secure_headers 2.2.0 → 2.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (83) hide show
  1. checksums.yaml +4 -4
  2. data/.ruby-version +1 -1
  3. data/.travis.yml +1 -1
  4. data/Gemfile +3 -2
  5. data/README.md +89 -18
  6. data/Rakefile +2 -2
  7. data/fixtures/{rails_3_2_12_no_init → rails_3_2_22}/Gemfile +2 -1
  8. data/fixtures/{rails_3_2_12 → rails_3_2_22}/config/initializers/secure_headers.rb +2 -3
  9. data/fixtures/{rails_3_2_12 → rails_3_2_22}/spec/controllers/other_things_controller_spec.rb +1 -1
  10. data/fixtures/{rails_3_2_12 → rails_3_2_22_no_init}/Gemfile +2 -2
  11. data/fixtures/rails_3_2_22_no_init/app/controllers/other_things_controller.rb +20 -0
  12. data/fixtures/{rails_3_2_12_no_init → rails_3_2_22_no_init}/spec/controllers/other_things_controller_spec.rb +7 -1
  13. data/fixtures/rails_4_1_8/app/controllers/other_things_controller.rb +1 -1
  14. data/fixtures/rails_4_1_8/config/initializers/secure_headers.rb +2 -3
  15. data/fixtures/rails_4_1_8/spec/controllers/other_things_controller_spec.rb +1 -1
  16. data/lib/secure_headers/headers/content_security_policy.rb +41 -41
  17. data/lib/secure_headers/headers/public_key_pins.rb +1 -0
  18. data/lib/secure_headers/headers/strict_transport_security.rb +1 -0
  19. data/lib/secure_headers/headers/x_content_type_options.rb +2 -1
  20. data/lib/secure_headers/headers/x_download_options.rb +1 -0
  21. data/lib/secure_headers/headers/x_frame_options.rb +1 -0
  22. data/lib/secure_headers/headers/x_permitted_cross_domain_policies.rb +1 -0
  23. data/lib/secure_headers/headers/x_xss_protection.rb +1 -0
  24. data/lib/secure_headers/version.rb +1 -1
  25. data/lib/secure_headers.rb +59 -27
  26. data/secure_headers.gemspec +1 -1
  27. data/spec/lib/secure_headers/headers/content_security_policy/script_hash_middleware_spec.rb +2 -2
  28. data/spec/lib/secure_headers/headers/content_security_policy_spec.rb +64 -36
  29. data/spec/lib/secure_headers/headers/x_content_type_options_spec.rb +1 -1
  30. data/spec/lib/secure_headers/headers/x_download_options_spec.rb +1 -1
  31. data/spec/lib/secure_headers/headers/x_permitted_cross_domain_policies_spec.rb +1 -1
  32. data/spec/lib/secure_headers_spec.rb +51 -5
  33. data/spec/spec_helper.rb +8 -1
  34. metadata +72 -59
  35. data/fixtures/rails_3_2_12_no_init/app/controllers/other_things_controller.rb +0 -6
  36. /data/fixtures/{rails_3_2_12 → rails_3_2_22}/.rspec +0 -0
  37. /data/fixtures/{rails_3_2_12 → rails_3_2_22}/README.rdoc +0 -0
  38. /data/fixtures/{rails_3_2_12 → rails_3_2_22}/Rakefile +0 -0
  39. /data/fixtures/{rails_3_2_12 → rails_3_2_22}/app/controllers/application_controller.rb +0 -0
  40. /data/fixtures/{rails_3_2_12 → rails_3_2_22}/app/controllers/other_things_controller.rb +0 -0
  41. /data/fixtures/{rails_3_2_12 → rails_3_2_22}/app/controllers/things_controller.rb +0 -0
  42. /data/fixtures/{rails_3_2_12 → rails_3_2_22}/app/models/.gitkeep +0 -0
  43. /data/fixtures/{rails_3_2_12 → rails_3_2_22}/app/views/layouts/application.html.erb +0 -0
  44. /data/fixtures/{rails_3_2_12 → rails_3_2_22}/app/views/other_things/index.html.erb +0 -0
  45. /data/fixtures/{rails_3_2_12 → rails_3_2_22}/app/views/things/index.html.erb +0 -0
  46. /data/fixtures/{rails_3_2_12 → rails_3_2_22}/config/application.rb +0 -0
  47. /data/fixtures/{rails_3_2_12 → rails_3_2_22}/config/boot.rb +0 -0
  48. /data/fixtures/{rails_3_2_12 → rails_3_2_22}/config/environment.rb +0 -0
  49. /data/fixtures/{rails_3_2_12 → rails_3_2_22}/config/environments/test.rb +0 -0
  50. /data/fixtures/{rails_3_2_12 → rails_3_2_22}/config/routes.rb +0 -0
