secure_headers 2.0.0.pre → 2.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (55) hide show
  1. checksums.yaml +4 -4
  2. data/.ruby-version +1 -1
  3. data/.travis.yml +7 -1
  4. data/Gemfile +4 -4
  5. data/README.md +48 -34
  6. data/Rakefile +11 -0
  7. data/fixtures/rails_3_2_12/config/initializers/secure_headers.rb +1 -0
  8. data/fixtures/rails_3_2_12/spec/controllers/other_things_controller_spec.rb +5 -0
  9. data/fixtures/rails_3_2_12/spec/controllers/things_controller_spec.rb +5 -0
  10. data/fixtures/rails_3_2_12_no_init/spec/controllers/other_things_controller_spec.rb +5 -0
  11. data/fixtures/rails_3_2_12_no_init/spec/controllers/things_controller_spec.rb +5 -0
  12. data/fixtures/rails_4_1_8/Gemfile +5 -0
  13. data/fixtures/rails_4_1_8/README.rdoc +28 -0
  14. data/fixtures/rails_4_1_8/Rakefile +6 -0
  15. data/fixtures/rails_4_1_8/app/controllers/application_controller.rb +4 -0
  16. data/fixtures/rails_4_1_8/app/controllers/concerns/.keep +0 -0
  17. data/fixtures/rails_4_1_8/app/controllers/other_things_controller.rb +5 -0
  18. data/fixtures/rails_4_1_8/app/controllers/things_controller.rb +5 -0
  19. data/fixtures/rails_4_1_8/app/models/.keep +0 -0
  20. data/fixtures/rails_4_1_8/app/models/concerns/.keep +0 -0
  21. data/fixtures/rails_4_1_8/app/views/layouts/application.html.erb +11 -0
  22. data/fixtures/rails_4_1_8/app/views/other_things/index.html.erb +2 -0
  23. data/fixtures/rails_4_1_8/app/views/things/index.html.erb +1 -0
  24. data/fixtures/rails_4_1_8/config/application.rb +15 -0
  25. data/fixtures/rails_4_1_8/config/boot.rb +4 -0
  26. data/fixtures/rails_4_1_8/config/environment.rb +5 -0
  27. data/fixtures/rails_4_1_8/config/environments/test.rb +10 -0
  28. data/fixtures/rails_4_1_8/config/initializers/secure_headers.rb +17 -0
  29. data/fixtures/rails_4_1_8/config/routes.rb +4 -0
  30. data/fixtures/rails_4_1_8/config/script_hashes.yml +5 -0
  31. data/fixtures/rails_4_1_8/config/secrets.yml +22 -0
  32. data/fixtures/rails_4_1_8/config.ru +4 -0
  33. data/fixtures/rails_4_1_8/lib/assets/.keep +0 -0
  34. data/fixtures/rails_4_1_8/lib/tasks/.keep +0 -0
  35. data/fixtures/rails_4_1_8/log/.keep +0 -0
  36. data/fixtures/rails_4_1_8/spec/controllers/other_things_controller_spec.rb +83 -0
  37. data/fixtures/rails_4_1_8/spec/controllers/things_controller_spec.rb +59 -0
  38. data/fixtures/rails_4_1_8/spec/spec_helper.rb +15 -0
  39. data/fixtures/rails_4_1_8/vendor/assets/javascripts/.keep +0 -0
  40. data/fixtures/rails_4_1_8/vendor/assets/stylesheets/.keep +0 -0
  41. data/lib/secure_headers/headers/content_security_policy.rb +8 -2
  42. data/lib/secure_headers/headers/public_key_pins.rb +95 -0
  43. data/lib/secure_headers/headers/x_permitted_cross_domain_policies.rb +40 -0
  44. data/lib/secure_headers/railtie.rb +13 -0
  45. data/lib/secure_headers/version.rb +1 -1
  46. data/lib/secure_headers/view_helper.rb +1 -1
  47. data/lib/secure_headers.rb +22 -1
  48. data/secure_headers.gemspec +4 -4
  49. data/spec/lib/secure_headers/headers/public_key_pins_spec.rb +37 -0
  50. data/spec/lib/secure_headers/headers/x_download_options_spec.rb +1 -1
  51. data/spec/lib/secure_headers/headers/x_permitted_cross_domain_policies_spec.rb +64 -0
  52. data/spec/lib/secure_headers_spec.rb +69 -7
  53. data/spec/spec_helper.rb +2 -0
  54. metadata +43 -9
  55. data/Guardfile +0 -8
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: secure_headers
3
3
  version: !ruby/object:Gem::Version
4
- version: 2.0.0.pre
4
+ version: 2.1.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Neil Matatall
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2014-11-14 00:00:00.000000000 Z
11
+ date: 2015-05-07 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: rake
@@ -24,7 +24,7 @@ dependencies:
24
24
  - - ">="
25
25
  - !ruby/object:Gem::Version
26
26
  version: '0'
27
- description: Add easily configured browser headers to responses.
