secure_headers 3.2.0 → 3.7.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (50) hide show
  1. checksums.yaml +4 -4
  2. data/.github/ISSUE_TEMPLATE.md +41 -0
  3. data/.github/PULL_REQUEST_TEMPLATE.md +20 -0
  4. data/.rspec +1 -0
  5. data/.ruby-version +1 -1
  6. data/.travis.yml +2 -0
  7. data/CHANGELOG.md +140 -1
  8. data/CODE_OF_CONDUCT.md +46 -0
  9. data/CONTRIBUTING.md +41 -0
  10. data/Gemfile +3 -1
  11. data/LICENSE +4 -199
  12. data/README.md +74 -334
  13. data/docs/HPKP.md +17 -0
  14. data/docs/cookies.md +50 -0
  15. data/docs/hashes.md +64 -0
  16. data/docs/named_overrides_and_appends.md +107 -0
  17. data/docs/per_action_configuration.md +105 -0
  18. data/docs/sinatra.md +25 -0
  19. data/lib/secure_headers/configuration.rb +120 -39
  20. data/lib/secure_headers/headers/clear_site_data.rb +54 -0
  21. data/lib/secure_headers/headers/content_security_policy.rb +89 -32
  22. data/lib/secure_headers/headers/content_security_policy_config.rb +161 -0
  23. data/lib/secure_headers/headers/expect_certificate_transparency.rb +70 -0
  24. data/lib/secure_headers/headers/policy_management.rb +84 -49
  25. data/lib/secure_headers/headers/public_key_pins.rb +1 -1
  26. data/lib/secure_headers/headers/referrer_policy.rb +36 -0
  27. data/lib/secure_headers/headers/strict_transport_security.rb +1 -1
  28. data/lib/secure_headers/headers/x_content_type_options.rb +1 -1
  29. data/lib/secure_headers/headers/x_download_options.rb +1 -1
  30. data/lib/secure_headers/headers/x_frame_options.rb +1 -1
  31. data/lib/secure_headers/headers/x_permitted_cross_domain_policies.rb +1 -1
  32. data/lib/secure_headers/headers/x_xss_protection.rb +1 -1
  33. data/lib/secure_headers/middleware.rb +6 -0
  34. data/lib/secure_headers/railtie.rb +1 -1
  35. data/lib/secure_headers/view_helper.rb +13 -7
  36. data/lib/secure_headers.rb +138 -55
  37. data/lib/tasks/tasks.rake +5 -4
  38. data/secure_headers.gemspec +2 -2
  39. data/spec/lib/secure_headers/configuration_spec.rb +5 -5
  40. data/spec/lib/secure_headers/headers/clear_site_data_spec.rb +86 -0
  41. data/spec/lib/secure_headers/headers/content_security_policy_spec.rb +69 -12
  42. data/spec/lib/secure_headers/headers/expect_certificate_spec.rb +42 -0
  43. data/spec/lib/secure_headers/headers/policy_management_spec.rb +28 -36
  44. data/spec/lib/secure_headers/headers/referrer_policy_spec.rb +72 -0
  45. data/spec/lib/secure_headers/middleware_spec.rb +31 -1
  46. data/spec/lib/secure_headers/view_helpers_spec.rb +19 -7
  47. data/spec/lib/secure_headers_spec.rb +344 -44
  48. data/spec/spec_helper.rb +8 -3
  49. data/upgrading-to-3-0.md +13 -10
  50. metadata +24 -4
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: secure_headers
3
3
  version: !ruby/object:Gem::Version
4
- version: 3.2.0
4
+ version: 3.7.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Neil Matatall
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2016-04-18 00:00:00.000000000 Z
11
+ date: 2017-08-25 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: rake
@@ -38,31 +38,45 @@ dependencies:
38
38
  - - ">="
39
39
  - !ruby/object:Gem::Version
40
40
  version: '0'
41
- description: Security related headers all in one gem.
41
+ description: Manages application of security headers with many safe defaults.
