subdomainbox 0.3.5 → 0.5.0

data/VERSION

@@ -1 +1 @@
-0.3.5
+0.5.0

data/lib/generators/subdomainbox_generator.rb

@@ -1,7 +1,7 @@
 class SubdomainboxGenerator < Rails::Generators::Base
 
   def create_initializer_file
-    create_file "config/initializers/xsrf_token_secret.rb", "XSRF_TOKEN_SECRET = '#{SecureRandom.base64(48)}'"
+    create_file "config/initializers/csrf_token_secret.rb", "CSRF_TOKEN_SECRET = '#{SecureRandom.base64(48)}'"
   end
 
 end

data/lib/subdomainbox/{secure_xsrf_token.rb → secure_csrf_token.rb}

@@ -9,9 +9,9 @@ module ActionController #:nodoc:
       alias_method :original_form_authenticity_token, :form_authenticity_token
       # Sets the token value for the current session.
       def form_authenticity_token
-        raise 'XSRF token secret must be defined' if XSRF_TOKEN_SECRET.nil? || XSRF_TOKEN_SECRET.empty?
+        raise 'CSRF token secret must be defined' if CSRF_TOKEN_SECRET.nil? || CSRF_TOKEN_SECRET.empty?
         if request.session_options[:id]
-          Digest::SHA1.hexdigest("#{XSRF_TOKEN_SECRET}#{request.session_options[:id]}#{request.subdomain}")
+          Digest::SHA1.hexdigest("#{CSRF_TOKEN_SECRET}#{request.session_options[:id]}#{request.subdomain}")
         else
           original_form_authenticity_token
         end

data/lib/subdomainbox.rb

@@ -1,2 +1,2 @@
 require 'subdomainbox/subdomainbox.rb'
-require 'subdomainbox/secure_xsrf_token.rb'
+require 'subdomainbox/secure_csrf_token.rb'

data/spec/{secure_xsrf_token_spec.rb → secure_csrf_token_spec.rb}

@@ -12,9 +12,9 @@ describe "ActionController::RequestForgeryProtection" do
 
   describe "#form_authenticity_token" do
 
-    context "when XSRF_TOKEN_SECRET is blank" do
+    context "when CSRF_TOKEN_SECRET is blank" do
       it "should raise an exception" do
-        XSRF_TOKEN_SECRET = ''
+        CSRF_TOKEN_SECRET = ''
         lambda {
           form_authenticity_token
         }.should raise_error
@@ -23,9 +23,9 @@ describe "ActionController::RequestForgeryProtection" do
 
     context "when the user has a session" do
 
-      it "should be generated from the XSRF_TOKEN_SECRET salted with the session id and the subdomain" do
+      it "should be generated from the CSRF_TOKEN_SECRET salted with the session id and the subdomain" do
         request.stub_chain(:session_options, :[]).and_return('abc')
-        XSRF_TOKEN_SECRET = 'xyz'
+        CSRF_TOKEN_SECRET = 'xyz'
         form_authenticity_token.should == Digest::SHA1.hexdigest('xyzabcpets')
       end
 

data/spec/spec_helper.rb

@@ -14,7 +14,6 @@ end
 
 require 'rspec'
 require 'subdomainbox'
-require 'secure_xsrf_token'
 require 'bundler'
 Bundler.require
 require 'pry'

data/subdomainbox.gemspec

@@ -5,11 +5,11 @@
 
 Gem::Specification.new do |s|
   s.name = "subdomainbox"
-  s.version = "0.3.5"
+  s.version = "0.5.0"
 
   s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
   s.authors = ["Daniel Nelson"]
-  s.date = "2013-03-18"
+  s.date = "2013-03-23"
   s.description = "use subdomains to prevent XSS from accessing your entire application if it should happen to be injected into some page in your app"
   s.email = "dnelson@centresource.com"
   s.extra_rdoc_files = [
@@ -28,9 +28,9 @@ Gem::Specification.new do |s|
     "VERSION",
     "lib/generators/subdomainbox_generator.rb",
     "lib/subdomainbox.rb",
-    "lib/subdomainbox/secure_xsrf_token.rb",
+    "lib/subdomainbox/secure_csrf_token.rb",
     "lib/subdomainbox/subdomainbox.rb",
-    "spec/secure_xsrf_token_spec.rb",
+    "spec/secure_csrf_token_spec.rb",
     "spec/spec_helper.rb",
     "spec/subdomainbox_spec.rb",
     "subdomainbox.gemspec"

