secure_headers 3.4.1 → 3.5.0.pre
Sign up to get free protection for your applications and to get access to all the features.
Potentially problematic release.
This version of secure_headers might be problematic. Click here for more details.
- checksums.yaml +4 -4
- data/CHANGELOG.md +4 -0
- data/README.md +32 -3
- data/lib/secure_headers.rb +122 -56
- data/lib/secure_headers/configuration.rb +56 -35
- data/lib/secure_headers/headers/content_security_policy.rb +60 -35
- data/lib/secure_headers/headers/content_security_policy_config.rb +128 -0
- data/lib/secure_headers/headers/policy_management.rb +13 -21
- data/secure_headers.gemspec +1 -1
- data/spec/lib/secure_headers/configuration_spec.rb +5 -5
- data/spec/lib/secure_headers/headers/content_security_policy_spec.rb +2 -2
- data/spec/lib/secure_headers/headers/policy_management_spec.rb +25 -34
- data/spec/lib/secure_headers/middleware_spec.rb +1 -1
- data/spec/lib/secure_headers/view_helpers_spec.rb +9 -6
- data/spec/lib/secure_headers_spec.rb +236 -58
- data/spec/spec_helper.rb +1 -1
- metadata +5 -4
data/spec/spec_helper.rb
CHANGED
|
@@ -25,7 +25,7 @@ USER_AGENTS = {
|
|
|
25
25
|
}
|
|
26
26
|
|
|
27
27
|
def expect_default_values(hash)
|
|
28
|
-
expect(hash[SecureHeaders::
|
|
28
|
+
expect(hash[SecureHeaders::ContentSecurityPolicyConfig::HEADER_NAME]).to eq("default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data:; object-src 'none'; script-src https:; style-src 'self' https: 'unsafe-inline'")
|
|
29
29
|
expect(hash[SecureHeaders::XFrameOptions::HEADER_NAME]).to eq(SecureHeaders::XFrameOptions::DEFAULT_VALUE)
|
|
30
30
|
expect(hash[SecureHeaders::XDownloadOptions::HEADER_NAME]).to eq(SecureHeaders::XDownloadOptions::DEFAULT_VALUE)
|
|
31
31
|
expect(hash[SecureHeaders::StrictTransportSecurity::HEADER_NAME]).to eq(SecureHeaders::StrictTransportSecurity::DEFAULT_VALUE)
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: secure_headers
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 3.
|
|
4
|
+
version: 3.5.0.pre
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Neil Matatall
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2016-09-
|
|
11
|
+
date: 2016-09-09 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: rake
|
|
@@ -62,6 +62,7 @@ files:
|
|
|
62
62
|
- lib/secure_headers/configuration.rb
|
|
63
63
|
- lib/secure_headers/hash_helper.rb
|
|
64
64
|
- lib/secure_headers/headers/content_security_policy.rb
|
|
65
|
+
- lib/secure_headers/headers/content_security_policy_config.rb
|
|
65
66
|
- lib/secure_headers/headers/cookie.rb
|
|
66
67
|
- lib/secure_headers/headers/policy_management.rb
|
|
67
68
|
- lib/secure_headers/headers/public_key_pins.rb
|
|
@@ -110,9 +111,9 @@ required_ruby_version: !ruby/object:Gem::Requirement
|
|
|
110
111
|
version: '0'
|
|
111
112
|
required_rubygems_version: !ruby/object:Gem::Requirement
|
|
112
113
|
requirements:
|
|
113
|
-
- - "
|
|
114
|
+
- - ">"
|
|
114
115
|
- !ruby/object:Gem::Version
|
|
115
|
-
version:
|
|
116
|
+
version: 1.3.1
|
|
116
117
|
requirements: []
|
|
117
118
|
rubyforge_project:
|
|
118
119
|
rubygems_version: 2.4.5.1
|