secure_headers 3.2.0 → 3.8.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (53) hide show
  1. checksums.yaml +5 -5
  2. data/.github/ISSUE_TEMPLATE.md +41 -0
  3. data/.github/PULL_REQUEST_TEMPLATE.md +20 -0
  4. data/.rspec +1 -0
  5. data/.ruby-version +1 -1
  6. data/.travis.yml +2 -0
  7. data/CHANGELOG.md +160 -1
  8. data/CODE_OF_CONDUCT.md +46 -0
  9. data/CONTRIBUTING.md +41 -0
  10. data/Gemfile +3 -1
  11. data/LICENSE +4 -199
  12. data/README.md +75 -334
  13. data/docs/HPKP.md +17 -0
  14. data/docs/cookies.md +51 -0
  15. data/docs/hashes.md +64 -0
  16. data/docs/named_overrides_and_appends.md +107 -0
  17. data/docs/per_action_configuration.md +105 -0
  18. data/docs/sinatra.md +25 -0
  19. data/lib/secure_headers/configuration.rb +120 -39
  20. data/lib/secure_headers/headers/clear_site_data.rb +54 -0
  21. data/lib/secure_headers/headers/content_security_policy.rb +134 -36
  22. data/lib/secure_headers/headers/content_security_policy_config.rb +162 -0
  23. data/lib/secure_headers/headers/cookie.rb +7 -1
  24. data/lib/secure_headers/headers/expect_certificate_transparency.rb +70 -0
  25. data/lib/secure_headers/headers/policy_management.rb +150 -66
  26. data/lib/secure_headers/headers/public_key_pins.rb +1 -1
  27. data/lib/secure_headers/headers/referrer_policy.rb +36 -0
  28. data/lib/secure_headers/headers/strict_transport_security.rb +1 -1
  29. data/lib/secure_headers/headers/x_content_type_options.rb +1 -1
  30. data/lib/secure_headers/headers/x_download_options.rb +1 -1
  31. data/lib/secure_headers/headers/x_frame_options.rb +1 -1
  32. data/lib/secure_headers/headers/x_permitted_cross_domain_policies.rb +1 -1
  33. data/lib/secure_headers/headers/x_xss_protection.rb +1 -1
  34. data/lib/secure_headers/middleware.rb +6 -0
  35. data/lib/secure_headers/railtie.rb +1 -1
  36. data/lib/secure_headers/utils/cookies_config.rb +6 -4
  37. data/lib/secure_headers/view_helper.rb +13 -7
  38. data/lib/secure_headers.rb +138 -55
  39. data/lib/tasks/tasks.rake +5 -4
  40. data/secure_headers.gemspec +2 -2
  41. data/spec/lib/secure_headers/configuration_spec.rb +5 -5
  42. data/spec/lib/secure_headers/headers/clear_site_data_spec.rb +86 -0
  43. data/spec/lib/secure_headers/headers/content_security_policy_spec.rb +96 -13
  44. data/spec/lib/secure_headers/headers/cookie_spec.rb +22 -25
  45. data/spec/lib/secure_headers/headers/expect_certificate_transparency_spec.rb +42 -0
  46. data/spec/lib/secure_headers/headers/policy_management_spec.rb +59 -36
  47. data/spec/lib/secure_headers/headers/referrer_policy_spec.rb +72 -0
  48. data/spec/lib/secure_headers/middleware_spec.rb +31 -1
  49. data/spec/lib/secure_headers/view_helpers_spec.rb +19 -7
  50. data/spec/lib/secure_headers_spec.rb +344 -44
  51. data/spec/spec_helper.rb +8 -3
  52. data/upgrading-to-3-0.md +13 -10
  53. metadata +24 -5
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: secure_headers
3
3
  version: !ruby/object:Gem::Version
4
- version: 3.2.0
4
+ version: 3.8.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Neil Matatall
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2016-04-18 00:00:00.000000000 Z
11
+ date: 2020-01-21 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: rake
@@ -38,31 +38,45 @@ dependencies:
38
38
  - - ">="
39
39
  - !ruby/object:Gem::Version
40
40
  version: '0'
41
- description: Security related headers all in one gem.
41
+ description: Manages application of security headers with many safe defaults.