27
+ description: Security related headers all in one gem.
28
28
  email:
29
29
  - neil.matatall@gmail.com
30
30
  executables: []
@@ -36,7 +36,6 @@ files:
36
36
  - ".ruby-version"
37
37
  - ".travis.yml"
38
38
  - Gemfile
39
- - Guardfile
40
39
  - LICENSE
41
40
  - README.md
42
41
  - Rakefile
@@ -94,15 +93,46 @@ files:
94
93
  - fixtures/rails_3_2_12_no_init/vendor/assets/javascripts/.gitkeep
95
94
  - fixtures/rails_3_2_12_no_init/vendor/assets/stylesheets/.gitkeep
96
95
  - fixtures/rails_3_2_12_no_init/vendor/plugins/.gitkeep
96
+ - fixtures/rails_4_1_8/Gemfile
97
+ - fixtures/rails_4_1_8/README.rdoc
98
+ - fixtures/rails_4_1_8/Rakefile
99
+ - fixtures/rails_4_1_8/app/controllers/application_controller.rb
100
+ - fixtures/rails_4_1_8/app/controllers/concerns/.keep
101
+ - fixtures/rails_4_1_8/app/controllers/other_things_controller.rb
102
+ - fixtures/rails_4_1_8/app/controllers/things_controller.rb
103
+ - fixtures/rails_4_1_8/app/models/.keep
104
+ - fixtures/rails_4_1_8/app/models/concerns/.keep
105
+ - fixtures/rails_4_1_8/app/views/layouts/application.html.erb
106
+ - fixtures/rails_4_1_8/app/views/other_things/index.html.erb
107
+ - fixtures/rails_4_1_8/app/views/things/index.html.erb
108
+ - fixtures/rails_4_1_8/config.ru
109
+ - fixtures/rails_4_1_8/config/application.rb
110
+ - fixtures/rails_4_1_8/config/boot.rb
111
+ - fixtures/rails_4_1_8/config/environment.rb
112
+ - fixtures/rails_4_1_8/config/environments/test.rb
113
+ - fixtures/rails_4_1_8/config/initializers/secure_headers.rb
114
+ - fixtures/rails_4_1_8/config/routes.rb
115
+ - fixtures/rails_4_1_8/config/script_hashes.yml
116
+ - fixtures/rails_4_1_8/config/secrets.yml
117
+ - fixtures/rails_4_1_8/lib/assets/.keep
118
+ - fixtures/rails_4_1_8/lib/tasks/.keep
119
+ - fixtures/rails_4_1_8/log/.keep
120
+ - fixtures/rails_4_1_8/spec/controllers/other_things_controller_spec.rb
121
+ - fixtures/rails_4_1_8/spec/controllers/things_controller_spec.rb
122
+ - fixtures/rails_4_1_8/spec/spec_helper.rb
123
+ - fixtures/rails_4_1_8/vendor/assets/javascripts/.keep
124
+ - fixtures/rails_4_1_8/vendor/assets/stylesheets/.keep
97
125
  - lib/secure_headers.rb
98
126
  - lib/secure_headers/hash_helper.rb
99
127
  - lib/secure_headers/header.rb
100
128
  - lib/secure_headers/headers/content_security_policy.rb
101
129
  - lib/secure_headers/headers/content_security_policy/script_hash_middleware.rb
130
+ - lib/secure_headers/headers/public_key_pins.rb
102
131
  - lib/secure_headers/headers/strict_transport_security.rb
103
132
  - lib/secure_headers/headers/x_content_type_options.rb
104
133
  - lib/secure_headers/headers/x_download_options.rb
105
134
  - lib/secure_headers/headers/x_frame_options.rb
135
+ - lib/secure_headers/headers/x_permitted_cross_domain_policies.rb
106
136
  - lib/secure_headers/headers/x_xss_protection.rb
107
137
  - lib/secure_headers/padrino.rb
108
138
  - lib/secure_headers/railtie.rb
@@ -112,10 +142,12 @@ files:
112
142
  - secure_headers.gemspec
113
143
  - spec/lib/secure_headers/headers/content_security_policy/script_hash_middleware_spec.rb
114
144
  - spec/lib/secure_headers/headers/content_security_policy_spec.rb
145
+ - spec/lib/secure_headers/headers/public_key_pins_spec.rb
115
146
  - spec/lib/secure_headers/headers/strict_transport_security_spec.rb
116
147
  - spec/lib/secure_headers/headers/x_content_type_options_spec.rb
117
148
  - spec/lib/secure_headers/headers/x_download_options_spec.rb
118
149
  - spec/lib/secure_headers/headers/x_frame_options_spec.rb
150
+ - spec/lib/secure_headers/headers/x_permitted_cross_domain_policies_spec.rb
119
151
  - spec/lib/secure_headers/headers/x_xss_protection_spec.rb
120
152
  - spec/lib/secure_headers_spec.rb
121
153
  - spec/spec_helper.rb
@@ -135,23 +167,25 @@ required_ruby_version: !ruby/object:Gem::Requirement
135
167
  version: '0'
136
168
  required_rubygems_version: !ruby/object:Gem::Requirement
137
169
  requirements:
138
- - - ">"
170
+ - - ">="
139
171
  - !ruby/object:Gem::Version
140
- version: 1.3.1
172
+ version: '0'
141
173
  requirements: []
142
174
  rubyforge_project:
143
- rubygems_version: 2.2.2
175
+ rubygems_version: 2.2.3
144
176
  signing_key:
145
177
  specification_version: 4
146
- summary: Add easily configured browser headers to responses including content security
147
- policy, x-frame-options, strict-transport-security and more.
178
+ summary: Add easily configured security headers to responses including content-security-policy,
179
+ x-frame-options, strict-transport-security, etc.
148
180
  test_files:
149
181
  - spec/lib/secure_headers/headers/content_security_policy/script_hash_middleware_spec.rb
150
182
  - spec/lib/secure_headers/headers/content_security_policy_spec.rb
183
+ - spec/lib/secure_headers/headers/public_key_pins_spec.rb
151
184
  - spec/lib/secure_headers/headers/strict_transport_security_spec.rb
152
185
  - spec/lib/secure_headers/headers/x_content_type_options_spec.rb
153
186
  - spec/lib/secure_headers/headers/x_download_options_spec.rb
154
187
  - spec/lib/secure_headers/headers/x_frame_options_spec.rb
188
+ - spec/lib/secure_headers/headers/x_permitted_cross_domain_policies_spec.rb
155
189
  - spec/lib/secure_headers/headers/x_xss_protection_spec.rb
156
190
  - spec/lib/secure_headers_spec.rb
157
191
  - spec/spec_helper.rb
data/Guardfile DELETED
@@ -1,8 +0,0 @@
1
- notification :growl
2
-
3
- guard 'rspec', cmd: 'rspec' do
4
- watch(%r{^spec/.+_spec\.rb$})
5
- watch(%r{^lib/(.+)\.rb$}) { |m| "spec/lib/#{m[1]}_spec.rb" }
6
- watch(%r{^app/controllers/(.+)\.rb$}) { |m| "spec/controllers/#{m[1]}_spec.rb" }
7
- watch('spec/spec_helper.rb') { "spec" }
8
- end