42
42
  email:
43
43
  - neil.matatall@gmail.com
44
44
  executables: []
45
45
  extensions: []
46
46
  extra_rdoc_files: []
47
47
  files:
48
+ - ".github/ISSUE_TEMPLATE.md"
49
+ - ".github/PULL_REQUEST_TEMPLATE.md"
48
50
  - ".gitignore"
49
51
  - ".rspec"
50
52
  - ".ruby-gemset"
51
53
  - ".ruby-version"
52
54
  - ".travis.yml"
53
55
  - CHANGELOG.md
56
+ - CODE_OF_CONDUCT.md
57
+ - CONTRIBUTING.md
54
58
  - Gemfile
55
59
  - Guardfile
56
60
  - LICENSE
57
61
  - README.md
58
62
  - Rakefile
63
+ - docs/HPKP.md
64
+ - docs/cookies.md
65
+ - docs/hashes.md
66
+ - docs/named_overrides_and_appends.md
67
+ - docs/per_action_configuration.md
68
+ - docs/sinatra.md
59
69
  - lib/secure_headers.rb
60
70
  - lib/secure_headers/configuration.rb
61
71
  - lib/secure_headers/hash_helper.rb
72
+ - lib/secure_headers/headers/clear_site_data.rb
62
73
  - lib/secure_headers/headers/content_security_policy.rb
74
+ - lib/secure_headers/headers/content_security_policy_config.rb
63
75
  - lib/secure_headers/headers/cookie.rb
76
+ - lib/secure_headers/headers/expect_certificate_transparency.rb
64
77
  - lib/secure_headers/headers/policy_management.rb
65
78
  - lib/secure_headers/headers/public_key_pins.rb
79
+ - lib/secure_headers/headers/referrer_policy.rb
66
80
  - lib/secure_headers/headers/strict_transport_security.rb
67
81
  - lib/secure_headers/headers/x_content_type_options.rb
68
82
  - lib/secure_headers/headers/x_download_options.rb
@@ -76,10 +90,13 @@ files:
76
90
  - lib/tasks/tasks.rake
77
91
  - secure_headers.gemspec
78
92
  - spec/lib/secure_headers/configuration_spec.rb
93
+ - spec/lib/secure_headers/headers/clear_site_data_spec.rb
79
94
  - spec/lib/secure_headers/headers/content_security_policy_spec.rb
80
95
  - spec/lib/secure_headers/headers/cookie_spec.rb
96
+ - spec/lib/secure_headers/headers/expect_certificate_spec.rb
81
97
  - spec/lib/secure_headers/headers/policy_management_spec.rb
82
98
  - spec/lib/secure_headers/headers/public_key_pins_spec.rb
99
+ - spec/lib/secure_headers/headers/referrer_policy_spec.rb
83
100
  - spec/lib/secure_headers/headers/strict_transport_security_spec.rb
84
101
  - spec/lib/secure_headers/headers/x_content_type_options_spec.rb
85
102
  - spec/lib/secure_headers/headers/x_download_options_spec.rb
@@ -111,17 +128,20 @@ required_rubygems_version: !ruby/object:Gem::Requirement
111
128
  version: '0'
112
129
  requirements: []
113
130
  rubyforge_project:
114
- rubygems_version: 2.4.5.1
131
+ rubygems_version: 2.5.2
115
132
  signing_key:
116
133
  specification_version: 4
117
134
  summary: Add easily configured security headers to responses including content-security-policy,
118
135
  x-frame-options, strict-transport-security, etc.
119
136
  test_files:
120
137
  - spec/lib/secure_headers/configuration_spec.rb
138
+ - spec/lib/secure_headers/headers/clear_site_data_spec.rb
121
139
  - spec/lib/secure_headers/headers/content_security_policy_spec.rb
122
140
  - spec/lib/secure_headers/headers/cookie_spec.rb
141
+ - spec/lib/secure_headers/headers/expect_certificate_spec.rb
123
142
  - spec/lib/secure_headers/headers/policy_management_spec.rb
124
143
  - spec/lib/secure_headers/headers/public_key_pins_spec.rb
144
+ - spec/lib/secure_headers/headers/referrer_policy_spec.rb
125
145
  - spec/lib/secure_headers/headers/strict_transport_security_spec.rb
126
146
  - spec/lib/secure_headers/headers/x_content_type_options_spec.rb
127
147
  - spec/lib/secure_headers/headers/x_download_options_spec.rb