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: subdomainbox
 version: !ruby/object:Gem::Version
-  version: 0.3.5
+  version: 0.5.0
   prerelease: 
 platform: ruby
 authors:
@@ -9,11 +9,11 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2013-03-18 00:00:00.000000000 Z
+date: 2013-03-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: uuidtools
-  requirement: &2156257140 !ruby/object:Gem::Requirement
+  requirement: &2160194360 !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ! '>='
@@ -21,10 +21,10 @@ dependencies:
         version: '0'
   type: :runtime
   prerelease: false
-  version_requirements: *2156257140
+  version_requirements: *2160194360
 - !ruby/object:Gem::Dependency
   name: rspec
-  requirement: &2156255820 !ruby/object:Gem::Requirement
+  requirement: &2160212440 !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - =
@@ -32,10 +32,10 @@ dependencies:
         version: 2.10.0
   type: :development
   prerelease: false
-  version_requirements: *2156255820
+  version_requirements: *2160212440
 - !ruby/object:Gem::Dependency
   name: jeweler
-  requirement: &2155991220 !ruby/object:Gem::Requirement
+  requirement: &2160210200 !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ~>
@@ -43,10 +43,10 @@ dependencies:
         version: 1.8.4
   type: :development
   prerelease: false
-  version_requirements: *2155991220
+  version_requirements: *2160210200
 - !ruby/object:Gem::Dependency
   name: pry
-  requirement: &2155989560 !ruby/object:Gem::Requirement
+  requirement: &2160208380 !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ! '>='
@@ -54,10 +54,10 @@ dependencies:
         version: '0'
   type: :development
   prerelease: false
-  version_requirements: *2155989560
+  version_requirements: *2160208380
 - !ruby/object:Gem::Dependency
   name: pry-nav
-  requirement: &2155988340 !ruby/object:Gem::Requirement
+  requirement: &2160207140 !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ! '>='
@@ -65,10 +65,10 @@ dependencies:
         version: '0'
   type: :development
   prerelease: false
-  version_requirements: *2155988340
+  version_requirements: *2160207140
 - !ruby/object:Gem::Dependency
   name: pry-stack_explorer
-  requirement: &2155986300 !ruby/object:Gem::Requirement
+  requirement: &2160221580 !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ! '>='
@@ -76,7 +76,7 @@ dependencies:
         version: '0'
   type: :development
   prerelease: false
-  version_requirements: *2155986300
+  version_requirements: *2160221580
 description: use subdomains to prevent XSS from accessing your entire application
   if it should happen to be injected into some page in your app
 email: dnelson@centresource.com
@@ -97,9 +97,9 @@ files:
 - VERSION
 - lib/generators/subdomainbox_generator.rb
 - lib/subdomainbox.rb
-- lib/subdomainbox/secure_xsrf_token.rb
+- lib/subdomainbox/secure_csrf_token.rb
 - lib/subdomainbox/subdomainbox.rb
-- spec/secure_xsrf_token_spec.rb
+- spec/secure_csrf_token_spec.rb
 - spec/spec_helper.rb
 - spec/subdomainbox_spec.rb
 - subdomainbox.gemspec
@@ -118,7 +118,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: '0'
       segments:
       - 0
-      hash: 4167418132178979479
+      hash: 3040467631251113131
 required_rubygems_version: !ruby/object:Gem::Requirement
   none: false
   requirements: