
-
|
|
178
|
+
summary: Add easily configured security headers to responses including content-security-policy,
|
|
179
|
+
x-frame-options, strict-transport-security, etc.
|
|
148
180
|
test_files:
|
|
149
181
|
- spec/lib/secure_headers/headers/content_security_policy/script_hash_middleware_spec.rb
|
|
150
182
|
- spec/lib/secure_headers/headers/content_security_policy_spec.rb
|
|
183
|
+
- spec/lib/secure_headers/headers/public_key_pins_spec.rb
|
|
151
184
|
- spec/lib/secure_headers/headers/strict_transport_security_spec.rb
|
|
152
185
|
- spec/lib/secure_headers/headers/x_content_type_options_spec.rb
|
|
153
186
|
- spec/lib/secure_headers/headers/x_download_options_spec.rb
|
|
154
187
|
- spec/lib/secure_headers/headers/x_frame_options_spec.rb
|
|
188
|
+
- spec/lib/secure_headers/headers/x_permitted_cross_domain_policies_spec.rb
|
|
155
189
|
- spec/lib/secure_headers/headers/x_xss_protection_spec.rb
|
|
156
190
|
- spec/lib/secure_headers_spec.rb
|
|
157
191
|
- spec/spec_helper.rb
|
data/Guardfile
DELETED
|
@@ -1,8 +0,0 @@
|
|
|
1
|
-
notification :growl
|
|
2
|
-
|
|
3
|
-
guard 'rspec', cmd: 'rspec' do
|
|
4
|
-
watch(%r{^spec/.+_spec\.rb$})
|
|
5
|
-
watch(%r{^lib/(.+)\.rb$}) { |m| "spec/lib/#{m[1]}_spec.rb" }
|
|
6
|
-
watch(%r{^app/controllers/(.+)\.rb$}) { |m| "spec/controllers/#{m[1]}_spec.rb" }
|
|
7
|
-
watch('spec/spec_helper.rb') { "spec" }
|
|
8
|
-
end
|