simple-hsts 0.1.2

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 463f4e65649aac3f42088094842e7413aa906581d376d6a665d97aba1d082e2c
+  data.tar.gz: b13b4cea8754491c0bd63ad776fecec749a4a1febd101647971a43f7eea70348
+SHA512:
+  metadata.gz: ea0ad6d7f6281f232686241e40898606a728575d085bf49ebabcd7d50ba8b3b44d3573ed64f97fe4c7d62b371c7bd5dc9734f51d0fd48c45d241c9452f7ec94c
+  data.tar.gz: 295323910797801b77e23d99fb09886b63a71ef46ab5832c1b678152b7800993298c43125ed7026615fb940a29292091c0b48261fcf52925e7d1b77e96895002

data/lib/simple-hsts.rb

@@ -0,0 +1,38 @@
+module Rack
+  module TlsTools
+
+    # http://en.wikipedia.org/wiki/Strict_Transport_Security
+    class Hsts
+
+      # a year
+      DEFAULT_MAX_AGE = 3600 * 24 * 365
+
+      def initialize(app, options = {})
+        @app = app
+        @options = {
+          enable: true,
+          max_age: DEFAULT_MAX_AGE,
+          subdomains: false,
+        }.merge(options)
+      end
+
+      def call(env)
+        @app.call(env).tap do |response|
+          @request = Rack::Request.new env
+          if @request.ssl? && @options[:enable]
+            add_hsts_header! response[1]
+          end
+        end
+      end
+
+      private
+
+      def add_hsts_header!(headers)
+        val = "max-age=#{@options[:max_age].to_i}"
+        val += "; includeSubDomains" if @options[:subdomains]
+        headers['Strict-Transport-Security'] = val
+      end
+
+    end
+  end
+end

metadata

@@ -0,0 +1,42 @@
+--- !ruby/object:Gem::Specification
+name: simple-hsts
+version: !ruby/object:Gem::Version
+  version: 0.1.2
+platform: ruby
+authors:
+- SuperJenn
+autorequire:
+bindir: bin
+cert_chain: []
+date: 2024-04-01 00:00:00.000000000 Z
+dependencies: []
+description:
+email:
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/simple-hsts.rb
+homepage:
+licenses: []
+metadata: {}
+post_install_message:
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.5.7
+signing_key:
+specification_version: 4
+summary: Simple way to add HSTS to Rails apps
+test_files: []