42
42
  email:
43
43
  - neil.matatall@gmail.com
44
44
  executables: []
45
45
  extensions: []
46
46
  extra_rdoc_files: []
47
47
  files:
48
+ - ".github/ISSUE_TEMPLATE.md"
49
+ - ".github/PULL_REQUEST_TEMPLATE.md"
48
50
  - ".gitignore"
49
51
  - ".rspec"
50
52
  - ".ruby-gemset"
51
53
  - ".ruby-version"
52
54
  - ".travis.yml"
53
55
  - CHANGELOG.md
56
+ - CODE_OF_CONDUCT.md
57
+ - CONTRIBUTING.md
54
58
  - Gemfile
55
59
  - Guardfile
56
60
  - LICENSE
57
61
  - README.md
58
62
  - Rakefile
63
+ - docs/HPKP.md
64
+ - docs/cookies.md
65
+ - docs/hashes.md
66
+ - docs/named_overrides_and_appends.md
67
+ - docs/per_action_configuration.md
68
+ - docs/sinatra.md
59
69
  - lib/secure_headers.rb
60
70
  - lib/secure_headers/configuration.rb
61
71
  - lib/secure_headers/hash_helper.rb
72
+ - lib/secure_headers/headers/clear_site_data.rb
62
73
  - lib/secure_headers/headers/content_security_policy.rb
74
+ - lib/secure_headers/headers/content_security_policy_config.rb
63
75
  - lib/secure_headers/headers/cookie.rb
76
+ - lib/secure_headers/headers/expect_certificate_transparency.rb
64
77
  - lib/secure_headers/headers/policy_management.rb
65
78
  - lib/secure_headers/headers/public_key_pins.rb
79
+ - lib/secure_headers/headers/referrer_policy.rb
66
80
  - lib/secure_headers/headers/strict_transport_security.rb
67
81
  - lib/secure_headers/headers/x_content_type_options.rb
68
82
  - lib/secure_headers/headers/x_download_options.rb
@@ -76,10 +90,13 @@ files:
76
90
  - lib/tasks/tasks.rake
77
91
  - secure_headers.gemspec
78
92
  - spec/lib/secure_headers/configuration_spec.rb
93
+ - spec/lib/secure_headers/headers/clear_site_data_spec.rb
79
94
  - spec/lib/secure_headers/headers/content_security_policy_spec.rb
80
95
  - spec/lib/secure_headers/headers/cookie_spec.rb
96
+ - spec/lib/secure_headers/headers/expect_certificate_transparency_spec.rb
81
97
  - spec/lib/secure_headers/headers/policy_management_spec.rb
82
98
  - spec/lib/secure_headers/headers/public_key_pins_spec.rb
99
+ - spec/lib/secure_headers/headers/referrer_policy_spec.rb
83
100
  - spec/lib/secure_headers/headers/strict_transport_security_spec.rb
84
101
  - spec/lib/secure_headers/headers/x_content_type_options_spec.rb
85
102
  - spec/lib/secure_headers/headers/x_download_options_spec.rb
@@ -110,18 +127,20 @@ required_rubygems_version: !ruby/object:Gem::Requirement
110
127
  - !ruby/object:Gem::Version
111
128
  version: '0'
112
129
  requirements: []
113
- rubyforge_project:
114
- rubygems_version: 2.4.5.1
130
+ rubygems_version: 3.1.2
115
131
  signing_key:
116
132
  specification_version: 4
117
133
  summary: Add easily configured security headers to responses including content-security-policy,
118
134
  x-frame-options, strict-transport-security, etc.
119
135
  test_files:
120
136
  - spec/lib/secure_headers/configuration_spec.rb
137
+ - spec/lib/secure_headers/headers/clear_site_data_spec.rb
121
138
  - spec/lib/secure_headers/headers/content_security_policy_spec.rb
122
139
  - spec/lib/secure_headers/headers/cookie_spec.rb
140
+ - spec/lib/secure_headers/headers/expect_certificate_transparency_spec.rb
123
141
  - spec/lib/secure_headers/headers/policy_management_spec.rb
124
142
  - spec/lib/secure_headers/headers/public_key_pins_spec.rb
143
+ - spec/lib/secure_headers/headers/referrer_policy_spec.rb
125
144
  - spec/lib/secure_headers/headers/strict_transport_security_spec.rb
126
145
  - spec/lib/secure_headers/headers/x_content_type_options_spec.rb
127
146
  - spec/lib/secure_headers/headers/x_download_options_spec.rb