secure_headers 3.4.0 → 3.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (20) hide show
  1. checksums.yaml +4 -4
  2. data/.ruby-version +1 -1
  3. data/CHANGELOG.md +66 -0
  4. data/Gemfile +1 -0
  5. data/README.md +89 -9
  6. data/lib/secure_headers/configuration.rb +68 -36
  7. data/lib/secure_headers/headers/content_security_policy.rb +62 -36
  8. data/lib/secure_headers/headers/content_security_policy_config.rb +128 -0
  9. data/lib/secure_headers/headers/policy_management.rb +48 -30
  10. data/lib/secure_headers/view_helper.rb +8 -0
  11. data/lib/secure_headers.rb +131 -55
  12. data/secure_headers.gemspec +1 -1
  13. data/spec/lib/secure_headers/configuration_spec.rb +5 -5
  14. data/spec/lib/secure_headers/headers/content_security_policy_spec.rb +2 -2
  15. data/spec/lib/secure_headers/headers/policy_management_spec.rb +25 -34
  16. data/spec/lib/secure_headers/middleware_spec.rb +13 -1
  17. data/spec/lib/secure_headers/view_helpers_spec.rb +19 -6
  18. data/spec/lib/secure_headers_spec.rb +281 -40
  19. data/spec/spec_helper.rb +3 -2
  20. metadata +3 -2
data/spec/spec_helper.rb CHANGED
@@ -21,11 +21,12 @@ USER_AGENTS = {
21
21
  ios6: "Mozilla/5.0 (iPhone; CPU iPhone OS 614 like Mac OS X) AppleWebKit/536.26 (KHTML like Gecko) Version/6.0 Mobile/10B350 Safari/8536.25",
22
22
  safari5: "Mozilla/5.0 (iPad; CPU OS 5_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko ) Version/5.1 Mobile/9B176 Safari/7534.48.3",
23
23
  safari5_1: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_3) AppleWebKit/534.55.3 (KHTML, like Gecko) Version/5.1.3 Safari/534.53.10",
24
- safari6: "Mozilla/5.0 (Macintosh; Intel Mac OS X 1084) AppleWebKit/536.30.1 (KHTML like Gecko) Version/6.0.5 Safari/536.30.1"
24
+ safari6: "Mozilla/5.0 (Macintosh; Intel Mac OS X 1084) AppleWebKit/536.30.1 (KHTML like Gecko) Version/6.0.5 Safari/536.30.1",
25
+ safari10: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_1) AppleWebKit/602.2.11 (KHTML, like Gecko) Version/10.0.1 Safari/602.2.11"
25
26
  }
26
27
 
27
28
  def expect_default_values(hash)
28
- expect(hash[SecureHeaders::CSP::HEADER_NAME]).to eq(SecureHeaders::CSP::DEFAULT_VALUE)
29
+ expect(hash[SecureHeaders::ContentSecurityPolicyConfig::HEADER_NAME]).to eq("default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data:; object-src 'none'; script-src https:; style-src 'self' https: 'unsafe-inline'")
29
30
  expect(hash[SecureHeaders::XFrameOptions::HEADER_NAME]).to eq(SecureHeaders::XFrameOptions::DEFAULT_VALUE)
30
31
  expect(hash[SecureHeaders::XDownloadOptions::HEADER_NAME]).to eq(SecureHeaders::XDownloadOptions::DEFAULT_VALUE)
31
32
  expect(hash[SecureHeaders::StrictTransportSecurity::HEADER_NAME]).to eq(SecureHeaders::StrictTransportSecurity::DEFAULT_VALUE)
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: secure_headers
3
3
  version: !ruby/object:Gem::Version
4
- version: 3.4.0
4
+ version: 3.5.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Neil Matatall
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2016-07-18 00:00:00.000000000 Z
11
+ date: 2016-10-12 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: rake
@@ -62,6 +62,7 @@ files:
62
62
  - lib/secure_headers/configuration.rb
63
63
  - lib/secure_headers/hash_helper.rb
64
64
  - lib/secure_headers/headers/content_security_policy.rb
65
+ - lib/secure_headers/headers/content_security_policy_config.rb
65
66
  - lib/secure_headers/headers/cookie.rb
66
67
  - lib/secure_headers/headers/policy_management.rb
67
68
  - lib/secure_headers/headers/public_key_pins.rb