  51. /data/fixtures/{rails_3_2_12 → rails_3_2_22}/config/script_hashes.yml +0 -0
  52. /data/fixtures/{rails_3_2_12 → rails_3_2_22}/config.ru +0 -0
  53. /data/fixtures/{rails_3_2_12 → rails_3_2_22}/lib/assets/.gitkeep +0 -0
  54. /data/fixtures/{rails_3_2_12 → rails_3_2_22}/lib/tasks/.gitkeep +0 -0
  55. /data/fixtures/{rails_3_2_12 → rails_3_2_22}/log/.gitkeep +0 -0
  56. /data/fixtures/{rails_3_2_12 → rails_3_2_22}/spec/controllers/things_controller_spec.rb +0 -0
  57. /data/fixtures/{rails_3_2_12 → rails_3_2_22}/spec/spec_helper.rb +0 -0
  58. /data/fixtures/{rails_3_2_12 → rails_3_2_22}/vendor/assets/javascripts/.gitkeep +0 -0
  59. /data/fixtures/{rails_3_2_12 → rails_3_2_22}/vendor/assets/stylesheets/.gitkeep +0 -0
  60. /data/fixtures/{rails_3_2_12 → rails_3_2_22}/vendor/plugins/.gitkeep +0 -0
  61. /data/fixtures/{rails_3_2_12_no_init → rails_3_2_22_no_init}/.rspec +0 -0
  62. /data/fixtures/{rails_3_2_12_no_init → rails_3_2_22_no_init}/README.rdoc +0 -0
  63. /data/fixtures/{rails_3_2_12_no_init → rails_3_2_22_no_init}/Rakefile +0 -0
  64. /data/fixtures/{rails_3_2_12_no_init → rails_3_2_22_no_init}/app/controllers/application_controller.rb +0 -0
  65. /data/fixtures/{rails_3_2_12_no_init → rails_3_2_22_no_init}/app/controllers/things_controller.rb +0 -0
  66. /data/fixtures/{rails_3_2_12_no_init → rails_3_2_22_no_init}/app/models/.gitkeep +0 -0
  67. /data/fixtures/{rails_3_2_12_no_init → rails_3_2_22_no_init}/app/views/layouts/application.html.erb +0 -0
  68. /data/fixtures/{rails_3_2_12_no_init → rails_3_2_22_no_init}/app/views/other_things/index.html.erb +0 -0
  69. /data/fixtures/{rails_3_2_12_no_init → rails_3_2_22_no_init}/app/views/things/index.html.erb +0 -0
  70. /data/fixtures/{rails_3_2_12_no_init → rails_3_2_22_no_init}/config/application.rb +0 -0
  71. /data/fixtures/{rails_3_2_12_no_init → rails_3_2_22_no_init}/config/boot.rb +0 -0
  72. /data/fixtures/{rails_3_2_12_no_init → rails_3_2_22_no_init}/config/environment.rb +0 -0
  73. /data/fixtures/{rails_3_2_12_no_init → rails_3_2_22_no_init}/config/environments/test.rb +0 -0
  74. /data/fixtures/{rails_3_2_12_no_init → rails_3_2_22_no_init}/config/routes.rb +0 -0
  75. /data/fixtures/{rails_3_2_12_no_init → rails_3_2_22_no_init}/config.ru +0 -0
  76. /data/fixtures/{rails_3_2_12_no_init → rails_3_2_22_no_init}/lib/assets/.gitkeep +0 -0
  77. /data/fixtures/{rails_3_2_12_no_init → rails_3_2_22_no_init}/lib/tasks/.gitkeep +0 -0
  78. /data/fixtures/{rails_3_2_12_no_init → rails_3_2_22_no_init}/log/.gitkeep +0 -0
  79. /data/fixtures/{rails_3_2_12_no_init → rails_3_2_22_no_init}/spec/controllers/things_controller_spec.rb +0 -0
  80. /data/fixtures/{rails_3_2_12_no_init → rails_3_2_22_no_init}/spec/spec_helper.rb +0 -0
  81. /data/fixtures/{rails_3_2_12_no_init → rails_3_2_22_no_init}/vendor/assets/javascripts/.gitkeep +0 -0
  82. /data/fixtures/{rails_3_2_12_no_init → rails_3_2_22_no_init}/vendor/assets/stylesheets/.gitkeep +0 -0
  83. /data/fixtures/{rails_3_2_12_no_init → rails_3_2_22_no_init}/vendor/plugins/.gitkeep +0 -0
data/fixtures/rails_3_2_12_no_init/app/controllers/other_things_controller.rb DELETED
@@ -1,6 +0,0 @@
1
- class OtherThingsController < ApplicationController
2
- ensure_security_headers :csp => {:default_src => 'self', :disable_fill_missing => true}
3
- def index
4
-
5
- end
6
- end
/data/fixtures/{rails_3_2_12 → rails_3_2_22}/.rspec RENAMED
File without changes
/data/fixtures/{rails_3_2_12 → rails_3_2_22}/Rakefile RENAMED
File without changes
/data/fixtures/{rails_3_2_12 → rails_3_2_22}/config.ru RENAMED
File without changes